Rota Labs Mobile app studio

Privacy Policy

Last updated: October 9, 2026

Derin is a screen-time and app-blocker app that helps you set limits on distracting apps and websites on your phone. It is published by Rota Labs. This policy is written to meet the GDPR and the Turkish Personal Data Protection Law (KVKK).

In short: Derin has no accounts. Your screen time, your app and website names, and your blocking selections never leave your phone and are never sent to any server. Only purchase information, anonymous crash reports and anonymous usage statistics (which you can turn off) leave the device. There are no ads and we do not sell your data.

1. Who we are

The data controller is Rota Labs. For questions and requests:

2. Data that stays on your phone

The following is stored only on your device. It is not sent to Rota Labs or to any third party:

  • Your schedules, focus sessions, breaks and 7-day challenge progress.
  • The apps, categories and websites you choose to block.
  • Your screen time and daily limit status.
  • Your name (optional), goal and settings entered during onboarding.

iOS: Derin uses Apple's Screen Time APIs. The apps and sites you pick are handed to the app by Apple as opaque tokens; Derin cannot see their names, and the tokens never leave the device.

Android: Derin uses the usage access permission and an Accessibility Service (see below).

3. Android Accessibility Service

On Android, Derin uses the Accessibility Service only to detect which app or website is currently in front, so it can show a blocking screen over an app or site you chose to block. You grant this permission yourself and can turn it off at any time in Android settings.

  • What it sees: the package name of the foreground app and the domain of the website open in a browser.
  • What it is used for: only to match against the apps and sites you selected and show the blocking screen.
  • What it does not do: it does not read or record what you type, passwords, messages or screen content, and it does not act on your behalf.
  • Where the data goes: nowhere. It is processed momentarily on the device and never leaves it.

4. Data that leaves your phone

No screen time data is sent to any of the following:

  • Purchases (RevenueCat, Apple, Google): to manage your subscription status, an anonymous user ID, the purchase receipt or token, your country and the app version are sent to RevenueCat. We never see your payment details; payment is handled directly by the App Store or Google Play.
  • Anonymous usage statistics (Google Analytics for Firebase): events are sent to understand which screens and features are used (for example onboarding step, paywall opened, session started). Events do not contain app names, package names, website names, screen time or free text; counts are sent in ranges. No advertising ID is used. You can turn this off at any time in Settings › Data › "Anonymous usage statistics"; when it is off, no analytics are collected.
  • Crash reports (Firebase Crashlytics): when the app crashes, a stack trace, device model and OS version are sent so we can fix the bug. No user names, text or screenshots are sent.

These providers (Google and RevenueCat) may process data on their own infrastructure outside your country, including outside Turkey and the EEA, which may count as an international transfer under the GDPR and KVKK art. 9. The data is anonymous as described above and does not directly identify you.

5. Ads and tracking

Derin has no ads and no advertising SDKs, and your data is never used for advertising or sold. There is no cross-app tracking, which is why Apple's App Tracking Transparency prompt is not shown.

6. Retention

Data on your phone stays on your device until you delete it. Anonymous analytics events and crash reports are kept for the limited periods configured in Firebase (crash reports for about 90 days). Purchase records are kept by RevenueCat as long as needed to verify your subscription.

7. Purchases

Subscriptions and one-time purchases are made through the Apple App Store or Google Play, and payment, renewal and cancellation are governed by those stores' own terms and privacy policies. See our Terms of Use for details.

8. Children

Derin is not directed at children under 13, and we do not knowingly collect data from them.

9. Your rights

Under the GDPR and KVKK art. 11 you have the right to ask whether your data is processed, and to access, correct, delete and object. Your own controls in the app are:

  • Settings › Data › Reset data: deletes all local data on the device and removes every block.
  • Anonymous usage statistics: switch it off to stop analytics.
  • Deleting the app also deletes your local data.

Because we have no accounts and no record that identifies you, we usually hold no data that can be linked to you. You can still write to rotalabs@gmail.com and we will reply within 30 days. You also have the right to complain to your local data protection authority.

10. Changes

If we update this policy we will publish it here with a new date, and announce important changes in the app.

Contact: rotalabs@gmail.com