The short version. Out by Seven is built so that almost everything stays on your iPhone: your photos, your location, your door scan and your routine. The only things that leave your phone are your first name, streak and today's progress (so your friends can see them), your subscription status, and anonymous usage statistics. We never sell your data, we show no ads, and we don't track you across other apps or websites.
1. Who we are
Out by Seven (the "app") is provided by Belvicon Ltd, Spyrou Kyprianou 78, Magnum Business Center, 3rd Floor, 3076 Limassol, Cyprus, registered with the Department of Registrar of Companies and Official Receiver of Cyprus under number HE 492478 ("we", "us").
We are the controller of the personal data described in this policy. Contact us about privacy at any time: hello@outbyseven.com.
2. Data that stays on your iPhone
The following is stored only on your device. We do not receive it, and it is not uploaded to our servers or to anyone else:
- Your routine: alarm time, sleep goal, bedtime and wind-down times, and your daily history (when you went to bed, got up and went outside, Rest Days, Rain Checks).
- Your home spot: the location you set as home, used to check that you have stepped outside.
- Your door scan: a mathematical fingerprint of your front door (or chosen object), used to recognise it when your alarm rings. The original photo is not kept.
- Your morning photos: the photos you take outside are saved in the app on your device only. They are never shared with your friends or with us.
- Your locked apps: the apps you choose to lock at night are handled by Apple's Screen Time system. Apple gives the app anonymous tokens only, so we cannot see which apps you chose.
The app analyses your camera image (for the door scan and the outside check) and your location (for the outside check and today's sunrise time) on your device, in the moment, using Apple's built-in technology. This analysis is not sent anywhere.
If you use iCloud or iTunes backups, Apple may include this on-device data in your device backup, under Apple's privacy terms.
3. Data shared with your friends (via Apple iCloud)
To make the friends leaderboard work, the app stores a small profile in the app's public database in Apple's iCloud (CloudKit). This profile contains:
- the first name or nickname you enter;
- your invite code (a random six-character code, not linked to your Apple ID email);
- your current streak and today's progress (in bed, up, outside) with today's date;
- the invite codes of friends you have added, and the code of the person who invited you, if any.
Other Out by Seven users who have your invite code (your friends) can see your name, streak and today's progress. We also use this data to show an anonymous count of how many people are up today. Your photos, location and routine times are never part of this profile.
The profile is stored by Apple. To use it, your iPhone must be signed in to iCloud. We do not receive your Apple ID, email address or iCloud contacts.
Legal basis: providing the friends feature of the app, which is part of the service you use (Art. 6(1)(b) GDPR).
4. Purchases and subscriptions
Subscriptions are sold and charged by Apple through the App Store. We never receive your payment card or bank details. Apple tells us whether you have an active subscription or trial.
We use RevenueCat (RevenueCat, Inc., USA) to manage subscription status. RevenueCat processes an anonymous app user ID, your purchase and transaction history in the app, your country or storefront, and your device type and app version. We use this to unlock the app for you, to apply offers, and to understand subscription numbers.
Legal basis: performing our contract with you (Art. 6(1)(b) GDPR) and our legitimate interest in running and improving the business (Art. 6(1)(f) GDPR).
5. Anonymous usage statistics
We use TelemetryDeck (TelemetryDeck GmbH, Germany), a privacy-focused analytics service, to understand how the app is used, for example how many people finish setup, see the subscription screen or close their first ring. TelemetryDeck receives anonymous events with technical information such as device model, iOS version, app version, language and region. User identifiers are hashed before they leave your device, so we cannot identify you, and no IP addresses are stored.
Legal basis: our legitimate interest in improving the app (Art. 6(1)(f) GDPR). You can object at any time by emailing us.
6. Crash reports
If you have agreed in your iPhone settings to share analytics with app developers, Apple may send us anonymous crash reports and app performance data. You can change this in iOS Settings › Privacy & Security › Analytics & Improvements.
7. Permissions the app asks for
| Permission | What it's used for |
|---|---|
| Alarms | Your morning alarm, which rings even on Silent or in a Focus mode. |
| Camera | The door scan that stops your alarm, and your morning outside photo. Processed on your device. |
| Location (while using the app) | Setting your home spot, checking you've stepped outside, and today's sunrise time. Processed on your device. |
| Notifications | Evening wind-down and bedtime reminders, and trial or streak reminders. Scheduled on your device. |
| Screen Time | Locking the apps you choose at night. Apple keeps your choices private from us. |
You can turn any permission off in iOS Settings. Some features won't work without it.
8. Emails to us
If you email us, we use your email address and message to reply and keep the conversation for as long as needed to help you (normally up to two years). Legal basis: our legitimate interest in answering you (Art. 6(1)(f) GDPR).
9. Our website
outbyseven.com is hosted by Cloudflare, Inc. When you visit it, Cloudflare processes technical data such as your IP address to deliver the page and protect it from attacks. The website uses no cookies for tracking and no advertising tools. Fonts are loaded from Google Fonts, which receives your IP address when the page loads.
10. What we don't do
- We don't sell or rent your personal data.
- We don't show ads and don't use advertising trackers.
- We don't track you across other companies' apps or websites.
- We don't send your photos to any server or AI service. If we ever add a feature that does, we will explain it and ask you first.
11. Who processes data for us
- Apple (App Store, iCloud/CloudKit, crash reports): Apple Distribution International Ltd., Ireland, and Apple Inc., USA.
- RevenueCat, Inc., USA: subscription management.
- TelemetryDeck GmbH, Germany: anonymous usage statistics.
- Cloudflare, Inc., USA: website hosting and email forwarding.
- Google LLC, USA: website fonts and our email inbox.
Where data is transferred outside the European Economic Area, this happens on the basis of the EU–US Data Privacy Framework where the provider is certified, or the European Commission's Standard Contractual Clauses.
12. How long we keep data
- On-device data stays until you delete it in the app or delete the app.
- Your friends profile in iCloud stays until you delete it in the app (see below). Profiles that have not been updated for 24 months may be deleted.
- Subscription records are kept as long as needed for accounting and tax law (up to 7 years).
- Anonymous statistics are kept in aggregated form.
13. Deleting your data
In the app, go to Me › Delete everything. This deletes your routine, history, door scan and photos from your iPhone and removes your friends profile from iCloud. Deleting the app also removes the data stored on your iPhone. You can also email us and we will help.
Deleting your data does not cancel a subscription. Manage or cancel subscriptions in iOS Settings › your name › Subscriptions.
14. Your rights
Under the GDPR you have the right to access your data, correct it, delete it, restrict or object to its processing, and receive it in a portable format. Where we rely on consent, you can withdraw it at any time. To use any of these rights, email hello@outbyseven.com. Because most data stays on your device and the rest is not linked to your name or email, we may ask for your invite code (shown in the app) to find your friends profile.
You also have the right to complain to a data protection authority, for example the Office of the Commissioner for Personal Data Protection in Cyprus (dataprotection.gov.cy) or the authority in the country where you live.
15. Children
Out by Seven is not directed at children under 13, and we do not knowingly collect data from them. In some countries, people under 16 need permission from a parent to use apps like this one.
16. Security
Data is protected by your iPhone's built-in encryption and by Apple's iCloud security. Connections to our service providers are encrypted.
17. Changes to this policy
If we change how we handle data, we will update this page and the date at the top. For important changes, we will also tell you in the app.