Sablon Privacy Policy

Last updated: 30 October 2026

This policy explains which data the Sablon iPhone app (“Sablon”, “the app”) processes, where it is kept, who receives it and what your rights are. It applies to the app and to the sablon.app website.

In short

• Sablon has no accounts. We do not collect your name, age or sex.
• Your settings, your sand and your time spent stay on your iPhone.
• Sablon cannot see the list of your apps or how you use them: Screen Time only gives it opaque tokens.
• When you open a network in Sablon, you sign in directly with that network. Sablon does not read your credentials, your messages or the content you see.
• The camera is only used to count push-ups or squats. Images are processed on your iPhone and never saved or sent.
• We receive pseudonymous usage statistics, linked to a random identifier created on your iPhone, without your name or email.
• Sablon does not track you for advertising purposes and uses no advertising SDK. We do not sell any data.

Controller

Farid Rehila, sole proprietor, Nyon (VD), Switzerland Email: contact@rehila.dev

What stays on your iPhone

App data

Sablon stores the following locally, in the app’s storage and in an app group shared with its Screen Time extensions:

• your preferences and the sand mode you chose;
• the networks you added and their filters;
• your time rules and your daily time goal;
• your sand balance and the history of your breaks;
• the time spent on each network in Sablon;
• your answers during the app’s welcome flow;
• a random identifier (see below).

This data stays on your iPhone until you delete the app.

Screen Time

To lock a network’s official app, Sablon uses Screen Time (Apple’s FamilyControls framework), with your permission. When you choose the apps to lock, iOS only gives Sablon opaque tokens, which stay on the device. Sablon sees neither the list of installed apps nor the time you spend in them.

Networks opened in Sablon

Sablon displays the web versions of Instagram, TikTok, YouTube, Snapchat, Facebook, X and Reddit in a built-in browser.

• You sign in directly with the network. Your credentials go to the network, not to us.
• Session cookies stay in the app’s web storage, on your iPhone.
• Sablon hides certain elements of the page (Reels, Shorts, the “For You” feed, Explore, suggestions, ads) and measures the time spent locally.
• Sablon does not read your messages, your posts or the content displayed, and does not send them anywhere.
• The filtering rules are downloaded from our server. This request sends no data about you.

The network itself processes your data under its own privacy policy, as it does in its app or in a browser.

Camera

In “I earn it” mode, you can earn sand by doing push-ups or squats, counted by the camera. Images are analysed live on your iPhone (Apple’s Vision framework); no image or video is saved or sent. Camera access is only requested if you use this activity, and you can withdraw it in iOS Settings.

Notifications

Notifications are created on your iPhone. They are used to reopen a locked app from its block screen, to tell you when a timer ends and to remind you that your free trial is ending. No notification token is sent to a server.

What we receive

Usage statistics (Supabase)

On first launch, Sablon creates a random identifier on your iPhone. It is not linked to your name, your email or your Apple ID. Together with this identifier, the app sends us:

• when the app is opened;
• when a network is added, removed or locked (network name);
• filter changes, blocked elements and Reels breaks (network, length in minutes);
• the sand mode chosen, the daily time goal and use of the timers (breathing, reading, focus);
• push-up or squat sessions: count, duration and minutes earned;
• the weekly sand bonus: number of active days in the week and minutes granted;
• when the subscription offer is shown, the offer chosen and when that screen is closed;
• the state of the app: language, subscription or trial in progress, whether Screen Time is enabled, and whether apps have been chosen;
• the steps completed in the app’s welcome flow and the trial start date.

This data contains no content from the networks. It is used to understand how the app is used and to improve it.

Welcome flow analytics (PostHog)

During the app’s welcome flow, we measure the steps viewed and completed, the time spent on each step and the choices made (for example the networks chosen, the estimated time spent on networks, the goal, the sand mode, the response to the subscription offer). These events come with the language, the region set on the iPhone, the app version and an anonymous identifier specific to PostHog. They are used to improve the welcome flow.

Subscription (RevenueCat and Apple)

Payment is processed by Apple. Sablon never sees your payment details. RevenueCat receives an anonymous identifier, purchase receipts and your subscription status, to check your access to Sablon Pro.

Feedback from the app

If you send feedback from the settings, we receive your message, the app language and the random identifier.

Contact form

If you write to us from the app, we receive your first name, your email address, your message and the random identifier. The form goes through a server hosted by Vercel, and the message is then delivered to us by email via Brevo. If you email us directly, we receive what you send us.

Technical data

As with any internet connection, the app’s requests pass your iPhone’s IP address to the services that receive them. We do not use it to identify you.

Earlier versions of the app

Earlier versions of the app could send your first name, age and sex if you had given them during the welcome flow. The current version no longer asks for them and never sends them. These answers were erased from our databases on 30 October 2026.

What we do not do

• We do not create accounts and do not ask for your name, age or sex.
• We do not track you for advertising purposes and use no advertising SDK.
• We do not sell or rent any data.
• We do not read your content, messages or credentials on the networks.
• We do not save any camera image.
• Sablon neither writes nor reads any data in Apple’s Health app.

Legal bases

We process your data in accordance with the Swiss Federal Act on Data Protection (FADP), in force since 1 September 2023, and, if you are in the European Union or the European Economic Area, with the General Data Protection Regulation (GDPR).

• Performance of a contract (Art. 6(1)(b) GDPR): providing the app and managing your subscription.
• Legitimate interests (Art. 6(1)(f) GDPR): pseudonymous usage statistics and welcome flow analytics, to improve the app; replying to your feedback and messages. You can object at any time by email.
• Consent: access to the camera, notifications and Screen Time, which you grant and withdraw in iOS Settings.
• Legal obligation: keeping data needed for accounting, where applicable.

Retention periods

• Data on your iPhone: until you delete the app.
• Usage statistics (Supabase): 24 months, then deleted.
• Analytics (PostHog): 12 months.
• Feedback and contact messages: 3 years after receipt.
• Subscription (RevenueCat): as long as needed to manage your subscription and meet our legal obligations.

Processors and transfers

We entrust some processing to the following providers, who act on our behalf:

Apple processes payments and app distribution as a separate controller, under its own privacy policy.

Where data is transferred to a country whose level of protection is not recognised as adequate by Switzerland or the European Union, in particular the United States, the transfer relies on the Swiss–US and EU–US Data Privacy Framework where the provider is certified, and otherwise on the European Commission’s standard contractual clauses, as recognised by the FDPIC.

Your rights

Under the FADP and, if you are in the EU, the GDPR, you have the right:

• to access your data;
• to have it corrected;
• to have it erased;
• to object to its processing, in particular to usage statistics;
• to request restriction of processing;
• to receive your data in a common format (portability);
• to withdraw your consent at any time, without affecting past processing.

To exercise these rights, write to contact@rehila.dev. Since we do not know your name, the easiest way is to write to us from the app (Settings → Contact): your message then includes the random identifier that lets us find your data. We reply within 30 days.

Deleting the app erases the data stored on your iPhone, including the random identifier. Statistics already sent are then deleted at the end of the period stated above, or sooner on request.

You can also lodge a complaint with a supervisory authority:

• in Switzerland: the Federal Data Protection and Information Commissioner (FDPIC), www.edoeb.admin.ch;
• in France: the Commission nationale de l’informatique et des libertés (CNIL), www.cnil.fr;
• in another EU country: the data protection authority of your country of residence.

Security

Data exchanged between the app and our providers is encrypted in transit (HTTPS). Access to the data received is limited to the publisher. No measure offers absolute security, but we limit collection to what is strictly necessary.

Minors

Sablon is intended for people aged 13 and over. We do not knowingly collect any data identifying a child. If you believe a child has sent us data, write to us and we will erase it.

Changes

We may change this policy, for example when the app evolves. The date at the top of the page shows the last update. If there is a significant change, we will tell you in the app or on this website.

Contact

Farid Rehila, sole proprietor, Nyon (VD), Switzerland Email: contact@rehila.dev