1.Data controller
Naer App AS (org. no. 937 596 995), Blåbærstien 10, 3724 Skien, Norway, is the data controller for personal data processed in connection with the Neara iOS application and the websites at www.nearaapp.com. Questions about privacy can be sent to support@nearaapp.com at any time.
2.What stays on your iPhone
Neara is built on the principle of Privacy by Design and uses Apple’s official, encrypted Screen Time API (FamilyControls, ManagedSettings and DeviceActivity). The categories, apps and websites you shield or always allow, all detailed screen time statistics, usage of individual apps and websites, your daily baseline and the insights calculated from your screen time are processed and stored only on your own iPhone.
We at Naer App AS have no technical access to or insight into which specific apps or websites you open, or what you view.
3.What we store on our servers
To make your account work, and so that your history and settings follow you to a new phone, we store the following data on our servers:
Account: An internal user ID, your phone number if you sign in with your phone, and Apple’s user ID for you if you sign in with Apple. If you share your name and email address through Sign in with Apple, we store those too. We also store your time zone, how far you have got in the introduction, and your sign-in sessions.
Moments: The text you write in Moments, and when it was written. The text is encrypted before it is stored.
Interruptions: When you interrupt shielding with a break, we store when it started and ended, how long it was meant to last, which zone was active, and the reason you write or choose, if any. Reasons are encrypted before they are stored.
Schedules: Your zones (Presence, Focus Time and Sleep), whether they are switched on, their days, times and time zone. The categories, apps and websites being shielded are not stored.
Sessions and balance: When you start and end Full Presence and what you chose to spend the time on, when your zones were active or interrupted, and a random ID for each installation of the app. We use this for your Balance Score and insights.
Weekly reports: Which weeks you have received a weekly report for, and when you completed them.
Subscription: Information from Apple about your purchase, such as the transaction ID, product, purchase and expiry dates, renewal status and any refund. It is linked to your account with a random purchase key. Payment is handled by Apple through the App Store, and Naer App AS never receives or stores card or bank details.
Security: When you request a one-time code by SMS, we store the phone number, when the code was sent and whether it was approved. To prevent abuse, we also count sign-in attempts per phone number and IP address.
4.Technical logs
When the app connects to our server, it sends the version and build of the app you are using, and the iOS version on your phone. When a request fails or something unexpected happens, this is stored in our technical logs, together with a random ID for the request, which part of the service it concerned and any error code.
We use the logs to find and fix errors, and to see which versions of the app and iOS are still in use, so that we know how long older versions of the app need to be supported. The logs do not contain your user ID, your phone number or anything you write.
The logs are stored with Vercel and Better Stack and are deleted automatically after a limited period.
5.Purposes and legal basis
We use this data to create and run your account, sign you in, sync moments, interruptions, schedules and insights between your devices, restore them on a new phone and confirm that your subscription is valid. The legal basis is the General Data Protection Regulation (GDPR), Article 6(1)(b) (performance of a contract).
We use the count of sign-in attempts and technical logs to keep the service secure and stable, based on GDPR Article 6(1)(f) (legitimate interest in secure and stable operation). Our logs do not contain your user ID, your phone number or anything you write.
We do not use your data for advertising or tracking, and your data is never sold or shared with third parties for marketing. Neara contains no third-party analytics or advertising tools.
6.Who processes your data
These providers process data on our behalf to run Neara:
Vercel: hosts the websites and the server the app connects to. The server runs in Dublin, Ireland.
PlanetScale: hosts the database where the data above is stored, in Dublin, Ireland.
Better Stack: stores the technical logs from the server, in Germany.
Trigger.dev: runs scheduled tasks, such as checking subscription status with Apple and removing expired security data.
Twilio: sends the one-time code by SMS when you sign in with your phone number, and therefore receives your phone number.
Apple provides Sign in with Apple and handles purchases, renewals and refunds in the App Store, and processes that data under its own terms.
7.Retention and deletion
Local screen time data and app selections are stored only on your own phone and are deleted automatically if you delete the app.
The data on our servers is stored for as long as you have a user account. If you delete a moment or an interruption in the app, it is also deleted from the server. We then keep its ID and the time of deletion, so that your other devices remove it too.
If you delete your account in the app under Settings → My account → Delete account and data, we immediately delete the account and all of the data above that is linked to it, and ask Apple to revoke access from Sign in with Apple. You can also request deletion via support@nearaapp.com. A small amount of data remains after deletion:
Purchases: Apple’s information about your purchases and the purchase key are kept without any link to your account, together with a cryptographic fingerprint (hash) of your sign-in. This prevents anyone else from taking over the purchase, and lets you get your subscription back if you create a new account with the same sign-in.
Deletion marker: A cryptographic fingerprint of your sign-in applies for one hour, so that a sign-in that was in progress while you deleted your account cannot create it again. It is removed at the next daily clean-up.
Sign-in attempts: The count of sign-in attempts per IP address is removed at the daily clean-up once a day has passed since the last attempt, unless it is still blocking abuse.
Technical logs are not linked to your account and are deleted automatically after a limited period.
Database backups may contain deleted data until they are replaced by newer backups.
8.Your rights
Under applicable data protection law (GDPR), you have the right to request access, rectification, erasure, data portability and restriction of processing of personal data relating to you. You can delete your account at any time directly in Neara under Settings → My account → Delete account and data, or contact us at support@nearaapp.com.
If you believe our processing of personal data violates data protection law, you also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet, datatilsynet.no).