Privacy Policy

Restio ("we," "us," or "the app") is a mindful rest timer for iPhone, iPad, Apple Watch, and Mac, developed by Kuthay Gumus ("the developer"), designed to help you take healthier screen breaks. The developer is the data controller for the purposes of applicable data protection laws. This Privacy Policy describes what information Restio accesses, how that information is handled, and the choices available to you.

Information We Do Not Collect

Restio does not collect, store, or transmit personal information to any server owned or operated by us. The app contains no analytics frameworks, no advertising SDKs, no crash reporting services, and no third-party tracking of any kind. We do not sell, share, or rent user data to any third party.

On-Device Data

Your rest sessions, streaks, preferences, and app settings are stored locally on your device using Apple frameworks. This data remains on your device and is not accessible to us unless you choose to enable iCloud sync as described below.

On Mac, Restio also uses standard system APIs to detect when your Mac is locked, asleep, or (with Pro) when you have stepped away from the keyboard, so it can pause and resume your timer. This only reads how long the system has been idle — it never reads your keystrokes, screen contents, camera, or microphone, and this information is never stored or transmitted anywhere.

iCloud Sync

If iCloud is enabled on your device, Restio may sync your app data across your Apple devices through your private iCloud container. This data is accessible only to you through your Apple ID. We do not have the ability to access, read, or modify your iCloud data. Apple's cloud infrastructure may store and process this data in countries outside your country of residence; any such transfer is made under Apple's own safeguards and is governed by Apple's Privacy Policy.

CloudKit and Buddy Feature

Restio offers an optional buddy feature that allows you to share limited information with a buddy who has your buddy code. If you choose to use this feature, the following data is shared via Apple CloudKit:

• A display name you provide
• Your current rest streak count
• Your number of completed rest sessions today
• The time your profile was last updated

This information is stored in Restio's public CloudKit database under a short buddy code, so anyone who has your code can view it. Sharing is initiated solely by you; removing the buddy connection in the app stops you from viewing your buddy's profile, but the last profile you shared may remain in CloudKit until we remove it. Contact us at the address below to request removal. No additional personal data is transmitted through this feature. CloudKit data is processed through Apple's infrastructure and is governed by Apple's privacy practices. Data shared through the buddy feature may be transferred to and processed in countries outside your country of residence in accordance with Apple's data handling practices.

Apple HealthKit

With your explicit prior consent, Restio may write Mindful Minutes to Apple HealthKit. This access is write-only — Restio does not read, query, or access any existing health data from HealthKit.

All HealthKit data remains on your device (or in your private Health data store if you use iCloud for Health). Restio does not use HealthKit data for advertising, data mining, or any purpose other than recording your rest sessions. This is intended to be consistent with Apple's HealthKit guidelines.

Network Access

Restio makes no network requests to collect or transmit your personal data to us. Apart from Apple's iCloud and Buddy features described above, the only request the app makes to this website is a version check at launch: it downloads a small configuration file (appconfig.json) to see whether an update is available. The request contains no personal data, account, or device identifier. As with any website, our host, GitHub Pages (operated by GitHub, Inc.), may briefly process your IP address in its server logs for security and operation; we do not receive or use those logs. Restio otherwise opens the network only when you tap a link to the App Store, our legal pages, or a feedback email.

In-App Purchases

Restio offers optional premium features through subscriptions and a one-time purchase, managed entirely by Apple's App Store. We do not receive, process, or store your payment information, billing address, or Apple ID credentials. All transaction data is governed by Apple's Privacy Policy.

Data Retention and Deletion

Apart from the buddy profile described above, which may remain in Restio's public CloudKit database until you ask us to remove it, Restio does not store data on external servers, so there is no other user data for us to retain. All app data stored on your device can be deleted at any time by deleting the app. If you use iCloud sync, you may also remove synced data through your iCloud storage settings.

Legal Basis for Processing

Under the GDPR, KVKK, and equivalent data protection regulations, data processing requires a legal basis. Restio's legal basis for processing your data is:

• Consent (GDPR Article 6(1)(a)): You voluntarily choose to enter all data into the app. No data is collected without your active input.
• Contract performance (GDPR Article 6(1)(b)): Processing is necessary to provide the app's core functionality (storing and displaying the data you enter).
• Explicit consent for health data (GDPR Article 9(2)(a)): HealthKit integration is enabled only with your explicit prior consent.

Your Rights

Depending on your jurisdiction (including but not limited to rights under the GDPR, CCPA, KVKK, and equivalent regulations), you may have rights regarding your personal data, including the right to access, correct, delete, or port your data, as well as the right to restrict or object to certain processing. Because Restio does not collect personal data on external servers, these rights are effectively exercised through your device and iCloud settings. If you have questions about exercising your rights, please contact us using the details below.

Children's Privacy

Restio does not knowingly collect personal information from children under 13 years of age (or the applicable minimum age in the relevant jurisdiction). The app does not require account creation, login credentials, or personal data input of any kind. If you believe a child has provided personal information through the app, please contact us so we can take appropriate action.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this page periodically. Your continued use of Restio after any changes constitutes your acceptance of the updated policy.

Contact

If you have questions or concerns about this Privacy Policy, please contact us at kuthaygumus@icloud.com.