Nothing leaves your phone.

In short

• The app collects nothing. It has no account and no server. Its only network traffic is Apple's App Store checking your purchase.
• It reads motion, two Apple Health types and your notification settings, with your permission, only to decide when to remind you.
• Everything it stores stays on your iPhone. You can export it, erase it, or delete the app.
• This website has no sign-up form. An email address left on an earlier version of it is used for nothing and is deleted if you ask.

Who is responsible

Office Shrimp is made by Dejan Sobota, an independent developer. For anything to do with your data, write to hello@dejansobota.com.

What the app reads

Three things, each behind its own permission prompt in iOS, each of which you can switch off in iOS Settings at any time. The app keeps working without any of them; it just has less to go on.

Motion & Fitness

The iPhone's motion coprocessor classifies whether the phone was walking, running, cycling, in a vehicle or still. The app reads that history for the current working day to notice when you got up and walked, and resets its reminder clocks accordingly. Only walking and running count as a break. It keeps the start and end time of each walk it counted today and nothing about where you went; the app never asks for your location.

Apple Health, read-only

With your permission the app reads two types from Apple Health: step count, so a walk recorded by an Apple Watch counts even when the phone stays on the desk, and stand time, which arrives sooner than steps and lets the app hold a reminder back for a few minutes while the Watch is still syncing. Those are the only Health types it requests.

Health data is used for one purpose: deciding whether you have moved and when to remind you next. The app never writes to Health. Health data is never stored outside the app's own folder, never transmitted, never shared with anyone, never used for advertising or marketing, and never sold. You can withdraw access at any time in the Health app under your profile, Apps and Services.

Notifications

Reminders are ordinary local notifications, scheduled on the phone by the app itself. There is no push service and no server behind them. The app reads your notification settings for one reason: to tell you if iOS is holding reminders back, for example in a Scheduled Summary.

What the app stores

• Your settings. Working hours and days, lunch break, reminder intervals, whether you use a standing desk, and the date the app was first opened.
• A daily record. Breaks taken, posture checks confirmed, minutes stood, and reminders delivered. Records older than 90 days are deleted automatically.
• The app's clocks. When it last reminded you of each kind, when it last saw you move, the spans of the walks it counted today, and whether you have paused it for the day. These cover the current day and are cleared as it moves on.

All of it lives in the app's folder on your iPhone. Like any app's data it is included in your iPhone backup, to iCloud or to a computer, under Apple's protection and Apple's terms. The app itself transmits none of it anywhere.

What the app does not do

• No account, sign-in, name or email address.
• No server. The app sends nothing anywhere of its own; the only traffic is Apple's App Store confirming a purchase, described below.
• No analytics, crash reporting or advertising code. There is no third-party code in the app.
• No location, contacts, camera, microphone or photos. The app never asks.
• No tracking across apps or websites, and nothing the App Store's tracking rules apply to.
• No claim about your posture. A phone cannot see your back. The posture reminder is a timer, not a measurement, and nothing in the app is medical advice.

Your control

• Export my data, in the app's Settings, writes everything above to a plain JSON file you can read, keep, or bring to a new phone with Import my data.
• Erase history deletes every daily record and every clock, and keeps your settings.
• Each permission can be withdrawn in iOS Settings, or for Health in the Health app. The app carries on without it.
• Deleting the app deletes everything it stored.

This website

The website is a set of static pages served by Cloudflare. It sets no cookies. Page views are counted with Cloudflare Web Analytics, which works without cookies and without any identifier that follows you between sites: for each visit it records the page, the page you came from, the browser and the country, and nothing that identifies you. Like any web host, Cloudflare also records basic details of each request, such as the IP address and page requested, to serve and protect the site; those logs are held under Cloudflare's own privacy policy and are not used by us to identify anyone.

An earlier version of this website had a form to join the test. Addresses left there are held by Formspark, the form service the site used. They are not used to contact anyone, are not added to any other list and are not shared with anyone else. Write to us at any time to have yours removed.

Purchases

Subscriptions and the one-time purchase are sold by Apple through the App Store, under Apple's terms. Apple handles the payment; we never see your card, your Apple Account or your name. To know whether to unlock the app, it asks the App Store whether this Apple Account has an active purchase, and keeps nothing beyond the answer. Apple may share crash logs with us if you have chosen to share analytics with developers in iOS Settings; the app itself still sends nothing.

Children

The app is made for people who work at a desk. It is not directed at children under 13 and does not knowingly collect anything from them.

Your rights

Because the app keeps your data on your own device, you already have full access to it and can delete it yourself at any time. If you are in the European Economic Area or the United Kingdom you also have the rights the GDPR gives you over the email address you may have left with us: to see it, correct it, or have it deleted. Write to hello@dejansobota.com and we will act on it.

Changes

If this policy changes, the date at the top changes with it, and any change that affects what the app reads or stores will be described here. The one promise that will not change is the first line: nothing leaves your phone.

Contact

Questions about privacy go to hello@dejansobota.com. For help with the app itself, see the support page.