PRIVACY AT VANAR.

We collect the minimum data needed to review applications, operate the attention-recovery protocol, send optional reminders, protect the service, and learn from de-identified cohort metrics.

The attention-recovery MVP may collect baseline and end self-reported screen-time, short-form-use, and pickup totals, three private continuation rules, an optional Focus Cycle waitlist choice, and a structured Day 30 Build follow-up. It does not require browsing history, message content, contact lists, raw device telemetry, or screen-time screenshot uploads.

Routine administrators can review application answers, custom commitment proposals and safety context, stage-gate and phone-boundary answers, structured recovery actions and responses, tiny facts, reset reasons, commitment versions, and operational history when their role requires it. They cannot routinely read reflection text.

Reflection text is encrypted separately. Owner-only break-glass access requires re-authentication, a supported reason and reference, and immutable access audit events.

We do not sell behavioral data, publish member histories, create public profiles, or place application answers, tiny facts, or reflection text in analytics.

Rejected applications are deleted after 90 days. Inactive accounts enter deletion review after 180 days without a check-in, with 30 days' notice. Verified deletion requests are fulfilled within 30 days. De-identified aggregate metrics may remain.

You may request an export or deletion at any time. Reflection text is deleted with the associated account.