Privacy Policy
Last updated 18 October 2026
The short version
- Everything you tell Lupex, goals, tasks, personal answers, usage sessions, stays on your iPhone. None of it is sent to any server, ours included.
- The only thing we hold is your sign-in account: your email address (and your name, if you give it).
- No ads, no tracking, no third-party analytics. We don't sell or share your data.
- Delete your account in the app at any time; that removes the account and wipes Lupex's data from the device.
Who is responsible
Lupex is made by Farid Arbai, who is the controller of the personal data described here. Questions, requests or complaints: support@webetzy.com.
What stays on your device
To help you, Lupex keeps the following only on your iPhone, in the app's own storage:
- the goals and tasks you set;
- your answers to Lupex's questions (for example, why you're opening an app);
- your usage sessions, when you were stopped, what you chose, your day stripe and your nightly Looped score;
- your settings, such as which apps you've asked Lupex to watch.
None of this is sent to us or to anyone else. We have no copy and couldn't see it if we wanted to. If you back up your iPhone to iCloud or a computer, that backup may include Lupex's on-device data; it is then handled by Apple or by you, under Apple's terms, and we can't access it.
Screen Time
Lupex uses Apple's Screen Time frameworks (Family Controls, Device Activity and Managed Settings) to step in when you open the apps you choose. With your permission, these frameworks process your app usage on your device. When you pick apps, Apple gives Lupex an opaque token for each one, not a list of what you have installed or use. Lupex never learns which other apps you use, and Apple doesn't share Screen Time data with us.
The optional Reels detector
If you turn it on, the Reels detector uses iOS screen broadcasting to notice when you've moved into short-form video. It looks only at the bottom tab-bar strip of each broadcast frame, analyses it on your device, and discards the frame immediately. Nothing is recorded, saved or uploaded, and no other part of your screen is examined. It runs only while you have the broadcast on; iOS shows a red indicator while it does, and you can stop it at any time from Control Center or that indicator.
Your account
You sign in so that your subscription and access follow you. For that, and nothing else, we keep:
- your email address, and your name if you provide it;
- the technical details of the account itself (an identifier, when it was created, sign-in tokens).
These are stored in Amazon Cognito, a sign-in service run by Amazon Web Services in its EU (Ireland) region. When you sign in with your email, we send you a one-time code; that email is delivered by Postmark, an email delivery service, which processes your address and the message to deliver it and keeps a delivery record for a limited time (up to 45 days). If you use Sign in with Apple or Sign in with Google, Apple or Google confirms who you are and shares your email address (with Apple, possibly a private relay address) and, if you allow it, your name, used only to sign you in.
We use your email only to sign you in and, if you write to us, to reply. We don't send marketing email.
Purchases
Subscriptions are bought through Apple. Apple handles payment; we never see your card or payment details. Apple tells the app whether your subscription is active, and we receive the sales reports Apple gives every developer, which don't identify you.
No ads, no tracking, no analytics
Lupex shows no ads, contains no advertising or analytics SDKs, and doesn't track you across apps or websites. We don't sell, rent or share your personal data. This website sets no cookies and loads nothing from third parties; like any web host, Amazon CloudFront handles your IP address to deliver the pages, and we don't keep access logs.
Who processes data for us
| Service | What for | Where |
|---|---|---|
| Amazon Web Services (Cognito, Lambda, CloudFront) | Your sign-in account; sending the sign-in code; this website | EU (Ireland); website served worldwide |
| Postmark | Delivering sign-in code emails | United States |
| Apple | Purchases, Sign in with Apple, Screen Time (on device) | Apple's own terms |
| Sign in with Google, if you choose it | Google's own terms |
Where data is processed outside the UK or the European Economic Area, it is protected by the safeguards data protection law requires, such as standard contractual clauses.
Why we may use it (legal basis)
We process your account data because it's needed to provide the service you asked for (performance of a contract), and to keep sign-in secure and prevent abuse (our legitimate interests).
How long we keep it
- Your account: until you delete it. Deletion is immediate.
- Sign-in code emails: Postmark keeps delivery records for up to 45 days.
- On-device data: until you delete your account, delete it in the app, or delete the app.
- Emails you send us: as long as needed to help you, then deleted.
Deleting your account
In Lupex, open Settings and tap Delete account. This permanently deletes your sign-in account from Amazon Cognito and wipes all Lupex data from your device. You can also email support@webetzy.com and we'll do it for you. Deleting your account doesn't cancel an Apple subscription, cancel that in Settings › your name › Subscriptions.
Your rights
Depending on where you live (including under the UK and EU GDPR), you can ask to access, correct, delete or export your personal data, or object to or restrict how we use it. Email support@webetzy.com; we'll answer within one month. You can also complain to your data protection authority, in the UK, the Information Commissioner's Office (ico.org.uk).
Children
Lupex isn't directed at children under 13, and we don't knowingly hold their data. If you think a child has given us their email, contact us and we'll delete it.
Changes
If this policy changes, we'll update the date at the top. If a change affects what we collect, we'll tell you in the app before it applies.