Who we are
Skerrick and this website are made by NATIVECORE LTD, a company registered in England and Wales. NATIVECORE LTD is the data controller for everything this notice describes. For anything about your data, write to privacy@skerrick.app.
The app
You do not need an account
Using Skerrick needs no sign-up, no login and no email. You install it, pick a feed, and it works. The only part of the app that signs in is backup, which is off until you turn it on and is described in full below.
What the app knows
It knows when an app you chose to ration opens and closes, and how long it was open. On Android it learns that from usage access, which tells it which app is in front. On iPhone it learns it from two Shortcuts automations that setup walks you through for each feed, one that runs when the app opens and one that runs when it closes. That is the entire input. From it, the app works out whether your ration has run out, when it refills, and how many times you have pushed through today.
What the app does not know
- What any post, video or comment said. It does not read content.
- Who you follow, who follows you, or whose account you were looking at.
- Which screen you are on inside an app, which is why the ration covers the whole app.
- Anything in your messages. It cannot see inside another app at all.
- What is on your screen. It does not capture, record or transmit the display.
- Your location, contacts, photos or camera roll. None of these are requested.
Where the numbers live
On the phone. Your counts, your history, your weekly receipts and any reasons you type at bedtime are stored on the device and are not uploaded to us. Deleting the app deletes them. Unless you turn backup on, there is no copy for us to return or erase, because we never had one.
Checking for Pro
Every install, free or paid, asks RevenueCat, a subscription service, whether this phone holds Skerrick Pro. It does that when the app opens and when you come back to it, using a random app user id that RevenueCat makes up for this install and that is not linked to your name, your email or your backup. RevenueCat also learns what any network request reveals, such as the phone’s IP address and the app version. This is the one thing a default install sends anywhere.
Purchases go through the App Store or Google Play, and we never see your card. If you subscribe, RevenueCat also receives the store’s record of the purchase, so it can tell the app that Pro is active. It never receives your name, your email or your card.
Backup, if you turn it on
Backup is off when you install Skerrick. It lives in the You tab, as a switch called “Back up my settings and receipts”, for keeping your settings when you move to a new phone or reinstall.
Turning it on signs you in, so the backup can be found again on a new phone on the same platform. A backup made on an iPhone comes back on an iPhone, and one made on Android comes back on Android; moving between the two starts fresh. On iPhone the sign-in is Sign in with Apple, and Skerrick asks Apple for no name and no email. On Android it is your Google account. Google shares that account’s name, email address and profile photo link, and Google’s id for the account, with our sign-in provider, Google Firebase, so on Android those are stored alongside the backup. Skerrick does not use the name or the photo for anything; they are kept because Google sends them with every sign-in.
With backup on, our server holds an account id, your settings and your weekly totals, plus the Google account details above on Android. A new phone gets your settings back; your past weekly totals are kept in the backup, where you can see them in a copy of your data and delete them, but the app does not yet put them back on the new phone. Our server never holds what you watched, read or scrolled, because the app never had that to send, and the reasons you type at bedtime stay on the phone. The backup is kept in Google Firebase, in a database hosted in Europe (Belgium and the Netherlands).
Switch backup off and Skerrick asks whether to delete the copy. Deleting removes the copy, the account it was kept under, and any copy of your data we emailed you from our server, and on iPhone it also tells Apple to stop sharing your Apple ID with Skerrick. You can delete it from the You tab whenever you like, and nothing on the phone is touched either way. Deleting the app alone does not delete the backup, so delete the backup first if you want both gone. Deleting your account covers every way to do it, including if you no longer have the app.
A copy of your data
With backup on, you can have a copy of everything we hold sent to you as a PDF, without asking us. Open the You tab, find “Send me a copy of my data”, and put in the address it should go to. It arrives with your account, your settings and your weekly totals, and with why we hold each thing, who receives it, how long it is kept and what you can ask us to do. On Android the address is already filled in from your Google account. On iPhone the field starts empty, because Skerrick never asked Apple for your email.
To make the copy, our server writes the PDF to Google Cloud Storage and emails it to you with a download link. The PDF names the address it was sent to, so that address is kept inside the file for as long as the file is: 30 days, after which the file and its link are deleted, or sooner if you delete your backup. The address is not kept anywhere else. So that the button cannot be used to post mail to strangers, the server also counts how many copies went to each address and from each connection over a day, and stores those counts under a scrambled (hashed) form of the address and the connection rather than the address or IP itself. One copy an hour per account.
The permissions it asks for
On iPhone, Skerrick asks for one permission, notifications, and uses it for one thing: the alert that says your ration has run out. It does not use Apple’s Screen Time permission. The Shortcuts automations run on your phone and tell Skerrick only that a feed opened or closed.
On Android it needs usage access, to see which app is in front, and display over other apps, to draw the cut-off. It asks to show notifications, for the countdown and the cut-off notice. It may also ask to be left out of battery optimisation, so the phone does not stop it in the background. None of these hands us your browsing history, and what they show the app stays on the device.
We do not sell anything about you
There is no advertising in Skerrick, no analytics SDK inside the app, and no data sold. Nothing is shared beyond the services named on this page, and they get only what is described here. The part worth selling, what you actually look at, is never collected in the first place, so there is nothing here a change of policy could turn into a product. Nothing about you is decided by a machine, and no profile of you is built.
This website
The iPhone waitlist
The one thing this site collects is an email address, and only if you type one into the waitlist form. We ask for nothing else. What gets stored is your address and the moment you sent it, and nothing else is attached to it.
It is used once, to tell you the iPhone app is out. It is not sold, not shared with advertisers, and not added to a marketing sequence. You can ask us to delete your address at any time by writing to privacy@skerrick.app, and the email we send will say the same.
The list lives in a Google Firebase database hosted in Europe. Nobody can read it from this website, and it cannot be searched to find out whether a given address is on it. The form can only add to it, which is the only thing the form is for.
Email we send you
Email from Skerrick is delivered by Resend. It sees the address the message is going to and the message itself, and it is used for two things only: telling the waitlist the iPhone app is out, and sending the copy of your data you asked for from the You tab. Skerrick sends no other email.
Cookies and tracking
This site sets no cookies. It runs no third-party analytics, no advertising pixels, no session recording and no fingerprinting. There is no consent banner because there is nothing to consent to.
Our hosting provider, Google Firebase Hosting, keeps ordinary server logs, which include IP addresses, for a short period for security and to keep the site running. They are not used to build a profile of you.
Fonts and assets
The typefaces on this site are served from our own domain rather than from a font network, so loading a page here does not tell a third party that you visited.
Why we hold it, and for how long
UK and EU data protection law asks for a legal basis for each thing we hold. Ours are these.
- Your backup (the account id, the sign-in details above, your settings and your weekly totals). Basis: it is the service you asked for when you turned backup on (contract). Kept until you delete it.
- A copy of your data (the PDF, including the address it was sent to). Basis: you asked for it (contract), and the law gives you the right to it. Kept for 30 days, or until you delete your backup if that is sooner.
- The send counts behind the data-copy limits, stored as hashes. Basis: our legitimate interest in stopping the button being used to send unwanted mail. Kept for a day.
- The Pro check (RevenueCat’s app user id and, if you subscribe, the store’s purchase record). Basis: contract, so a subscription you paid for works. RevenueCat keeps it under its own retention policy while the app is in use.
- The waitlist (your address and when you sent it). Basis: your consent, which you can withdraw at any time. Kept until we have sent the one email it is for, or until you ask us to remove it.
- Email you send us. Basis: our legitimate interest in answering you. Kept for two years.
- Server logs for this site and our services. Basis: our legitimate interest in keeping them secure and running. Kept for a short period by Google.
Who receives it, and where
- Google (Firebase Authentication, Firestore, Cloud Storage, Cloud Functions and Hosting) holds the sign-in, the backup, the data copies, the waitlist and this site. The data is stored in Google’s European region.
- RevenueCat, a US company, checks for Pro as described above.
- Resend, a US company, delivers the emails described above.
- Apple and Google, as the stores you buy Pro from, under their own privacy policies.
Google may process data outside the UK and EEA, including in the United States, and RevenueCat and Resend are based there. Those transfers are made under the standard contractual clauses approved for them, with the UK addendum for UK data. Nobody else receives anything, and we do not sell personal data.
How it is protected
Everything is encrypted in transit and at rest by the services above. Each backup can be read and changed only by the account it belongs to, enforced by our database rules on the server, and a data-copy link is a long random address that stops working after 30 days.
Your rights
You have the right to ask what we hold about you, to have it corrected or deleted, to restrict or object to how we use it, to have a portable copy, and to withdraw consent you gave. For almost everyone reading this the answer will be nothing, a single email address on the waitlist, or, with backup on, the account and totals described above.
You can see and delete a backup and its account yourself, at any time, from the You tab in the app. Deleting your account explains how, and what to do if you no longer have the app.
For anything else, email privacy@skerrick.app and we will answer within a month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office at ico.org.uk, or to the data protection authority where you live.
Changes
If this notice changes in a way that matters, the change will be described here rather than slipped in.
October 2026. Now titled a privacy policy and names NATIVECORE LTD as the controller, with the legal basis and retention for each thing held, transfers to the US, how it is protected and the right to complain to the ICO. It now says that every install checks with RevenueCat for Pro, not only subscribers; that on Android Google shares the account’s name, profile photo link and id as well as its email; that a backup restores to a phone on the same platform and brings back settings rather than past weeks; that the copy of your data names the address it went to and is kept for 30 days; and that the waitlist is now for the iPhone app, Android being on Google Play.
September 2026. Rewritten to describe the app as it will ship. Using it still needs no account. Backup now signs in, with Apple on iPhone or a Google account on Android, where it used to use an anonymous id. Deleting the backup now deletes the account too. On iPhone, Skerrick uses Shortcuts and a notification rather than Screen Time, and asks only for notifications. The notice also named RevenueCat and Resend, gave an address for privacy requests, and linked to a page on deleting your account and to the copy of your data in the You tab.