Last updated: 29 July 2026
Tollgate is a screen-time app. When your scrolling allowance runs out, your chosen apps are shielded until you answer a question correctly.
There is no sign-up, no login, no email address, and no password. We never ask for your name, your email, your phone number, or any other information that identifies you.
When you choose which apps to guard, iOS gives Tollgate an opaque token, not a list of app names. Tollgate cannot see which apps you selected, and neither can we. That is enforced by Apple, not by our good intentions. Your app usage, the times you were shielded, and which questions you answered are stored in a database on your device. None of it is uploaded.
A random device ID. On first launch, Tollgate generates a random identifier (a UUID). It is not derived from your device, your Apple ID, or anything about you, and it cannot be traced back to a person. It exists so we can rate-limit abuse of our servers and count aggregate statistics.
Aggregate counts. Roughly once a day, Tollgate may send four numbers to our server, keyed to that random ID: how many questions you've answered, how many were correct, how many minutes you've converted, and your current streak day count. Nothing else. Our server runs on Convex, which stores those numbers under the random ID and nothing that identifies you.
Anything you choose to write to us. If you send feedback, request a topic, or flag a question, the text you typed is stored on our Convex server under the random ID so we can act on it. That is the only free text Tollgate ever sends, you decide whether to send it, and it is deleted along with everything else when you tap Delete what we have.
Anonymous usage and error data. We use PostHog to understand which parts of the app people use and to find crashes. Events are tied to the random device ID only. Before anything is sent, Tollgate strips out URLs and any field that could contain Screen Time data.
Purchases. If you subscribe, Apple processes the payment. We use RevenueCat to check whether your subscription is active. We never see your payment details, and Apple does not give them to us.
We do not sell, rent, or trade data to anyone. We do not share it with advertisers or data brokers. The only third parties involved are the service providers listed above (Convex, PostHog, RevenueCat, Apple), each doing the specific job described.
Delete the app. Everything stored on your device goes with it, including all your stats and your streak. There is no backup and no way for us to restore it, because we never had it. To remove what our server holds under your random device ID, tap Settings → Delete what we have in the app. It wipes the aggregate counts, topic requests, question flags, and feedback notes tied to that ID, and the app starts over with a fresh one. You can also take a copy of everything first: Settings → Export your data hands you one file with what your phone holds and what our server holds. If you have already deleted the app, there is nothing left that we can link to you, but you can still email us at the address below.
Tollgate is not directed at children under 13 and we do not knowingly collect data from them.
If this policy changes materially, we'll update this page and the "last updated" date above.