Privacy
Wall Stare · effective 9 October 2026
The Wall Stare app has no accounts, no sign-in and no servers of its own. What it remembers, it keeps on your phone and in your own iCloud - never with us. Most of what follows is a description of things we do not do. The exceptions are named plainly: Apple’s own services, which hold things under your Apple ID rather than ours, one company that checks purchases, and one that receives anonymous counts.
What stays on your phone
The app keeps a short list of things locally, so that it can work at all:
- the total time you have stared,
- your default session length,
- whether the daily reminder is on, and the time you set it to,
- which end sound you chose,
- whether you have finished the intro and seen the first-session note, and
- whether you have unlocked the paid tier.
That is the whole list. It is stored in the app’s own storage on the device and shared with the Wall Stare widgets on the same device so they can show your total time stared. It is not sent to us as we have no server.
iCloud
Two of those things — the total time you have stared and the list of finished sessions — are also saved to your own iCloud account, so that the record survives reinstalling the app and appears on your other devices signed in to the same Apple ID.
This uses Apple’s key-value storage. The data goes to Apple under your Apple ID, and never to us: we have no account with it, no way to read it, and no copy of it.
It outlives the app. Deleting Wall Stare clears everything on the device, but the copy in iCloud is deliberately not removed — that is what lets the record come back if you reinstall. To remove it, sign out of iCloud or delete the app’s iCloud data in iOS Settings under your Apple ID.
What the app collects
Counts, and nothing that tells you apart from anyone else. From version 1.1 the app reports these, and only these:
- each time it starts: which end sound, session length and number of reminders are set, whether notifications are allowed, whether blocking, Apple Health and the paid tier are on, whether the intro is finished, and how many Wall Stare widgets and controls are on the phone, of which kind and at which size,
- each page of the intro as it is reached, and at its end whether the reminder was set or declined and whether notifications were allowed,
- when a session ends: how long it was meant to be, how many minutes were done, whether it ran to the end, what started it, and whether a reminder had just been tapped,
- which end sound is tapped in Settings, and whether the paid tier is on,
- which wallpaper someone tried to save, and whether it saved, was refused or failed, and
- whether a share card went to Instagram, was saved to Photos, or failed.
Each one also carries the app’s version and build number. That is the whole of it.
None of them carries anything that outlives a launch. The app makes up a random label when it starts, keeps it only in memory and forgets it when it closes, so two launches by you look like two different people. Nothing is stored on your phone to do this. No location is looked up, and the IP address the request arrives from is discarded rather than kept.
The counts go to "PostHog, Inc." as a processor, on its servers in the EU, so that we can see which parts of the app are used. PostHog's own privacy policy can be found at posthog.com/privacy.
And specifically:
- no analytics or product-measurement SDK - the counts above are plain requests the app makes itself,
- no crash or performance reporting,
- no advertising, and no advertising identifier,
- no tracking of you across other apps or websites,
- no name, email address, contacts, photos or location,
- no camera or microphone access - the app never asks for either, and
- no reading of your health data, your photo library, or which apps you use -each of those is covered below, and in every case the app only ever writes.
Purchases
The paid tier is bought through Apple. We never see your payment details and Apple does not give them to us either.
To check whether a purchase is valid and to remember it when you reinstall or switch devices, we use "RevenueCat, Inc." as a processor. When you open the paid screen or make a purchase, RevenueCat receives a randomly generated identifier for your install, the purchase receipt Apple issued, and basic technical facts such as device model, operating system version and country. It does not receive your name or your email address and the identifier is not linked to any account, because there are no accounts.
RevenueCat's own privacy policy can be found at revenuecat.com/privacy.
Apple Health
If you turn it on, a finished session is written to Apple Health as mindful minutes - a start time, an end time, and nothing else. It is stored by Health on your device under your control, exactly as any other app’s mindful minutes are.
The app only writes. It never reads anything from Health, and it asks for no read permission. The row is off until you switch it on, and switching it off stops further sessions being written. What was already written stays in Health, where you can delete it yourself.
Blocking other apps
If you turn on blocking, Wall Stare uses Apple’s Screen Time system to hold other apps back for the length of a session, and releases them when it ends.
We never learn which apps those are. Screen Time hands the app opaque tokens rather than names and the app reads no usage data of any kind - not which apps exist on your phone, not which you opened, not for how long. Nothing about it is stored after a session ends and nothing leaves the device. It is asked for once, it applies only to you, and it can be turned off in Settings.
Wallpapers
Saving a wallpaper asks for permission to add to your photo library, and that is the only photo permission the app holds. It cannot see, open or read anything already in your photo library.
Reminders
Reminders and the sound at the end of a session are scheduled by iOS on the device itself. There is no push server involved, and no notification token ever leaves your phone. If you decline the notification permission, the rest of the app still works.
This website
No forms, no cookies, no analytics, no third-party requests. Our hosting provider keeps ordinary server logs, which include the IP address of the request, for a short period for security and reliability.
Children
Wall Stare is not directed at children. Nothing it counts can identify anyone, children included.
Your rights
If you are in the EU or the UK, you have the right to ask what personal data is held about you and to have it corrected or erased. For the app the honest answer is that we hold none: it has no accounts and nothing that identifies you, the counts above cannot be traced back to anyone, and deleting the app removes everything it stored on your phone. If you want the purchase records held by RevenueCat looked into or deleted, write to hello@wallstare.com and we will pass it on.
Changes
If this policy changes, the date at the top changes with it. If a change ever means the app starts collecting something, that will be said plainly here and in the app's release notes - not buried in a revision.
Version 1.1 is the first such change: the counts above. Until then the app collected nothing at all.
Contact
The data controller is wallstare — Alexander Specht, c/o Online-Impressum 10549, Europaring 90, 53757 Sankt Augustin, Germany.