Legal
Privacy policy
The All Block works without an account and sends nothing anywhere until you ask it to. This page says exactly what that means.
Last updated 1 October 2026
The short version
There is no analytics, no telemetry, no advertising and no tracking in The All Block, on Windows or on Android. Your sessions, history and Accountability Lock password never leave your device. Without an account, nothing else does either. If you choose to make one, we hold your email address, what you have bought, and your scheduled blocks, so that your plan and your schedules follow you between your computer and your phone.
This policy covers the Windows app, the Android app and this website.
The data controller is Auzeo, a sole trader in the United Kingdom. Contact: MrAuzeo@protonmail.com.
What stays on your device
On Windows, The All Block keeps its data in a folder in your user profile
(~/.allblock). On Android, it keeps it in the app's own
private storage. That includes:
- your scheduled blocks and their settings (also copied to your account if you have one — see below);
- your session history and stats;
- the state of a running session, so it survives a restart;
- your Accountability Lock password, stored only as a PBKDF2-SHA256 hash with a random salt — never in plain text, and never uploaded.
We can't read any of it. Deleting that folder, or uninstalling the Android app, deletes all of it.
That last one holds even if you add a recovery email to the Accountability Lock. The password still never leaves your computer and we still cannot read it or reset it. All a recovery email lets us do is send a link to you and, when you open it, tell your own copy of the app that you said yes — the app is what forgets the password, not us.
The Android app's accessibility service
To block your phone, the Android app uses Android's accessibility service. While a block is running, it uses that service only to see which app has come to the front, so that it can return you to the lock screen, and to notice an incoming call, so that the call can still be answered.
It does not read what is on your screen, what you type, or the contents of any notification or call. It records nothing, and nothing it sees is ever sent off your phone — not to us and not to anyone else.
What we collect, and only if you opt in
| Data | When | Why |
|---|---|---|
| Email address and password | Only if you create an account | To sign you in and attach your Pro licence to you. The password is stored as a salted hash by our authentication provider; we never see it. |
| Account ID and Pro status | With an account | So the app knows whether to unlock Pro features. |
| Your scheduled blocks: their names, times, days and settings | With an account | So schedules made on your computer appear on your phone, and the other way round. Nothing about what you did during a block is sent — only the schedule itself. |
| Purchase records: which plan you bought, whether it is still active, and the emergency escapes you have bought and used | If you buy anything | So what you paid for works on every device signed in to your account, and so a purchase is counted once and only once. |
| Licence key and whether it has been paid and redeemed | If you buy Pro | To issue the licence, honour it once, and stop the same key being redeemed twice. |
| An installation identifier — a random number, not anything about your machine | With an account, or when you redeem a licence key | So a licence stays attached to the install that redeemed it, so we can tell which device last changed your schedules, and so a lock released on one device is not released on every device you own. It tells us nothing about the device and is never shared. |
| An Accountability Lock recovery email, if you choose to add one, and the record of any reset link sent to it | Only if you set one up | So that a forgotten lock password can be released by whoever holds that inbox. It may be somebody else's address — that is the point of it. It is used for nothing else, never shown to anyone using the app, and removed when the account is deleted. |
That is the complete list. No name, no postal address, no usage statistics, no session history, no list of the apps on your phone, no location, and nothing that identifies your device beyond the random number above.
Payments
Purchases are handled by Paddle.com, our reseller and Merchant of Record. You give Paddle your payment and billing details directly; they never pass through us and we never store them. Paddle is an independent data controller for that transaction — see paddle.com/legal/privacy. What comes back to us is a licence key marked paid.
Purchases made inside the Android app go through Google Play instead. Google handles the payment and your card details under its own privacy policy; we never see them. What comes back to us is a purchase token and the product bought, which we check with Google and keep against your account.
Who processes data for us
- Supabase — hosts the account database, the licence table and your synced schedules.
- Paddle — payments, tax and receipts, as above.
- Google Play — payments made in the Android app, as above.
- GitHub — hosts this website and the download. GitHub records requests to it, including IP addresses, in its own server logs.
- Google Fonts — this website loads its typefaces from Google's CDN, which means your browser's request (and therefore your IP address) reaches Google. No cookies are set by it.
We do not sell data, share it for advertising, or pass it to anyone else except where the law requires it.
Cookies
This website sets no cookies and runs no analytics. Neither app sets any either. Paddle's checkout, which opens in your browser, uses its own cookies for the payment session.
Legal basis and how long we keep things
Under UK GDPR we rely on performance of a contract for account and licence data — without it we cannot give you the Pro you paid for — and on legal obligation for the transaction records Paddle keeps for tax.
Account data is kept until you delete the account, which you can do at any time and without asking us: in the app, under Settings → Account → Delete account, or on the account deletion page, which needs nothing installed. Either route removes the email address, the password, the profile, your synced schedules, the record of escapes you have spent and any Google Play purchase records held against the account. It happens immediately.
Two things outlive it. A licence key you bought is unlinked from you rather than deleted, so what remains is a random string with nobody's name against it — and so that you can redeem it again on a new account, because you paid for it. Payment records held by Paddle, and the transaction identifiers we keep so that one payment cannot be counted twice, have to be kept for six years under UK tax law.
Your rights
Deleting your account needs no request at all. Do it in the app, under Settings → Account → Delete account, or on the account deletion page. It is immediate and it is final.
Deleting some of your data and keeping the account
To have part of your data deleted from The All Block without closing your account, email MrAuzeo@protonmail.com from the address you signed up with, and say which of these you want removed:
- your synced schedules (the copies on your devices stay where they are);
- your Accountability Lock recovery email and the record of reset links sent to it;
- the installation identifiers linked to your account.
We delete them within 30 days and reply to confirm. Your email address and your plan stay, because the account cannot work without them. Purchase and payment records are kept for six years, as UK tax law requires, and are only removed after that.
You can also ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or object to it — by emailing MrAuzeo@protonmail.com. We will answer within 30 days, and will not charge you for it.
If you are unhappy with how we have handled your data you can complain to the UK Information Commissioner's Office (ico.org.uk), or to your local supervisory authority in the EU.
Children
The All Block is not directed at children under 13, and accounts are not intended for them. Parents do use the app on a child's computer or phone — that is a fine use, and it involves no account and no data leaving the device.
International transfers
Our providers may process data outside the UK. Where that happens it is covered by the UK International Data Transfer Addendum, EU Standard Contractual Clauses, or an adequacy decision.
Changes
If this policy changes we will update the date at the top. If a change is significant and you have an account, we will email you.