Privacy
Quiet Wall · effective 17 October 2026
The Quiet Wall app has no accounts, no sign-in and no servers of its own. What it remembers, it keeps on your phone and in your own iCloud - never with us. Most of what follows is a description of things we do not do. The exceptions are named plainly: Apple’s own services, which hold things under your Apple ID rather than ours, one company that checks purchases, and one that receives counts of how the app is used.
What stays on your phone
The app keeps a short list of things locally, so that it can work at all:
- the total time you have stared,
- your default session length,
- whether the daily reminder is on, and the time you set it to,
- which end sound you chose,
- whether you have finished the intro and seen the first-session note,
- whether you have unlocked the paid tier, and
- a random label for the usage counts described below.
That is the whole list. It is stored in the app’s own storage on the device and shared with the Quiet Wall widgets on the same device so they can show your total time stared. It is not sent to us as we have no server.
iCloud
Two of those things — the total time you have stared and the list of finished sessions — are also saved to your own iCloud account, so that the record survives reinstalling the app and appears on your other devices signed in to the same Apple ID.
This uses Apple’s key-value storage. The data goes to Apple under your Apple ID, and never to us: we have no account with it, no way to read it, and no copy of it.
It outlives the app. Deleting Quiet Wall clears everything on the device, but the copy in iCloud is deliberately not removed — that is what lets the record come back if you reinstall. To remove it, sign out of iCloud or delete the app’s iCloud data in iOS Settings under your Apple ID.
What the app collects
Counts of how the app is used, and nothing about who you are. From version 1.1 the app reports these, and only these:
- each time it starts: which end sound, session length and number of reminders are set, whether notifications are allowed, whether blocking, Apple Health and the paid tier are on, whether the intro is finished, how many Quiet Wall widgets and controls are on the phone, of which kind and at which size, and roughly how many sessions are on record and how many weeks ago the first one was — in broad brackets such as “10–29 sessions” or “4–11 weeks”, never the exact numbers,
- each page of the intro as it is reached, and at its end whether the reminder was set or declined, whether notifications were allowed, and whether a first session was started there or left for later,
- in the intro, each time the end sound is played or “Show me” is tapped,
- when a session ends: how long it was meant to be, how many minutes were done, whether it ran to the end, what started it, whether a reminder had just been tapped, and which end sound it was set to end with,
- each time a reminder is tapped,
- each time the dashboard is opened, and whether that was from the home screen, a swipe, Settings or a widget,
- each time a Quiet Wall widget is tapped, and which one,
- each time the paid tier’s page is opened, and from where, whether the free trial’s explanation was opened from it, and how that visit ended: bought, restored, cancelled, failed, or closed without either — never the price paid or anything about your Apple ID,
- when blocking or Apple Health is switched on: whether iOS allowed it, refused it, could not finish asking, or does not offer it on this phone,
- which end sound is tapped in Settings, and whether the paid tier is on,
- which wallpaper someone tried to save, and whether it saved, was refused or failed, and
- whether a share card went to Instagram, was saved to Photos, or failed.
Each one also carries the app’s version and build number, and the random label described below. That is the whole of it.
The counts carry a random label, and nothing else that points to you. The first time the app starts it makes up a random label and keeps it in its own storage on your phone — not in iCloud — so that counts from the same phone can be seen together: whether people come back, and how far they get. The label is not your name, your Apple ID or any identifier of your phone, and is never combined with anything that is. Deleting the app deletes it; counts already sent stay with PostHog under the old label, with nothing left on your phone or with us that connects them to you. No location is looked up, and the IP address the request arrives from is discarded rather than kept.
The counts go to "PostHog, Inc." as a processor, on its servers in the EU, so that we can see which parts of the app are used. PostHog's own privacy policy can be found at posthog.com/privacy.
And specifically:
- no analytics or product-measurement SDK - the counts above are plain requests the app makes itself,
- no crash or performance reporting,
- no advertising, and no advertising identifier,
- no tracking of you across other apps or websites,
- no name, email address, contacts, photos or location,
- no camera or microphone access - the app never asks for either, and
- no reading of your health data, your photo library, or which apps you use - each of those is covered below, and in every case the app only ever writes.
Purchases
The paid tier is bought through Apple. We never see your payment details and Apple does not give them to us either.
To check whether a purchase is valid and to remember it when you reinstall or switch devices, we use "RevenueCat, Inc." as a processor. When you open the paid screen or make a purchase, RevenueCat receives a randomly generated identifier for your install, the purchase receipt Apple issued, and basic technical facts such as device model, operating system version and country. It does not receive your name or your email address and the identifier is not linked to any account, because there are no accounts.
RevenueCat's own privacy policy can be found at revenuecat.com/privacy.
Apple Health
If you turn it on, a finished session is written to Apple Health as mindful minutes - a start time, an end time, and nothing else. It is stored by Health on your device under your control, exactly as any other app’s mindful minutes are.
The app only writes. It never reads anything from Health, and it asks for no read permission. The row is off until you switch it on, and switching it off stops further sessions being written. What was already written stays in Health, where you can delete it yourself.
Blocking other apps
If you turn on blocking, Quiet Wall uses Apple’s Screen Time system to hold other apps back for the length of a session, and releases them when it ends.
We never learn which apps those are. Screen Time hands the app opaque tokens rather than names and the app reads no usage data of any kind - not which apps exist on your phone, not which you opened, not for how long. Nothing about it is stored after a session ends and nothing leaves the device. It is asked for once, it applies only to you, and it can be turned off in Settings.
Wallpapers
Saving a wallpaper asks for permission to add to your photo library, and that is the only photo permission the app holds. It cannot see, open or read anything already in your photo library.
Reminders
Reminders and the sound at the end of a session are scheduled by iOS on the device itself. There is no push server involved, and no notification token ever leaves your phone. If you decline the notification permission, the rest of the app still works.
This website
No forms, no cookies, no analytics, no third-party requests. Our hosting provider keeps ordinary server logs, which include the IP address of the request, for a short period for security and reliability.
Children
Quiet Wall is not directed at children. Nothing it counts can identify anyone, children included.
Your rights
If you are in the EU or the UK, you have the right to ask what personal data is held about you and to have it corrected or erased. For the app the honest answer is that we hold nothing tied to your name or any account: the counts above carry only the random label on your phone, which we have no way to connect to you, and deleting the app removes it along with everything else the app stored on your phone. If you want the purchase records held by RevenueCat looked into or deleted, write to hello@lessinput.com and we will pass it on.
Changes
If this policy changes, the date at the top changes with it. If a change ever means the app starts collecting something, that will be said plainly here and in the app's release notes - not buried in a revision.
Version 1.1 is the first such change: the counts above. Until then the app collected nothing at all.
Contact
The data controller is wallstare — Alexander Specht, c/o Online-Impressum 10549, Europaring 90, 53757 Sankt Augustin, Germany.