Effective date: August 24, 2026
Last updated: August 24, 2026
Slate is built and operated by Raze Labs, LLC (“Raze Labs,” “we,” “us,” or “our”). This policy explains what Slate collects, why, where it goes, how long we keep it, and how you can get it back or get rid of it.
We have tried to write this so that it is actually readable. If anything here is unclear, email ian@razelabs.app and we will explain it.
Slate uses Apple's Screen Time frameworks (Family Controls, Managed Settings, and Device Activity) to apply blocking. This is worth explaining in detail, because it is the part people most reasonably worry about.
When you choose which apps and categories to block, you make that choice inside a picker provided by Apple, not by us. iOS does not hand your selection back to Slate as a list of app names or bundle identifiers. It hands back opaque tokens that are meaningless outside your device and cannot be reversed into the identity of an app. Slate stores those tokens locally so that blocking can be applied, and they are excluded from everything we transmit. Our servers have never received them and are not built to accept them.
The practical consequences:
| We cannot see | Because |
|---|---|
| Which apps or categories you blocked | iOS returns opaque, device-scoped tokens rather than app identities |
| Which apps you use, or for how long | We never request or read Screen Time usage data |
| When you open a blocked app | The blocking screen is drawn by an iOS extension that has no network access |
| Your browsing, location, contacts, photos, camera, or microphone | Slate does not request access to any of these |
Slate is a self-management tool for the person using it. It is not a monitoring, surveillance, or reporting product, and we do not offer a way for one person to observe another person's activity.
When you create an account, you sign in with Sign in with Apple. We receive:
We do not receive your Apple password. We do not ask for your name, phone number, date of birth, address, or payment details, and there is nowhere in Slate to enter them.
We also receive a short-lived authorization code from Apple at sign-in, which we exchange for a token used for exactly one purpose: revoking your Sign in with Apple grant when you delete your account, as Apple requires. It is not used for anything else and is destroyed when your account is deleted.
So that your blocks survive reinstalling the app or moving to a new device, we store the blocks you create:
Titles are free text that you write. Please do not put sensitive information in a block title. Call it “Therapy” rather than typing details you would not want stored.
For each scheduled instance of a block we store when it was scheduled to run, whether it was ended early, and whether an emergency pass was used to end it. This exists so your history is consistent across devices. The count of emergency passes you have left today is kept only on your device and is not transmitted.
If you allow notifications, we store the push tokens iOS issues for your device so that we can send block reminders and start the Live Activity that shows a running session. These tokens identify a device installation, not a person, and are rotated by iOS. Deleting the app invalidates them.
Slate offers an auto-renewing subscription purchased through the App Store. We never see or receive your payment card, billing address, or Apple ID password. Apple processes the payment.
We use a third-party subscription management service to tell us whether your subscription is active. It receives a pseudonymous account identifier and the purchase information Apple provides (product purchased, purchase and expiry dates, renewal status, and whether the purchase is in a test or production environment).
We also use a third-party paywall service that records which subscription screens were shown to you and what you did with them, so we can tell whether the pricing screen is working. It receives the same pseudonymous account identifier and basic device information such as device model, operating system version, locale, and country.
We do not operate an analytics SDK that tracks your behavior inside Slate. Our subscription and paywall providers collect the limited operational data described above. Apple may separately provide us with aggregated, non-identifying crash and usage reports if you have opted into sharing them with developers in your iOS settings; that choice is yours and is made in iOS, not in Slate.
We do not collect your precise or approximate location, contacts, photos, health data, browsing history, advertising identifier (IDFA), or a list of the apps installed on your device. Slate does not present an App Tracking Transparency prompt because Slate does not track you.
For users in the UK, EU, and other regions with similar laws, our legal bases are:
| What | Why | Legal basis |
|---|---|---|
| Account identifier and email | To create your account, keep you signed in, and let your schedule follow you between devices | Performance of a contract |
| Your schedule and session outcomes | To deliver the core function of the product and restore it after a reinstall | Performance of a contract |
| Push tokens | To send the reminders and Live Activities you enabled | Consent, which you give in the iOS permission prompt and can withdraw in iOS Settings |
| Subscription status | To give you access to paid features and to comply with tax and accounting obligations | Performance of a contract, and legal obligation |
| Paywall interactions | To understand whether our pricing screens work | Legitimate interests in operating and improving a paid product |
| Apple refresh token | To revoke your Apple sign-in grant on account deletion, which Apple requires of us | Legal obligation, and performance of a contract |
We do not use your information for advertising, for profiling, or for automated decision-making that produces legal or similarly significant effects.
We do not sell your personal information. We have never sold it, and we do not share it for cross-context behavioral advertising. We do not disclose it to data brokers.
We use a small number of service providers to run Slate. Each is bound by contract to process data only on our instructions, to protect it to a standard at least equal to this policy, and not to use it for their own purposes:
| Category | Purpose | What they receive |
|---|---|---|
| Cloud hosting and database providers | Running our servers and storing your account and schedule | Everything described in sections 3.1 to 3.4 |
| Subscription management provider | Determining whether your subscription is active | Pseudonymous account identifier, purchase and renewal information |
| Paywall provider | Presenting and measuring subscription screens | Pseudonymous account identifier, basic device information, paywall interactions |
| Apple | Payment processing, sign-in, push delivery, app distribution | Governed by Apple's own privacy policy |
All of these providers are located in the United States. We will provide the current list of named providers to any user who asks; email ian@razelabs.app.
We may also disclose information if we are legally required to by a valid legal process, or where we believe in good faith that disclosure is necessary to protect the rights, safety, or property of our users, the public, or Raze Labs. If Raze Labs is involved in a merger, acquisition, or sale of assets, your information may transfer as part of that transaction; we will notify you before it becomes subject to a materially different privacy policy.
Your information is stored on servers in the United States. If you are located outside the United States, using Slate involves transferring your information there. Where required, we rely on the European Commission's Standard Contractual Clauses or an equivalent lawful transfer mechanism.
| Data | Retained |
|---|---|
| Account, schedule, session outcomes | Until you delete your account |
| Push tokens | Until they are replaced or your account is deleted |
| Apple refresh token | Until your account is deleted, at which point it is used once to revoke the grant and then destroyed |
| Subscription records | Until you delete your account, except where tax and accounting law requires us to keep transaction records for longer, typically up to seven years |
| Server logs | A short operational period, normally no more than 30 days |
When you delete your account we delete your account record and its associated schedule and device data from our systems. Ordinary backups are cycled out on a rolling basis, so a copy may briefly persist in an encrypted backup before it is overwritten.
Slate includes account deletion in the app, as Apple requires. Open Settings from the home screen, then Delete account under Account.
Deleting your account is immediate and cannot be undone. It:
Deleting your account does not cancel your App Store subscription, because only Apple can do that. Cancel it in iOS Settings, then your name, then Subscriptions. Deleting the app alone does not delete your account or cancel your subscription either.
If you would rather we handled deletion for you, email ian@razelabs.app from the address associated with your account and we will action it within 30 days.
Depending on where you live, you may have the right to access the personal information we hold about you, to correct it, to delete it, to receive a portable copy, to object to or restrict certain processing, and to withdraw consent you previously gave.
If you are in the UK or EU, you also have the right to lodge a complaint with your local data protection authority. We would appreciate the chance to resolve it first.
If you are in California, you have the right to know what personal information we collect and how we use and disclose it, to delete it, to correct it, and to opt out of its sale or sharing. We do not sell or share personal information, so there is nothing to opt out of, and we do not offer financial incentives in exchange for personal information. We will not discriminate against you for exercising any of these rights.
To exercise any right, email ian@razelabs.app. We will respond within the time your law allows, normally 30 days. We may need to verify that the request comes from the email address on the account before acting on it.
We use encryption in transit for all communication between Slate and our servers, and encryption at rest for stored data. Access to production systems is restricted and authenticated. Data stored on your device is protected by iOS file protection, which means it stays encrypted until you unlock your device after a restart.
No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects your personal information, we will notify you and the relevant regulators as the law requires.
Slate is not directed to children under 13, and we do not knowingly collect personal information from them. You must be at least 13 years old, or the minimum age of digital consent where you live if that is higher, to use Slate. Slate is not a parental control product and does not allow one person to monitor another.
If you believe a child has provided us with personal information, email ian@razelabs.app and we will delete it.
We may update this policy. If we make a material change, we will update the date at the top and, where the change meaningfully affects your rights, tell you in the app or by email before it takes effect. Continuing to use Slate after a change takes effect means you accept the updated policy.
Raze Labs, LLC
Seattle, Washington, USA
ian@razelabs.app
For privacy questions, requests, or complaints, use the address above and put “Privacy” in the subject line.