lesscue1. Who we are and what this covers
Lesscue is provided by Clayee Co., Ltd. ("we", "us" or "our"), the company that also operates ViviDiary. This Privacy Policy covers the Lesscue iPhone app, its Screen Time extensions, this website and Lesscue support. It covers the on-device app, Cloudflare account architecture and the optional Pro-only iCloud sync, widgets and Live Activities implemented for the development app. iCloud sync is off by default and requires a separate review and explicit connection. Final on-device validation is underway; there is no public App Store release yet. The app and account service remain in development; sign-in is available only when the account page explicitly enables it.
For privacy questions, contact support@clayee.io and include "Lesscue" in the subject. Using Lesscue does not create a ViviDiary account or connect your records to that service.
2. Local storage by default
Your app groups and their names, Always Allowed selections, schedules, preferences and recorded focus sessions are stored in a local container shared by Lesscue and its own Screen Time extensions. Temporary recovery information is kept there too, so a failed clean-up can be resumed safely.
Personal app records are local by default. Optional Pro-only iCloud sync remains off until you review and explicitly enable it. A separate, optional account service is being prepared on Cloudflare Workers and D1 for authentication metadata only. Supabase is not used. These personal records are not sent to Cloudflare, ViviDiary, an AI service or an analytics provider. If you enable iCloud sync, only the selected sync data described below is sent to Apple’s private CloudKit database for your Apple Account. There are no advertising or product analytics SDKs in the current app. We do not sell personal information or share it for cross-context behavioral advertising. The same no-advertising and data-control principles apply to Free and Pro. Optional iCloud sync, widgets and Live Activities require Pro.
Lesscue does not request your diary entries, health records, contacts, photos, microphone recordings or precise location. The data practices of other Clayee products do not apply to Lesscue merely because the company is the same.
3. Screen Time and permissions
App, category and website selection uses Apple's Family Controls picker and opaque selection tokens. Apple-provided labels display the selected items. Lesscue stores the selections needed to apply your boundaries; it does not upload an inventory of installed apps or a browsing history.
Usage reports are rendered within the Device Activity report extension. Raw app and website usage is not exported into Lesscue's main app database or sent to us. Lesscue's focus history records its own sessions, separately from Apple's Screen Time history.
You choose whether to authorize Screen Time access. You can change authorization in iPhone Settings. Optional local notifications require a separate Apple permission and do not send your schedules or session history to a Lesscue push server. Revoking a permission may prevent the related feature from working.
3a. Optional Gem motion
If you enable the Gem tilt response, Lesscue processes device orientation from Apple Core Motion locally to adjust the scene’s light and position. Motion samples are temporary: we do not record them, include them in focus history or send them to Cloudflare, iCloud, Clayee or an analytics provider. The feature is off by default and stops when the scene is hidden, the app is inactive or Reduce Motion is enabled. Color selection is a local visual preference and does not change blocking or subscription access.
4. Account sign-in is a separate data path
The first account implementation uses Sign in with Apple through a Cloudflare Worker. Apple verifies your identity. The Worker requests no name or email scope; it receives and verifies an Apple identity token and authorization code, derives a product-specific protected subject identifier, and creates a random Lesscue account ID. We do not create a password database or copy your Apple profile into Lesscue.
Cloudflare D1 stores the account ID, protected provider identifier, creation time, terms version and acceptance time, hashed session identifiers and expiry times. Short-lived state, nonce, proof-of-possession and flow-binding hashes protect browser and native iPhone sign-in exchanges. Apple tokens are processed transiently for validation or revocation and are not retained in this initial implementation. Browser sign-in uses a Secure, HttpOnly, host-only cookie that expires after 24 hours. The native iPhone app keeps its separate 24-hour account session and Apple user identifier in device-only Keychain storage; these credentials are not shared with Screen Time extensions or synchronized to iCloud. Session identifiers are hashed in D1. These are essential authentication credentials, not advertising identifiers.
Signing in does not upload personal app records, restore deleted local data, link a ViviDiary account or move purchases between Apple Accounts. Core focus and blocking features remain usable without sign-in. The app can sign out and initiate account deletion with fresh Apple identity verification once the service is activated. Website account management is enabled separately. Neither path can read or clear the app's local records.
5. Apple services and purchases
"Local by default" means the current app stores personal records on the device, and iCloud sync requires a separate explicit opt-in. Cloudflare account authentication and website delivery use separate server information. Cloudflare D1 does not store your groups, schedules or focus history. Apple-managed iCloud device backups may include local app data according to your device settings. Apple's Screen Time sharing and App Store services are separate and follow Apple's policies. Learn what iCloud Backup includes.
Lesscue Pro uses Apple's StoreKit. When purchases are available, Apple processes payment. The app receives product and transaction identifiers, subscription status and relevant renewal or expiration information to verify access locally. We do not receive your full card number or store your payment credentials. Apple may provide the developer with transaction, sales or financial reports under its developer services.
Purchase, restoration and subscription management can contact Apple's services. They do not upload your app groups, Screen Time reports or focus history to Lesscue. There is no RevenueCat integration or Lesscue billing account in the current implementation. Apple's Privacy Policy explains Apple's processing.
5a. Optional iCloud sync for Pro
Optional device-to-device sync uses your private Apple CloudKit database. It is a Pro feature, disabled by default. In Settings → iCloud sync, you review the selected data and any existing iCloud records before connecting. It is separate from a Lesscue website account, StoreKit purchase restoration and Apple’s own iCloud device backup. Apple-managed device backup is not a Lesscue Pro feature.
The sync scope is group names and identifiers, schedule definitions, non-sensitive preferences and Lesscue’s own focus session records without an automatic history expiry. Group names and focus records may reveal your routines; enabling sync means that selected information leaves your iPhone and is stored by Apple. We do not route it through Cloudflare. App, category and website selection tokens, Always Allowed selections, raw Screen Time reports, permissions, live timers, active blocking state, recovery snapshots, purchase data and authentication credentials are excluded.
On another iPhone, downloaded groups require local app selection and schedules arrive switched off for your review. Sync will not grant Screen Time permission, restore an active session or automatically start blocking. Sync depends on your Apple Account, available iCloud storage, connectivity and Apple’s services; it is not an immediate or guaranteed backup. We do not make a blanket end-to-end encryption claim for this feature. See Apple’s Privacy Policy.
The app lets you stop syncing while retaining local data and separately request deletion of Lesscue’s iCloud copy. A local-only reset first disconnects this device from sync so records do not immediately return. Deleting an iCloud copy requires Apple service confirmation; offline or failed deletion remains pending. Pro expiration pauses sync and keeps local records; cloud deletion remains available without Pro. Deleting a Lesscue account or canceling a subscription does not itself delete iCloud records. An iCloud account change or a cloud deletion on another device stops sync and requires a new review before reconnecting.
5b. Pro widgets and Live Activities
Widgets and Live Activities use a small summary stored on this iPhone, shared only with Lesscue’s widget extension. The summary includes observed focus time, the next routine and the current timer, as needed for the surface. It does not contain app-selection tokens, raw Screen Time usage or authentication credentials. No Lesscue remote push service or Cloudflare record upload is required.
A widget or Live Activity can make this summary visible on your Home Screen, Lock Screen or Dynamic Island, depending on your device and settings. You choose whether to add a widget or enable Live Activities; iOS controls their display and refresh timing. Removing a widget or dismissing a Live Activity does not end protection. Ending a session and Emergency access stay inside Lesscue. These surfaces require active Pro; expiry does not delete your local focus records.
6. Website and support information
This website displays illustrative screens. It cannot read your Screen Time, connect to your app's local store or start a real focus session. Artwork and fonts are self-hosted. Optional Google Analytics 4 is used only on public marketing pages after you choose Allow analytics. Until then, no Google Analytics script is loaded and no analytics request is sent. Declining keeps it off. Account pages, authentication callbacks and APIs are excluded. Your iPhone records are never sent to Google Analytics. We do not use advertising pixels, Google Signals, advertising personalization, User-ID or cross-product identity linking.
With your consent, Google Analytics processes website page views and engagement, pseudonymous browser/cookie identifiers, browser/device information, referral origin and approximate geography derived by Google. Our tag removes URL query strings and fragments and sends no account identifier, email address, app selection, Screen Time report or focus record. Automatic enhanced interaction measurement is disabled. Google may process this website information internationally under its privacy terms. Analytics cookies are configured for up to 60 days and user/event data retention is set to two months, with activity-based extension disabled; aggregate reports may have different retention. Google Privacy Policy and GA4 data collection explain Google processing.
You can choose Decline or change your choice using Cookie preferences in the footer. We save only your consent choice on this browser for up to 180 days. Withdrawing consent stops analytics, clears accessible GA cookies and reloads the page. Global Privacy Control and Do Not Track preferences keep analytics disabled. Website analytics consent is separate from optional Apple account sign-in and iPhone permissions. Search Console and Bing Webmaster Tools verify website ownership and receive the public sitemap; they do not receive app records or add visitor tracking scripts.
The website is delivered through Cloudflare static assets and Workers. Cloudflare may process IP addresses, browser details, URLs, timestamps and security records to deliver and protect the website. The account service stores only authentication metadata in Cloudflare D1. Cloudflare Privacy Policy.
If you email support, we receive your email address, message and any attachments you choose to send. Our mail service processes this correspondence to deliver and store it. Please do not send app, category or website selection tokens, detailed activity records or other sensitive content that is unnecessary for your question. Preparing or copying diagnostic information inside the app does not send it automatically; we cannot remotely inspect your iPhone.
7. Purposes, sharing and international processing
We use authentication metadata to create and secure your account, maintain sessions, record terms acceptance and honor sign-out, revocation and deletion requests. We use support correspondence to answer your request, investigate a reported issue and maintain a record of the response. Website request information is used for delivery, security and abuse prevention. Optional website analytics is used to understand public website visits on the basis of your consent, which you can withdraw through Cookie preferences. We may retain or disclose information we actually hold when legally required, to handle a legal claim or to protect the security and rights of users and our services. Access is limited to personnel and service providers who need it for those purposes.
Where the GDPR or similar law applies, account authentication and responding to service requests may be necessary to perform a contract or take steps you request before one. Website security and proportionate support recordkeeping rely on legitimate interests, subject to your rights; legally required records rely on legal obligations. When consent is required for a particular processing activity, it is requested separately and can be withdrawn. Reading this policy is not blanket consent to unrelated processing.
Clayee is based in the Republic of Korea. Authentication metadata, support correspondence and website delivery information may be processed in Korea and other countries where the relevant mail, hosting or consented website analytics provider operates. Applicable transfer safeguards must be used where the law requires them. This does not create an international transfer of your on-device focus history to us. Contact us for details about the processing and safeguards applicable to a specific request.
8. Retention, deletion and recovery
Account records are kept while the account exists. Session records expire after 24 hours, sign-in attempts after 10 minutes and notification deduplication records after 48 hours; expired rows are removed by daily maintenance. Logout invalidates that session immediately. Account deletion requires fresh Apple verification, revokes the Apple grant and removes the active account and its sessions. If revocation or database clean-up fails, the interface reports failure rather than claiming deletion.
To prevent delayed sign-ins or a database recovery from restoring a deleted or revoked identity, a protected subject identifier and revocation timestamp may remain for up to 35 days, followed by daily clean-up. Cloudflare D1 recovery copies can retain authentication metadata for up to 30 days depending on the plan; operational restoration must reapply deletions and invalidate sessions. These copies never contain your app groups, schedules or focus history.
On-device settings and history remain until you change or delete them, reset the app or remove its local data. In Settings, you can clear focus history separately or reset local Lesscue data. A reset first attempts to clean up Lesscue's active blocking resources. If clean-up fails, the original data and a recovery marker are retained so the process can continue rather than falsely reporting completion. If you have enabled iCloud sync, its separate controls and deletion rules above apply. A local-only reset disconnects this device from sync before replacing local records. Cloudflare account sign-in cannot restore personal records.
Deleting Lesscue data does not cancel an Apple subscription, revoke an Apple permission, delete Apple's Screen Time history or erase an existing device backup. Manage these separately through Apple. Deleting the app may remove local data; recovery from a device backup depends on Apple and your backup settings.
Support correspondence is retained for up to three years after resolution, following the company's existing support retention approach, unless earlier deletion is appropriate or a longer period is required for a legal obligation or claim. Hosting and security records follow the hosting provider's retention settings and applicable obligations; they are not kept by Lesscue as an app-activity history. Contact us for information about a specific hosting or support record.
9. Your privacy rights
Depending on the law that applies to you, you may request access, correction, deletion, restriction, portability or information about personal data we hold; object to certain processing; withdraw consent; and complain to a competent data protection authority. You will not be discriminated against for exercising applicable privacy rights. These rights may be subject to lawful exceptions.
Send a request to support@clayee.io with "Lesscue privacy request" in the subject. We may request proportionate information to verify a request and will respond within the period required by applicable law. We will not ask you to upload your entire focus history to identify a record that exists only on your iPhone. You can request account deletion from the Account page. We cannot retrieve, correct or delete on-device records through the website. iCloud data controls operate in the app through your Apple Account, separately from Cloudflare account deletion.
California residents should note that Lesscue does not sell personal information, share it for cross-context behavioral advertising or use sensitive personal information for advertising. EEA and UK residents may contact their local supervisory authority. Information about GDPR rights and California privacy rights are available from the relevant authorities.
10. Children and security
Lesscue is intended for people aged 13 or older. Users under 16 must have a parent or guardian's consent and supervision, subject to any higher age required by local law. We do not knowingly collect personal information from children under 13. If you believe a child has sent information to our support service, contact us so we can assess and delete it where required.
The app uses Apple's sandbox and a container limited to Lesscue and its own extensions. Device security, your passcode, Apple Account and backup settings affect the protection of local data. No electronic storage or communication method can be guaranteed completely secure. A source review is not an independent security audit.
11. Changes and contact
We will update this policy when our practices change and show the new date. Material changes to how personal information is handled will be communicated through the website and, where appropriate, the app before they take effect, with any notice or consent required by law. Uploading personal records, adding content sync or changing the authentication data collected would require an updated disclosure and any consent required by law. Pro-only iCloud sync is disabled by default. Enabling it requires its own review and connection; public availability remains subject to final device validation and release.
Clayee Co., Ltd.
support@clayee.io · Subject: Lesscue privacy
Effective and last updated: October 26, 2026. See our Terms of Service and Support page.