North Tumbleweed LLC — Effective April 4, 2026
North Tumbleweed LLC ("we", "us", "our") develops and publishes mobile applications for iOS. This Privacy Policy explains what information we collect, how we use it, and what rights you have regarding your data across all of our applications.
By using any of our apps, you agree to the practices described in this policy. If you do not agree, please do not use our apps.
This policy covers the following applications:
| App | Description |
|---|---|
| PushLock | App blocker with pushup detection using Screen Time / FamilyControls |
| I Am Locked In | AI-powered discipline coach with pushup challenges |
| Stamped | Travel postcard journal with photo and location features |
| Forge | Stoic audiobook player |
| RizzAI | AI dating coach with screenshot analysis |
| InstantAI | AI chat assistant |
| Chiseled | Face analysis and glow-up tracker with camera-based scoring |
The following apps request camera access:
Stamped Stamped requests location permission to tag postcards with the GPS coordinates of where they were created. This enhances your travel journal by placing postcards on a map.
No other app collects or accesses location data.
InstantAI InstantAI may read your clipboard when you explicitly tap to paste content into the chat input. This is a standard paste action initiated by you.
All of our apps use Apple's SwiftData framework to store data locally on your device. This includes:
We use data strictly to provide app functionality:
| Purpose | Data Used |
|---|---|
| Pushup detection | On-device camera frames (PushLock, I Am Locked In) |
| AI coaching and chat | Your messages sent to AI providers (I Am Locked In, RizzAI, InstantAI) |
| Photo uploads | Photos you choose to upload (Stamped) |
| Audio playback | Audiobook streaming from cloud (Forge) |
| Face analysis | On-device camera frames and stored photos (Chiseled) |
| Subscription management | Anonymous purchase tokens via RevenueCat (all apps) |
| Location tagging | GPS coordinates at postcard creation (Stamped) |
We do not sell your data. We do not use your data for advertising. We do not build user profiles.
Our apps integrate with the following third-party services. Each has its own privacy policy governing data it receives:
We use RevenueCat to manage subscriptions and in-app purchases. RevenueCat receives anonymous identifiers and purchase data from Apple. It does not receive your name, email, or other personal information from us.
Your messages and imported screenshots (text extracted via on-device OCR) are sent to Anthropic's Claude API through our backend proxy for AI responses. Anthropic processes this data according to their usage policies. We do not store your messages on our servers beyond the duration needed to relay the request.
Your chat messages are sent to one or more AI inference providers through our backend proxy. These providers process your input to generate responses. We do not store your messages on our servers beyond the duration needed to relay the request.
Stamped uses Cloudflare R2 for optional cloud photo backup. Forge streams audiobook content from Cloudflare R2. Cloudflare acts as a storage and delivery provider.
PushLock uses Apple's FamilyControls framework to block selected apps. The selection of which apps to block is managed entirely by Apple's Screen Time system. We do not have access to the names or identifiers of the apps you choose to block — Apple provides this data in an opaque, encrypted format.
InstantAI uses Supabase for optional user authentication and data storage. If you create an account, your email address and authentication tokens are managed by Supabase. Your chat data may be synced through Supabase for cross-device access.
All locally stored data (SwiftData) persists on your device until you either delete it within the app or uninstall the app. Uninstalling removes all local data.
Photos uploaded to Cloudflare R2 are retained until you delete them within the app. You may request full deletion of cloud-stored data by contacting us.
Messages sent to AI providers are processed in transit. Our backend proxy does not persist your messages. Refer to each provider's retention policy for their data handling practices.
If you created an account in InstantAI, you can delete your account and all associated data from within the app's settings. You may also request account deletion by contacting us.
RevenueCat retains anonymous subscription records as needed to manage your purchase. You can request deletion through RevenueCat or by contacting us.
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following rights:
Because most data stays on your device, exercising these rights is often as simple as deleting the app. For cloud-stored data or subscription records, contact us and we will respond within 30 days.
Legal basis for processing: We process data based on (a) your consent (camera, location, photo library permissions), (b) contract performance (providing app features you use), and (c) legitimate interest (subscription management).
If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with the following rights:
To exercise these rights, contact us at the email address below. We will verify your identity and respond within 45 days.
We implement reasonable security measures to protect data in transit and at rest:
No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
We may update this Privacy Policy from time to time. When we do, we will update the "Effective" date at the top of this page. We encourage you to review this policy periodically. Continued use of our apps after changes constitutes acceptance of the updated policy.
For material changes, we will make reasonable efforts to notify you within the affected app.
If you have questions about this Privacy Policy or wish to exercise your data rights, contact us:
North Tumbleweed LLC
Email: support@northtumbleweed.com
Web: northtumbleweed.com