Privacy policy.

Your choices

Participation in the anonymous community is optional. The app asks before sending installation-linked presence, session, activity, or game records. You can use local reminders, breaks, games, and personal Humanity without joining the online community.

On Home, open Privacy & Support (iPhone) or Privacy & data (Android) and change Live community. Choose USE ON THIS DEVICE (iPhone) or Keep my records local (Android) on first launch to keep installation-linked activity local. Turning participation on later does not upload activities completed while participation was off. Turning community participation off stops future installation-linked activity sharing. It does not by itself delete records already sent. Notifications are optional and can be changed in your device settings. On Android, Alarms & reminders access is optional; without it, Android may delay a scheduled notification. The app distinguishes scheduled reminders, countdown-only use, denied permission, and scheduling errors.

Information the app uses

• Random installation identifier. The app creates an identifier and stores it locally to distinguish your installation. It is not an advertising identifier, and it is not stored in Keychain to track reinstalls.
• Community activity. When you participate, the backend receives that identifier with recent app presence; break-session start and return times; out-of-tokens or voluntary-break choices; optional AI service names you select; activity types, times, and completion states; and game results, daily puzzle identifiers, and completion times.
• Local app state. Reminder times, notification choices, personal Humanity, and local history stay in app storage on your device. Notifications are scheduled locally. Activity and game records are also sent for community features only when you choose to participate.
• Support messages. If you email us, we receive your address, message, and anything you choose to include so we can respond.

We do not request your real name, AI credentials, AI conversations, token balance, contacts, or precise location. Installation-linked data is pseudonymous; having no sign-in does not mean that no data is collected.

How information is used

We use community records to display recent presence, shared activity totals, and anonymous daily rankings; verify activity completions; and prevent duplicate or abusive requests. We do not use this information for targeted advertising or cross-app tracking.

The app does not include an active Firebase, Google Analytics, or advertising SDK. Selecting an AI service in the app does not connect to that service or let OutOfTokens read its data.

What is visible to others

The app shows aggregate presence and activity totals. Daily game rankings show a generated Human label, completion times, and ranks. The website shows aggregate totals only. There are no public profiles, chat rooms, direct messages, or public AI conversations.

A Humanity share image is generated on your device. You decide whether and where to share it through the system share sheet. OutOfTokens does not automatically upload or publish it.

Hosting and technical requests

Cloudflare Workers and D1 provide the app’s backend hosting and database. The website is served through HOL4B’s hosting and Cloudflare. These services process the information needed to deliver and protect the service, which may involve processing outside your country.

Network requests expose technical information such as IP addresses to hosting infrastructure. IP-based request limits help reduce abuse. These addresses are not stored as an app-profile field in our application database. Infrastructure providers may process technical request and security records under their applicable service terms.

The website does not set analytics cookies, run advertising trackers, or count web visitors as app participants. A sponsor link opens the sponsor’s own website, where that site’s policy applies.

Retention and deletion

Community records are retained to operate the features described above unless you request deletion. They do not have an automatic deletion deadline. The two-minute presence window determines whether an installation appears in the current count; it is not a database deletion timer.

Open Privacy & Support (iPhone) or Privacy & data (Android) on Home and choose Delete my data. After you confirm, the app requests deletion of the current installation’s server records. It clears local history and creates a new random identifier only after the server confirms success. If this installation has only been used locally, its local history can be cleared without a server request. If server deletion fails, the app keeps the existing identifier and history, switches community participation off, and lets you retry.

Removing the app and its local data can remove local progress, but uninstalling alone does not send a server deletion request. Please use the in-app deletion control first if you want server records removed. If you lose the installation identifier, we may be unable to identify the old records. Copy support ID in the app’s privacy screen lets you copy the current identifier if you choose to include it in a support request.

After deletion, we retain a one-way SHA-256 hash of the deleted installation identifier, without a fixed expiry, only to block delayed or offline requests from recreating those records. The deleted identifier itself and its activity history are removed from active application tables. A new installation identifier is not blocked.

Shared cached totals may take up to 30 seconds to reflect the deletion. Deletion applies to active application records; it does not instantly erase any provider recovery copies. If you need help with a privacy or deletion request, contact support@hol4b.com.

Changes and contact

We will update this page and its effective date when the policy changes. Depending on your location, you may have rights to access, correct, or delete information relating to you, or to withdraw your choice to participate. Contact support@hol4b.com with a request.