Pestr Terms of Service

Effective date: July 2, 2026
Last updated: August 31, 2026

These Terms of Service ("Terms") govern your use of the Pestr website, iPhone app, Pestr Alarm device and firmware, backend services, mailing list, and related support (together, the "Services"). By using the Services, you agree to these Terms. If you do not agree, do not use the Services.

1. Eligibility

You must be legally able to enter into these Terms. If you have not reached the age of legal majority where you live, a parent or legal guardian must agree to these Terms for you. You must be at least 18 years old to use Photo mode. If you use the Services for an organization, you represent that you have authority to bind it.

2. Service Availability

The iPhone app lets you sign in with email and password, Google, or Apple. A new email-and-password account must confirm its address with the six-digit code Pestr sends before it can sign in. A signed-in Pestr account authenticates protected backend requests and can enable a Profile, Friends, eligible gifting, limited Friend productivity summaries, and device-benefit activation. Signing in does not upload full tasks or timelapse videos.

The website provides product information, an App Store link, and an optional mailing list, but no checkout or user login. Joining the website mailing list does not create an app account. The optional product-update checkbox shown during initial Profile setup is separate from account creation and is not required to use Pestr.

Core app features can work locally without signing in. Signing in, account confirmation and recovery, Photo validation, Profile and Friend features, productivity-summary sync, device-benefit activation, gifting, firmware delivery, and App Store purchases or restores require network access. Protected signed-out requests may use a random internal anonymous service identifier. That identifier is not a separate user-facing Profile or guest account and cannot activate the included device year or send gifts.

We may change, suspend, or discontinue a feature when reasonably necessary for security, legal, operational, or product reasons. Where practical, we will avoid unnecessarily removing already-paid access.

3. License and Ownership

Subject to these Terms and applicable App Store terms, Pestr grants you a limited, personal, revocable, non-exclusive, non-transferable license to use the app and firmware on compatible devices for their intended purpose.

Pestr and its licensors own the Services, software, firmware, design, branding, documentation, and related intellectual property. No ownership is transferred to you.

You may not copy, modify, distribute, sell, lease, sublicense, reverse engineer, bypass security or usage controls, extract device secrets, interfere with the Services, submit fraudulent device claims, manipulate productivity or gift records, misuse backend endpoints, or use the Services to violate law or another person's rights, except where a restriction is prohibited by law.

4. Your Responsibilities

You are responsible for:

• reviewing tasks, schedules, proof requirements, volumes, permissions, sharing choices, and connected-alarm settings before relying on them;
• using only an email, Google, or Apple account you are authorized to use and protecting your password, confirmation and recovery codes, iPhone, sign-in provider account, Pestr session, network, Pestr Alarm, imported media, QR references, and Pestr data;
• choosing a username and Profile icon you are entitled to use and that do not impersonate, mislead, harass, or infringe another person;
• having the rights and permissions needed for images, recordings, audio, QR payloads, network credentials, Profile content, and other content you provide;
• using Screen Time controls, cameras, alarms, recordings, Friend features, and shared metrics lawfully and with any required consent; and
• testing important reminders and maintaining reasonable backup plans.

Do not use Pestr to harass, surveil, spam, coerce, deceive, punish, or control another person, or as an emergency, medical, safety-critical, or life-support system.

5. Profiles, Friends, Productivity Sharing, and Gifts

A Pestr Profile uses a unique username and selected icon. Your Profile is not published on the open web, but another signed-in Profile that knows your exact username can use it to send a Friend request. Pestr does not verify real-world identity, so a username, Friend request, or accepted connection is not proof of who a person is. You are responsible for deciding whom to accept and what to share.

Accepted Friends can see usernames, Profile icons, friendship dates, and any productivity categories enabled by each person's sharing controls. When Share streak is on, Friends may see current and highest streaks. When Share total hours is on, Friends may see daily, weekly, monthly, and all-time timelapse durations and related rankings. These values are based on limited synced metadata and may be delayed, incomplete, or inaccurate. Turning sharing off hides a category from Friends but does not delete the underlying summary. Removing a Friend stops future Friend-only visibility after the Services process the change, but does not undo a completed gift.

Pestr may reject, restrict, rename, suspend, or remove Profiles, requests, connections, or related access when reasonably necessary to address impersonation, harassment, fraud, abuse, security, legal, or operational risk. Pestr does not promise to monitor all Profile or Friend activity.

Device-bound gifts are promotional benefits, not payments between users. The current eligible alarm owner may gift one month of Pestr Photo to up to three different accepted Friends over that physical alarm's lifetime. Each recipient may receive only one gift from that physical alarm. Each successful gift also adds one month to the giver's Pestr Photo access. A gift has no cash value, cannot be sold or exchanged, and ordinarily cannot be reversed after it is issued. Removing a Friend, changing a username, transferring the alarm, or changing or deleting an account does not restore the physical alarm's consumed gift budget. Deleting an account may end promotional access attached to that account.

6. Reminders and Safety Limitations

Reminders, AlarmKit alarms, notifications, Screen Time shields, QR checks, Photo checks, timelapses, Total Disarm, local-network connections, Pestr Alarm schedules and speakers, battery reporting, Wi-Fi, firmware updates, backend services, Friend features, productivity summaries, gifts, and local storage can fail, be delayed, be inaccurate, or become unavailable because of permissions, volume, Focus settings, battery level, connectivity, distance, interference, operating-system behavior, app termination, setup, storage limits, third-party outages, hardware faults, or software errors.

Pestr is a productivity aid, not a guarantee that a task will start, sound, block an app, be completed, or be verified. Total Disarm and similar controls can weaken a reminder. You remain responsible for important obligations and for using backup alarms where missed timing could cause harm.

7. Photo and QR Features

You must be at least 18 years old to use Photo mode. Photo verification sends a captured image and your task description through your current Pestr service session to a Pestr endpoint that uses Google's Gemini API for an automated match decision. Pestr does not intentionally persist the image in its application database or backend file storage after validation. Google and infrastructure providers may retain inputs, outputs, and related safety or technical records under their applicable terms and Pestr's service configuration.

Automated results can be wrong. Do not use Photo or QR mode for identity verification, access control, legal compliance, safety decisions, or proof on which another person must rely. Do not submit sensitive, confidential, unlawful, infringing, or third-party personal content. Use tap or QR mode if you do not want to send a photo to a cloud service.

8. Timelapses and Imported Media

Timelapses remain local unless you choose to share them. Limited timelapse metadata may be included in the productivity-summary sync described in Section 5, but titles, descriptions, and video files are not uploaded for that feature. Imported audio may be copied or converted on the iPhone and transferred to a paired Pestr Alarm.

You keep ownership of your original content and grant Pestr and its service providers only the limited rights needed to host, transmit, process, display, and protect content or metadata you submit through the Services.

Deleting an original file or the app may not delete media already stored on the physical alarm. Remove it separately or reset the alarm.

9. Pestr Alarm, Wi-Fi, and Firmware

Use only supported devices, firmware, accessories, power sources, and update methods. Do not interrupt an update, install untrusted firmware, expose an owner or device secret, or attempt to defeat pairing, device-benefit verification, gift limits, or firmware integrity controls.

During a temporary setup window, the alarm creates a Wi-Fi network that the iPhone can join. If you pair while using a completed Profile, the app may use part of your username in the alarm's display name and setup-network name, which can be visible to nearby devices while the setup network is active. Do not choose a username you would not want used in that temporary network name.

If you provide home Wi-Fi credentials, you direct the app to transmit them to the paired alarm and the alarm to encrypt and store them locally. Configure only networks you are authorized to use. Unpair or reset the alarm before selling, giving away, returning, or disposing of it, and remove custom audio, network credentials, and device names separately when needed.

The alarm is not a backup for full task content. Unpairing, resetting, storage failure, or certain repair operations can erase schedules, settings, credentials, or media. Normal supported firmware updates are designed to preserve them, but you should not rely on the alarm as the only copy of important information.

10. Purchases, Subscriptions, and the Included Device Year

The app is free. Pestr Photo is offered as monthly and yearly auto-renewing subscriptions through Apple's App Store. Apple displays and processes the price, renewal period, taxes, cancellation, refund, and billing terms. Manage or cancel a subscription through your Apple account settings; deleting the app or your Pestr account does not cancel it.

An eligible Pestr Alarm may include one complimentary year of Pestr Photo. Activation requires a paired eligible alarm, network access, a completed signed-in Pestr Profile, and successful cryptographic verification. The one-year period begins with the first successful activation, has no cash value, is tied to the eligible physical alarm, cannot be resold, and does not restart or extend when the alarm is re-verified. If the alarm is transferred and successfully claimed by a different eligible Profile, the remaining fixed device benefit may move with it; the previous owner's device-based access then ends unless that person has another valid entitlement. The included year itself cannot be divided or gifted. The separate three-recipient promotional gift described in Section 5 becomes available only when Pestr can verify the alarm and current owner are eligible.

App Store subscriptions, the included year, and promotional months may be subject to separate platform or offer rules. If more than one entitlement is present, the app determines access from the valid entitlements it can verify. An included year or promotional month does not automatically change Apple's billing schedule.

11. Third-Party Services

The Services depend on Supabase, Google (including Google Sign-In and Gemini), Apple (including Sign in with Apple, the App Store, and iOS services), Cloudflare, Resend, internet access, and device or operating-system features. Their terms and privacy policies apply to their services. Pestr is not responsible for a third party's independent service, outage, billing decision, policy, or processing, to the extent permitted by law.

12. Suspension, Termination, and Deletion

You may sign out, delete your Pestr account, reset signed-out service data, stop using the Services, delete the app, remove Friend connections, unpair or reset the alarm, unsubscribe from product updates, and cancel App Store subscriptions through Apple. These are separate actions. Deleting a Pestr account does not cancel an App Store subscription, unsubscribe an email address from product updates, or automatically erase local or on-alarm data. A device-bound gift ledger may remain after account deletion to preserve the physical alarm's permanent gift limit and previously granted benefits, as explained in the Privacy Policy.

We may suspend or delete accounts or Profiles, restrict social, backend, or device-benefit access, invalidate sessions or tokens, reject claims or gifts, or remove prohibited content if necessary to address fraud, abuse, security, legal, payment, or operational risk. Local features that do not require the backend may continue, but compatibility is not guaranteed.

13. Disclaimers

To the fullest extent permitted by law, the Services are provided "as is" and "as available." Pestr disclaims warranties of merchantability, fitness for a particular purpose, title, non-infringement, accuracy, uninterrupted operation, and error-free operation. Some jurisdictions do not allow certain disclaimers, so some may not apply to you.

14. Limitation of Liability

To the fullest extent permitted by law, Pestr and its suppliers will not be liable for indirect, incidental, special, consequential, exemplary, or punitive damages, or for lost profits, data, opportunities, goodwill, or business interruption arising from the Services.

Where liability cannot be excluded, Pestr's total liability for claims relating to the Services will not exceed the greater of the amount you paid to Pestr for the Services during the 12 months before the event giving rise to the claim or US $50. These limits do not apply where prohibited by law or to liability that cannot lawfully be limited.

15. Indemnity

To the extent permitted by law, you agree to defend, indemnify, and hold harmless Pestr and its personnel from third-party claims arising from your unlawful misuse of the Services, violation of these Terms, or infringement of another person's rights. This does not apply to the extent a claim results from Pestr's own unlawful conduct.

16. Governing Law and Disputes

These Terms are governed by the laws of the State of California, without regard to conflict-of-law principles, except where your local consumer law requires otherwise. Courts located in California will have jurisdiction unless applicable law gives you the right to bring a claim elsewhere.

Before filing a formal claim, contact app.pestr@gmail.com and describe the issue so we can try to resolve it informally. Nothing in these Terms prevents either party from seeking urgent injunctive relief or using an available small-claims process.

17. Changes

We may update these Terms as the Services or law changes. We will revise the date above and provide additional notice when required. Continuing to use the Services after updated Terms take effect means you accept them, except where law requires another form of consent.

18. Contact

Email: app.pestr@gmail.com

Pestr Privacy Policy

Effective date: July 2, 2026
Last updated: August 31, 2026

Pestr ("Pestr," "we," "us," or "our") provides the Pestr website, iPhone app, Pestr Alarm device and firmware, backend services, mailing list, and support (together, the "Services"). This Privacy Policy explains what information is processed when you use the Services.

1. Scope

This Policy applies to the Pestr website, iPhone app, Pestr Alarm device and firmware, Pestr-operated backend services, mailing list, and communications with us. It does not govern third-party websites, app stores, APIs, or services that we do not control.

The iPhone app lets you sign in with email and password, Google, or Apple. Signing in can enable a Profile, Friends, limited Friend productivity sharing, eligible promotional gifting, and device-benefit activation, but it does not upload full task records or timelapse videos. Before sign-in, a protected online feature may use an internal anonymous service session as described below; this is not a separate user-facing account mode. The website provides product information, an App Store link, and an optional mailing list, but no checkout or user login. Website mailing-list signup is separate from app account creation. During initial Profile setup, you may separately and optionally request the same category of Pestr product updates.

2. Information Processed by the Services

A. Account sign-in and anonymous service sessions

You may sign in with email and password, Google, or Apple.

• Email and password. The app sends your email address and password over an encrypted connection to Supabase Auth. Supabase stores and verifies the account credentials; Pestr does not intentionally store or have access to your plaintext password. New accounts must enter a six-digit code sent to the account email address. If you request a password reset, Supabase and Pestr's transactional email provider process the email address, reset request, code, and related delivery and security records.
• Google or Apple. Google or Apple and Supabase process the sign-in. Pestr and Supabase may receive and store an email address, which may be an Apple private-relay address, a provider-specific identifier, and basic identity details such as a name or profile image if the provider supplies them. Pestr does not receive your Google or Apple password.
• Authentication records. Pestr and Supabase process account-creation, email-confirmation, password-recovery, last-sign-in, provider, authentication, session, and security metadata. The app stores session credentials in the iPhone Keychain.
• Signed-out service sessions. If you use a protected online feature such as Photo validation before signing in, Supabase may automatically assign a random anonymous service identifier and authentication tokens without requiring a name, email address, or password. This internal session supports limited service requests, is not presented as a Profile or guest account, and cannot activate the included device year or send gifts.

B. Profiles, Friends, gifting, and productivity summaries

If you create a Profile, Pestr and Supabase process your unique username, selected profile icon, Friend-sharing settings, Profile creation and update timestamps, and account identifier. Your username and profile icon are not public on the open web, but another signed-in Profile that knows your exact username can use it to send you a Friend request. People involved in a Friend request can see the other person's username and profile icon. Accepted Friends can also see when the friendship began.

Pestr processes incoming and outgoing Friend requests, accepted Friend connections, request and acceptance timestamps, cancellations, removals, and related anti-abuse records. Pestr does not verify that a username represents a person's real-world identity.

If a completed Profile owns this installation's local history, the app syncs a limited productivity summary to Supabase: current and highest streak values and, for each timelapse, a random identifier, start time, and duration. It does not upload task titles, task descriptions, schedules, completion records, QR references, timelapse titles or descriptions, or timelapse video files for this feature. If your Share streak setting is on, accepted Friends can see your current and highest streak. If Share total hours is on, accepted Friends can see daily, weekly, monthly, and all-time timelapse durations and related rankings. Turning a sharing control off hides that category from Friends but does not stop or delete the underlying limited summary sync.

For eligible Pestr Alarm gifting, Pestr and Supabase process the physical alarm identifier, current owner account, giver and recipient account identifiers, recipient username, gift timestamp, benefit expirations, number of gifts used or remaining, and whether that alarm has already gifted a particular recipient. Each successful gift is reflected in the recipient's and giver's Pestr Photo entitlement records. The alarm identifier and gift ledger are used to enforce the physical alarm's lifetime gift limit even if the alarm changes owners or an account is deleted.

C. Information stored locally on your iPhone

Most task information stays on your iPhone, including:

• task titles, descriptions, schedules, reminder methods, completion state, and dismissal history;
• templates, favorites, local streak history, onboarding state, theme choices, alarm settings, entitlement flags, and preferences;
• QR-code or barcode reference payloads and descriptions;
• Photo-mode task descriptions;
• Apple-provided Screen Time application, category, or web-domain tokens and blocking durations;
• timelapse settings, videos, titles, descriptions, timestamps, source-task links, and storage totals;
• imported alarm audio and related local metadata;
• installation and Total Disarm identifiers or counters, some stored in the iPhone Keychain so the safety limit survives an ordinary reinstall;
• the account identifier assigned as the owner of this installation's local productivity history; and
• paired-alarm identifiers, owner secrets, custom-alarm metadata, device schedules, pending stop requests, firmware version, local-network details, and device preferences or status.

This information is stored in the app's private container, UserDefaults, the iPhone Keychain, or the shared app group used by Pestr's Screen Time extensions. Except for the limited productivity summary described above, signing in does not upload or synchronize this local information. Apple and iOS may process local information for backups, notifications, alarms, Screen Time, local networking, Keychain, file and media pickers, and other platform features according to your settings and Apple's terms.

D. Camera, QR, Photo, media, and timelapse features

• QR mode. The app uses a live camera feed to detect a QR code or barcode and compare it with the reference stored on your iPhone. Pestr does not intentionally record or upload that live feed.
• Photo mode. The app resizes and compresses a photo, combines it with the task description you entered, and sends both over an encrypted connection to a Pestr endpoint hosted on Supabase using your current Pestr service session. The endpoint uses Google's Gemini API to return an automated match or no-match result. The request and related technical records may be associated with your Pestr account or anonymous service identifier while the request is processed. Pestr does not intentionally save the image to the photo library, its application database, or persistent backend file storage after validation.
• Google Gemini processing. Google may process and retain the image, description, response, safety signals, and technical information under the Gemini API terms, abuse-monitoring rules, and Pestr's API plan and configuration. Authorized review may occur where permitted by those rules. Pestr does not use Photo-mode content to train its own model. Do not include sensitive, confidential, or third-party personal information in a Photo-mode image.
• Timelapse capture. Timelapse files remain on your iPhone until you delete them or delete the app. They are not automatically uploaded to Pestr. The iOS share sheet sends a file only to the person or service you select.
• Imported media. Selected audio or a video's audio track is processed on your iPhone. The app may retain a local copy or transfer converted audio over an authenticated local connection to your paired Pestr Alarm.

Photo mode is not facial recognition and is not intended to identify a person. Photo mode is intended only for users who are at least 18 years old.

E. Pestr Alarm, local Wi-Fi, and firmware

The iPhone app and Pestr Alarm may exchange pairing identifiers and owner secrets, alarm schedules and identifiers, settings, custom audio, device status, diagnostics, battery information, firmware information, and dismissal events over authenticated local Wi-Fi connections.

During a temporary setup window, the alarm creates a setup Wi-Fi network that the iPhone can join. If you pair while signed in to a completed Profile, the app may use part of your Profile username in the alarm's display name and setup-network name, such as "username's Pestr Alarm." A setup-network name can be visible to nearby devices while that network is active. Signing out can cause the app to restore the generic alarm name when it next has an authenticated connection to the alarm.

Nearby Wi-Fi scanning is performed by the alarm. The alarm sends network names, signal strength, and security type to the paired iPhone for display. When you choose a network, the app sends its name and password to the alarm over its authenticated setup connection. The app clears the password after sending it and does not intentionally save it. The alarm encrypts and stores the credentials locally for reconnection. Pestr does not intentionally upload your Wi-Fi password to its backend.

A firmware check sends the alarm's device identifier, hardware model, and installed firmware version and build to a Pestr endpoint hosted on Supabase. The service also receives standard connection information such as IP address and may create a short-lived download token and limited anti-abuse records.

If a device-benefit activation succeeds or encounters certain errors, the app may send attempt and challenge identifiers, the alarm identifier, activation phase and result, app and firmware versions and builds, network frame or message byte counts, response type, and identifier-match results to Pestr. These activation diagnostics are associated with the current account and alarm but are designed to exclude authentication tokens, Wi-Fi credentials, cryptographic nonces and proofs, and raw command or response bodies.

F. Purchases, support, mailing list, and technical information

• App Store purchases. Apple processes monthly or yearly Pestr Photo payments. The app reads product and entitlement status through StoreKit but does not receive full payment-card details or upload App Store purchase history to Pestr's backend.
• Support. If you contact us, we receive your address and the information and attachments you provide. Diagnostic reports remain on your device unless you copy and send one.
• Transactional account email. Supabase and Resend process the account email address, confirmation or recovery message, delivery status, and related security and operational records to deliver account confirmation and password-reset codes. These messages are not marketing consent.
• Mailing list. If you request product updates on the website or through the optional Profile-setup checkbox, Pestr and Supabase process your email address, subscription status, consent source, source-specific opt-in timestamps, and limited anti-abuse records. Both choices subscribe you to the same Pestr product-updates list. Website subscribers complete a separate confirmation step, and Cloudflare Turnstile processes browser, network, and security-check information to help prevent automated signups. App subscribers have already verified the account email and are added only after affirmatively enabling the optional checkbox. Resend processes subscriber email addresses, subscription preferences, and delivery and engagement information so Pestr can send the updates requested.
• Service-use and technical records. Hosting, Supabase, Google, Apple, Cloudflare, Resend, and other infrastructure providers may process IP address or a one-way representation of it, account or anonymous service-session identifier, authentication provider and related metadata, alarm identifier, app or browser type, device and operating-system information, firmware information, requested feature or endpoint, timestamps, response status, latency, safety signals, and security, performance, or diagnostic logs.
• Anti-abuse records. Pestr and its providers process request counts, account or anonymous service-session identifiers, alarm and network identifiers where needed, failed-verification records, and timestamps to enforce limits, prevent fraud, control AI usage, protect account and social features, and secure firmware delivery.

The current app does not include a general advertising or analytics SDK. Pestr does not sell personal information, share it with data brokers, combine app data with third-party data for advertising, or use it to track you across other companies' apps or websites.

G. Permissions and Apple services

Depending on the features you choose, the app may request camera, notification, alarm, Screen Time / Family Controls, local-network, and setup Wi-Fi access. System file and media pickers let you choose specific files. You can change permissions in iOS Settings; disabling a permission may disable the related feature.

3. How We Use Information

We use information to:

• create, confirm, authenticate, recover, and secure accounts and internal anonymous service sessions;
• create Profiles and operate Friend requests and connections;
• sync limited productivity summaries and show the metrics you choose to accepted Friends;
• validate Photo-mode tasks and enforce usage limits;
• verify eligible devices, provide or transfer the included Pestr Photo year, and administer device-bound gifts and promotional access;
• operate reminders, alarms, QR checks, timelapses, Screen Time shielding, templates, favorites, and Total Disarm;
• pair, configure, diagnose, and update Pestr Alarm devices;
• process and restore App Store entitlements;
• remember preferences and preserve local task history;
• deliver transactional account email and requested mailing-list messages;
• answer support requests, prevent fraud or abuse, troubleshoot, and secure the Services; and
• comply with law and enforce our Terms.

4. How We Disclose Information

We disclose information only as needed to operate the Services, at your direction, for legal or safety reasons, or as part of a business transfer subject to appropriate protections.

Supabase provides account authentication, anonymous service sessions, database, Edge Function, firmware-storage, and mailing-list record services. Google provides Google Sign-In, Gemini image validation, and website fonts. Apple provides Sign in with Apple, app distribution, purchases, operating-system services, notifications, alarms, Screen Time, local networking and setup Wi-Fi configuration, Keychain, and media pickers. Cloudflare provides the Turnstile anti-abuse check. Resend provides transactional account email, mailing-list confirmation, contact management, delivery, and broadcasts.

We require providers processing information for Pestr to use it only for permitted purposes and to protect it consistently with this Policy, subject to their applicable terms and our agreements. We do not sell personal information, share it for cross-context behavioral advertising, or knowingly disclose it to data brokers.

5. Retention and Deletion

• Local iPhone data remains until you delete an item, use an available reset control, or delete the app. Some Keychain items may survive an ordinary reinstall unless removed through device or system controls.
• Account and anonymous-session records remain while the account or service session is active and as needed to provide protected features, enforce limits, and secure the Services. After deletion, limited records may remain in backups or as reasonably needed for security, fraud prevention, disputes, or legal obligations.
• Profile, Friend, and productivity records generally remain until you remove a request or connection, delete the account, or the records are no longer needed to provide and secure the feature. Turning off a sharing control hides that metric from Friends but does not delete the underlying productivity summary.
• Device-benefit and gift records may be kept for the life of the benefit or physical alarm and afterward as needed to prevent duplicate activation, transfer the remaining fixed device benefit, honor promotional time, resolve disputes, or prevent fraud. To preserve an alarm's permanent three-gift limit, a gift ledger may remain after account deletion and retain the alarm identifier, recipient username, gift time, and benefit expirations even when giver or recipient account identifiers are removed.
• Photo-mode images and descriptions are not intentionally persisted in Pestr's application database or backend file storage after validation. Google and infrastructure providers may retain inputs, outputs, or related safety and technical records under their terms and Pestr's service configuration.
• Operational logs, activation diagnostics, and anti-abuse records remain for the periods selected or provided by Pestr's infrastructure providers and as reasonably needed for security, troubleshooting, fraud prevention, and legal obligations.
• Device records remain on the alarm until replaced, removed, unpaired where applicable, or reset. Custom audio, Wi-Fi credentials, device names, and schedules must be removed from the alarm separately when applicable.
• Support and mailing-list records remain as needed to answer the request or until you unsubscribe, subject to legal, security, suppression-list, and backup needs. Deleting a Pestr account does not by itself unsubscribe an email address from product updates.
• App Store records are retained by Apple under its policies. Deleting the app or your Pestr account does not cancel a subscription.

Use the in-app Delete account control to initiate deletion of your signed-in Pestr account. While signed out, use Reset signed-out service data to delete the current internal anonymous service identifier and its associated server data; Pestr creates a new identifier if a protected signed-out feature is used later. You may also email app.pestr@gmail.com for another privacy request.

Deleting a Pestr account does not delete local tasks or media, cancel an App Store subscription, unsubscribe from product updates, delete data stored on a Pestr Alarm, or delete your Google or Apple account; those actions must be handled separately. We may need information sufficient to locate and verify a requested record. Because an anonymous service session contains no contact information, some records may not be identifiable as yours without the relevant alarm or session details.

6. Your Choices and Privacy Rights

You can choose email-and-password, Google, or Apple sign-in; use core local features without signing in; sign out; delete your Pestr account; reset signed-out service data; manage provider permissions through Google or Apple; manage iOS permissions; control which productivity metrics accepted Friends can see; cancel or remove Friend connections and requests; delete local tasks and media using available controls; reset or unpair a Pestr Alarm; cancel App Store subscriptions through Apple; leave the optional mailing-list checkbox off; unsubscribe from any mailing-list email; and contact us about privacy requests.

Depending on where you live, you may have rights to request access to, correction of, deletion of, or a copy of personal information, or to object to or restrict certain processing. We may need to verify your request, and exceptions may apply. Pestr will not discriminate against you for exercising an applicable privacy right. Because Pestr does not sell personal information or share it for cross-context behavioral advertising, it does not offer a sale or sharing opt-out.

7. Security

We use measures designed to protect information, including encrypted network transport, backend access controls, Keychain storage for session tokens and device owner secrets, authenticated local pairing sessions, encrypted local Wi-Fi credential storage on supported firmware, cryptographic device verification, firmware integrity controls, and rate limits. No method is completely secure.

8. Children

The Services are not directed to children under 13, and we do not knowingly collect personal information from a child under 13. Photo mode is intended only for users who are at least 18 years old. If you believe a child has provided personal information, contact us so we can review and delete it where appropriate.

9. International Processing

Providers may process information in the United States and other countries where privacy laws differ. Where required, we use legally recognized safeguards for transfers.

10. Changes

We may update this Policy as the Services or law changes. We will revise the date above and provide additional notice when required.

11. Contact

Email: app.pestr@gmail.com