TimeBack Privacy Policy
Oct 13, 2026
Last updated: October 13, 2026
We do not want to know who you are. TimeBack is designed to collect as little information as possible: it does not require an account, and your screen-time statistics, the apps you use, the websites you visit, and everything the App sees on your screen stay on your device.
This Privacy Policy explains how Urban Cyber Security Inc. (“Company”, “Urban”, “we”, “us”, or “our”) collects, uses, shares, and protects information in connection with the TimeBack mobile application for Android (the “App”). This Privacy Policy is an integral part of the TimeBack Terms of Service. Terms that are not defined here have the meaning given to them in Urban’s main Privacy Policy at https://www.urban-vpn.com/about-us/privacy/.
PLEASE READ THIS PRIVACY POLICY CAREFULLY. IF YOU DO NOT AGREE WITH IT, PLEASE DO NOT INSTALL OR USE THE APP.
1. Contact Information
The controller of your Personal Data processed through the App is Urban Cyber Security Inc., registered number 10158667, 1007 N Orange St FL 83, Wilmington, DE 19801-1239, United States.
For any question about this Privacy Policy or our privacy practices, or to contact our Data Protection Officer, email privacy [at] urban-vpn [dot] com.
Our privacy representative and your point of contact is Prighter Group. You may also submit requests through its portal at https://prighter.com/q/13252349120.
2. Personal Data Processed, the Purpose and Lawful Bases
“Personal Data” means any information relating to an identified or identifiable natural person. “Non-Personal Data” means information that does not, on its own, identify you. We do not collect Sensitive Data, such as information about your health, religion, political opinions, or sexual orientation.
We process the following Personal Data through the App for the purposes and on the lawful bases set out below:
• Diagnostic and crash data (collected through Firebase Crashlytics): technical details of App crashes (such as stack traces), device model, operating system version, App version, and a randomly generated Crashlytics installation identifier. Purpose: to operate, maintain, and fix the App. Lawful basis: our legitimate interests in providing a functioning and secure App.
• Usage data (collected through Google Analytics for Firebase): events describing how the App itself is used (for example, that the App was opened, that a setup step was completed, that a permission was granted, or that a block or daily goal was created or activated), device type, operating system version, App version, approximate country derived from your IP address, and a randomly generated app-instance identifier. These events never include the names of the apps you use, your screen time, the websites you visit, or anything read by the accessibility service. The App is configured so that Google Analytics for Firebase does not collect your advertising identifier or Android ID. Purpose: to understand how the App is used and to improve it. Lawful basis: our legitimate interests, or your consent where required by applicable law.
• Attribution data (collected through Tenjin): your device’s Google advertising identifier, the app set identifier, the Firebase app-instance identifier, the install referrer provided by Google Play, IP address, device model and manufacturer, operating system version, App version, language, time zone, network connection type, and information about App sessions (such as the time and number of App launches). Purpose: to measure the effectiveness of our advertising campaigns by determining which campaign, if any, led to an installation of the App and to its use. Lawful basis: our legitimate interests, or your consent where required by applicable law.
• Communications: your email address and the content of any message you send us. Purpose: to respond to your request and to keep a record of it. Lawful basis: our legitimate interests and, where applicable, compliance with a legal obligation.
Information processed only on your device. To provide its features, the App processes the following information locally. This information is not transmitted to us or to any third party:
• the apps you used, when and for how long over the last seven days, read through Android’s Usage Access permission, to display your screen time and apply your limits, schedules, and daily goal;
• your App settings, such as your blocks, schedules and limits, the feeds and websites you chose to block, your daily goal and the apps it counts, and your notification preference; and
• a record of the version of the privacy notice you accepted.
Information we do not collect. We do not collect your screen-time statistics, the names of the apps you use or how long you use them, the websites you visit, what is on your screen, your messages, photos, passwords, anything you type, your contacts, or your precise location.
3. How We Collect Personal Data
• Directly from you, when you contact us.
• Automatically, through the software development kits of our service providers (Firebase Crashlytics, Google Analytics for Firebase, and Tenjin) built into the App, when you use the App.
• From third parties: Google Play provides the install referrer, and the advertising networks on which we advertise provide the records against which an installation is attributed.
4. Cookies and Similar Tracking Technologies
The App does not use cookies. The software development kits described in Section 3 use the device identifiers described in Section 2.
5. Device Permissions and Accessibility Service
The App requests the following device permissions. Optional permissions are requested only when you use the related feature, after an explanation, and you may refuse or revoke them at any time in your device settings:
• Internet and network state: to send the data described in Section 2 and to determine whether a connection is available.
• Advertising identifier: to enable install attribution as described in Section 2.
• Usage Access: to read which app is in use and for how long, for the screen-time statistics, limits, and daily goal. This information stays on your device.
• Display over other apps: to display the block screen over an app you chose to block.
• Notifications: to display the persistent notice Android requires while blocking is active, and at most one progress notification per day, which you can turn off in the App.
• Run at start-up: to resume blocking after your device restarts.
• Battery optimization exemption (optional): to keep blocking active on devices that restrict background apps.
• Installed apps (apps with a launcher icon): to let you choose apps to block and to display usage with each app’s name and icon. This list stays on your device.
• Accessibility service (optional): only if you choose to hide a feed, such as Reels or Shorts, inside another social media app, or to block a website in your browser. The service reads the screen layout of the supported social media apps and browsers solely to recognize the feed or website you chose to block and to display a block screen over it. Information read by the accessibility service is not stored, logged, or transmitted to us or to any third party, and is not used for analytics or attribution. You may disable the service at any time in Android Settings > Accessibility.
6. Third-Party Apps and Websites
The apps and websites you use on your device are operated by their respective owners and governed by their own terms and privacy policies. We are not responsible for their privacy practices. The App is not affiliated with, endorsed by, or sponsored by Instagram, Facebook, TikTok, YouTube, X, Snapchat, or any other service whose content it helps you limit.
7. How Is the Data Shared?
We do not sell Personal Data collected through the App, and we do not share it with business intelligence customers. The App is not part of, and does not contribute data to, the Company’s data broker activities described in Urban’s main Privacy Policy. We share Personal Data only with the following recipients:
• Vendors and service providers. Google LLC (Firebase Crashlytics and Google Analytics for Firebase) and Tenjin, Inc. process Personal Data on our behalf to provide the services described in this Privacy Policy, under their respective terms and privacy policies (Google: https://firebase.google.com/support/privacy, Tenjin: https://tenjin.com/privacy/).
• Advertising networks, for attribution only. To attribute an installation to an advertising campaign, Tenjin matches your advertising identifier and install referrer against records of the advertising networks on which we advertise. This information is used for attribution and is not used by us to build a profile of you.
• Business partners in a transaction. In connection with a merger, acquisition, financing, reorganization, or sale of all or part of our business, subject to this Privacy Policy.
• Authorities. Where required by law, regulation, legal process, or an enforceable governmental request, or to protect the rights, property, or safety of Urban, our users, or others.
8. International Transfers
Our service providers may process Personal Data in the United States and other countries whose data protection laws may differ from those of your country. Where Personal Data from the European Economic Area, the United Kingdom, or Switzerland is transferred to a country that has not been found to provide an adequate level of protection, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, adequacy decisions, or the EU-U.S. and Swiss-U.S. Data Privacy Frameworks where the recipient is certified, and we conduct transfer impact assessments where required. You may request a copy of the relevant safeguards by contacting us.
9. Data Retention Policy
• Diagnostic and crash data: up to 90 days.
• Usage data: up to 14 months.
• Attribution data: retained by Tenjin in accordance with its retention practices and our agreement with it.
• Communications: for as long as needed to handle your request, and afterward for any period required by law.
• Information processed only on your device: until you delete it in the App (Settings, Privacy and data, Delete my data), clear the App’s storage, or uninstall the App.
At the end of the applicable period, Personal Data is deleted or anonymized.
10. How Do We Safeguard Your Information?
We use security methods and encryption to protect your information. Information is transmitted over encrypted connections (HTTPS), and the App does not permit unencrypted network traffic. Information stored on your device is kept in the App’s private storage, which other apps cannot access, and is excluded from device backups. However, no method of transmission over the internet or of storage is completely secure, and we cannot guarantee the security of information transmitted through the internet. If we become aware of a security breach affecting your Personal Data, we will make a reasonable effort to notify you and the competent authorities as required by applicable law.
11. Privacy Choices
Depending on where you live, you may have the following rights regarding your Personal Data:
• the right to be informed about, and to know, how your Personal Data is processed;
• the right to access your Personal Data and to receive a copy of it;
• the right to correct inaccurate Personal Data;
• the right to restrict the processing of your Personal Data;
• the right to deletion of your Personal Data (the “right to be forgotten”);
• the right to data portability;
• the right to object to processing based on our legitimate interests;
• the right to withdraw your consent at any time, without affecting the lawfulness of processing before its withdrawal;
• the right to receive a copy of the safeguards used for international transfers;
• the right to appeal our decision on your request and to lodge a complaint with your local data protection authority; and
• the right not to be discriminated against for exercising any of these rights.
You can also, at any time and without contacting us:
• reset or delete your advertising identifier in Android Settings (Google > Ads), which prevents further attribution matching;
• revoke any permission, or disable the accessibility service, in Android Settings;
• turn off progress notifications in the App’s Settings; and
• review, export, or delete all information stored by the App on your device under Settings, Privacy and data, or by uninstalling the App.
12. How to Exercise Your Privacy Rights
To exercise your rights, email privacy [at] urban-vpn [dot] com or use our privacy representative’s portal at https://prighter.com/q/13252349120. Because we do not collect your name or contact details through the App, please include your device’s advertising identifier (found in Android Settings > Google > Ads) so that we can identify the data associated with your installation. We may need to verify your request before acting on it. You may designate an authorized agent to make a request on your behalf; we may ask the agent for proof of authority. We will respond within the time required by applicable law.
13. Minors
The App is not directed to children. Use of the App by anyone under the age of 18 is prohibited. We do not knowingly collect Personal Data from children. If we learn that we have collected Personal Data from a child, we will discard it.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will announce material changes through a notice in the App and by updating the “Last updated” date above, and we will provide prior notice or obtain your consent where required by law. Your continued use of the App after an update constitutes your acknowledgment and acceptance of the updated Privacy Policy. The current version is always available at https://www.urban-vpn.com/about-us/privacy-policy-timeback-android/.
15. Additional Privacy Information for California Residents
This section applies to residents of California under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”).
• Categories of Personal Data collected in the past 12 months: identifiers (advertising identifier, app set identifier, app-instance and installation identifiers, IP address); internet or other electronic network activity information (App usage events); device information (device model, operating system and App version, language, time zone); and approximate geolocation (country derived from IP address). We do not collect sensitive personal information.
• Sources: as described in Section 3.
• Purposes: as described in Section 2.
• Disclosures for a business purpose: to the vendors and service providers described in Section 7.
• Sale and sharing: we do not sell Personal Data. The disclosure of the advertising identifier to advertising networks for attribution described in Section 7 may be considered “sharing” for cross-context behavioral advertising. You may opt out by deleting or resetting your advertising identifier as described in Section 11, or by contacting us. We do not knowingly sell or share the Personal Data of consumers under 18 years of age.
• Your rights: the right to know, the right to delete, the right to correct, the right to opt out of the sale or sharing of Personal Data, the right to limit the use of sensitive personal information (which we do not collect), and the right not to be discriminated against. To exercise them, see Section 12.
16. Additional Privacy Information for Certain United States Residents
If you are a resident of Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, or another U.S. state with a comprehensive privacy law, you may have the right to access, delete, and correct your Personal Data, to obtain a portable copy of it, and to opt out of the sale of Personal Data, targeted advertising, and profiling in furtherance of decisions that produce legal or similarly significant effects. We do not sell Personal Data or engage in such profiling. The disclosure of the advertising identifier for attribution described in Section 7 may be considered targeted advertising under some of these laws; you may opt out as described in Section 11. To exercise your rights, see Section 12. If we decline your request, you may appeal by replying to our decision, and if your appeal is denied, you may contact your state Attorney General.