Your privacy
What stays on your phone.
And the little that leaves it.
Last updated 8 October 2026.
The short version
Counting your exercise and blocking your apps happen entirely on your phone. Camera frames never leave it. There is no account, no advertising, and no analytics or crash reporting of our own. Your exercise history, minutes, blocked apps, steps and setup answers stay on the phone.
Two things go over the internet: subscription status, through RevenueCat and Google Play, so Premium can be bought and restored; and usage statistics that Google's pose-detection library may send about itself, which never include images. Both are described below. We do not sell data and do not share it for advertising.
The camera
During an exercise session the front camera supplies frames to pose detection that runs on the phone. The app reads body positions from each frame to count repetitions and timed holds. Frames are processed in memory only: they are not written to disk, not saved as video and not uploaded. The body positions the app derives are used for the count and then discarded. The camera is off outside a session, and the tutorial videos are bundled with the app rather than streamed.
What is stored on your phone
Everything below lives in the app's private storage on your phone. Uninstalling the app, or clearing its storage in Android settings, deletes all of it.
- Exercise sessions: the exercise, reps and half reps or seconds held, a form score, and when.
- Your minutes: every credit and debit, and the balance.
- The apps you chose to block, and each unlock: which app, when it started, for how long, and how it ended.
- Your setup answers: your goals, your age range, and the daily phone time you reported and are aiming for.
- Your settings: goals, Hard Mode choices, reminders, sounds, exercise rewards, and the plan you set up, including the equipment you have.
- Daily goals, streaks, badges and custom workouts.
- Daily step totals, only if you connect Health Connect.
- Whether Premium is active and until when, copied from the subscription service so the app works offline.
- Your settings passcode, stored encrypted with a key that never leaves the phone. It is excluded from backups and cannot be recovered.
- Exercise calibration: the range of movement the camera has seen from you, so counting adapts to you.
- A random identifier for this installation, created on the phone. It is not sent anywhere today.
If Android backup is on for your Google account, Android may copy this data to that account as it does for any app, except the passcode. That copy is governed by Google's privacy policy, not by ours.
What the app reads on your phone
- The list of installed apps, so you can choose which ones to block.
- Which app is in front, through Android's accessibility service. The service is configured so that it cannot read screen content: it receives the app's package name and the name of the screen, never what is on the screen, what you type, or your passwords.
- How long you have used each app, only if you grant usage access. This is shown in the app picker and used for the plan's screen-time goal. It is held in memory while a screen shows it and is not stored.
- Your daily step count from Health Connect, read-only, only if you connect it.
Health Connect
If you connect Health Connect, Outscroll reads your step count and nothing else. Steps are used only to credit minutes and to show your step goals and badges. They are stored on your phone, never sent anywhere, never shared, and never used for advertising. You can disconnect at any time in Health Connect's own settings.
What leaves your phone: subscriptions
Premium is sold through Google Play and managed for us by RevenueCat, Inc., a subscription service. When the app opens, and when you view plans, buy or restore, it contacts RevenueCat to learn whether Premium is active. RevenueCat receives:
- A random identifier that RevenueCat creates for this installation. It is not your name, your email address or your Google account.
- Your purchases: which plan, when it started, renewals, trials, cancellations and refunds.
- The technical details any connection carries: your IP address, phone model, Android version, app version, language and store country.
The app does not give RevenueCat your advertising ID or any other device identifier, and sends it nothing about your exercise, minutes, blocked apps or steps. RevenueCat's privacy policy applies to what it holds.
Google Play takes the payment, under your Google account and Google's privacy policy. We never see your card or payment details. We can see the purchase records RevenueCat and Google Play keep, which we use to provide Premium, answer support requests, handle refunds and meet tax and accounting duties.
A build without the store connected says “Premium coming soon” and does not contact RevenueCat.
What leaves your phone: pose-detection statistics
Exercise counting uses MediaPipe, a pose-detection library from Google. It includes a component that may send Google statistics about the detector itself: which detector ran, how long it took and whether it failed, together with the app's name and version and your phone's model and Android version. These statistics never include camera frames, images or body positions. We do not receive them; Google's privacy policy applies.
Nothing else leaves your phone. There is no other server, and the app includes no other third-party library that reports home.
Permissions, and what each one is for
- Camera: counting exercise on the phone, as above.
- Accessibility service: seeing which app is in front so a blocked app can be locked, and drawing the lock screen over it.
- Usage access (optional): app usage figures in the picker and the plan's screen-time goal.
- Notifications: the unlock countdown and its one-minute warning, and the workout reminders you can turn off in Settings.
- Battery optimisation exemption: so Android does not stop the blocker in the background.
- Run after restart: to restore an unlock countdown that was running when the phone rebooted.
- Health Connect steps (optional): your daily step total, read only.
- Internet and Google Play billing: subscriptions, as above.
Your choices and rights
- Everything on the phone: uninstall the app or clear its storage, and it is gone. We hold no copy of it.
- Your subscription: cancel it in Google Play at any time. Uninstalling does not cancel it.
- Purchase records: write to us with your Google Play order number (it starts with GPA.) and we will tell you what is held for it, or ask RevenueCat to delete it, except what tax and accounting law requires us to keep.
Depending on where you live, data protection law, such as the GDPR in Europe, gives you the right to access, correct, delete or object to the processing of personal data about you, and to complain to your data protection authority. We use purchase data to provide the subscription you bought and to meet our legal duties. Write to us to use any of these rights.
Children
Outscroll is not directed at children under 13. Setup asks for an age range so the app can adapt what it shows; nothing about age is sent anywhere.
This website: email signup
Email signup is currently disabled. The form does not send or store an email address. When signup opens, the form will name the provider receiving your address.
This website: browsing
Our site code adds no analytics, tracking pixels, third-party scripts or cookies. Fonts, illustrations and the official store badge images are served with the site. The hosting provider receives the network information needed to serve a page, including your IP address; its logs and retention are its own.
Apple and the Apple logo are trademarks of Apple Inc., registered in the U.S. and other countries. App Store is a service mark of Apple Inc. Google Play and the Google Play logo are trademarks of Google LLC.
Changes
If what the app does with data changes, this page changes first and the date at the top moves. A change that sends anything new off the phone would be announced in the app before it ships.