Your data, explained.

What Toggle collects, why, who processes it and your rights.

Last updated September 21, 2026

Operator and scope

This policy covers the Toggle website, account interface, desktop setup app, and iOS and device-management services. Toggle is operated by Forfeit, Inc., a Delaware C Corporation, 2261 Market St #5010, San Francisco, CA 94114, United States, which also bills paid plans. Its affiliate Bush St, Inc. holds the Apple developer account that distributes the Toggle apps and the Apple device-management certificate used to deliver the service; device-management records are handled only to provide Toggle. Privacy contact: support@toggleblocker.com.

Account and support information

We process the account email, display name, authentication-provider identifiers, login/session records, and information voluntarily supplied to support. Security logs may include IP addresses, request times and error details. Passwords and private controller keys must not be included in support messages.

Device management and app inventory

Device setup uses identifiers, device name/model, OS version, supervision/enrollment state, management certificates or tokens, public controller identity and command acknowledgements. Wireless app inventory is limited to bundle identifier, reported name and version, classification/catalog version, observation times and removal status. These records can reveal interests and must be treated as personal information.

Focus and filtering

We store selected app groups, personal blocks, schedules/time zones, commitments, policy revisions and delivery status to enforce requested restrictions.

Purpose and legal basis

Core account, device and policy processing serves the requested service. Where applicable, contract necessity supports that processing, legitimate interests support proportionate security and abuse prevention, and legal obligations support required records. Optional storage or marketing requires any legally necessary consent. Withholding necessary information may prevent enrollment; withdrawing optional consent must not prevent core service use.

Providers and data-use restrictions

Our infrastructure includes Railway hosting and MDM services, Cloudflare D1 and network services, Apple device-management infrastructure and configured Apple/Google authentication. Payments are processed by Stripe for Forfeit, Inc.; Stripe collects card details directly, and Forfeit, Inc. receives your Stripe customer ID, plan, subscription status, billing email and payment or refund records, not full card numbers. No sale, advertising use or unrelated third-party use of device-management data is permitted under this policy. Provider access is not a claim of end-to-end encryption.

International processing

Service infrastructure may process information outside your country. This policy does not assert that contracts or certifications have already been completed.

Retention

Account and focus records are needed while providing the service; inventory tracks present and removed applications for management. Security, support and legal records may require different limited periods. We do not promise a fixed deletion schedule.

Your rights

Depending on applicable law, you may request access, correction, deletion, portability, restriction or objection, withdraw consent, appeal a decision and complain to a regulator. Contact support@toggleblocker.com. Identity checks are proportionate. Account deletion and device unenrollment are explained separately on the deletion page.

Children and eligibility

Toggle is for adults managing their own devices. Do not enroll a child’s device.

Storage and updates

Essential authentication and security storage may be necessary for the site to function. See the cookie notice. Toggle does not use optional analytics or advertising. Material privacy changes should be communicated before a new use begins when required by law.