Privacy Policy

Last Updated: October 22, 2026

This Privacy Policy explains how Loreon LLC ("we," "us," or "our") handles information when you use the Hermit mobile app ("Hermit" or the "App") and the hermitapp.top website. Hermit has no accounts and no sign-in, and it keeps your focus data on your device.

By using Hermit, you acknowledge the practices described in this policy. If you do not agree with them, please stop using the App.

1. The Short Version

• Your focus history, app choices, settings and onboarding answers stay on your device.
• Hermit has no accounts, shows no ads and does not track you across other companies' apps or websites.
• We do not sell your personal information.
• We use a small number of service providers for purchases, analytics and crash reports, app updates, and support messages you choose to send.

2. Information That Stays on Your Device

Hermit stores the following only on your device:

• Your focus sessions, including when they started and ended and how long they lasted.
• The apps you choose to keep available during a session.
• Your settings, your onboarding answers and the personal plan built from them.
• On Android, how many times you opened each blocked app during a Block Apps session, saved with that session for your Stats.
• On Android, if you allow Usage Access, how long you used each app on each day, saved so your Stats can show past weeks.

This information is not sent to us or to our service providers, and we cannot access it. It is normally deleted when you uninstall Hermit or clear its data. Restoring a purchase on another device restores Premium, not your history.

3. Information Processed by Us and Our Service Providers

Some information leaves your device so Hermit can work, be paid for and be improved.

• Purchases. When you buy or restore Premium, Apple or Google processes the payment. Our subscription management provider receives purchase and transaction records, a pseudonymous app user ID and our analytics ID, and basic device and app information, such as device identifiers, device type, system and app versions, language and store country. We use this to confirm, restore and support your access. We never receive your card or bank details.
• Analytics and crash reports. Our analytics provider receives app activity events (such as opening the app), error and crash reports, a pseudonymous installation ID, device and app information (such as device model, system and app versions, language and time zone), and your IP address, which is used to estimate your approximate location (such as country or city). We use this to understand how Hermit is used, measure subscriptions and fix problems. We do not attach your name or email address to analytics.
• App updates. Hermit checks our update provider for app updates. These requests include technical identifiers, app and system version information and your IP address.
• Support messages. If you send a report or feedback from the App, we receive your message, the email address if you choose to add one, a support ID, the app version and your device model and system version. Our hosting and email delivery providers process the message to deliver it to us. Your IP address is used to protect the form from abuse and is not included in the message we receive. If you email us directly, we receive your email address and anything you include.
• Website. The hermitapp.top website does not use cookies or analytics. Our hosting provider may keep standard server logs, such as IP addresses and pages requested, for security and operation.

Analytics, crash reports and support messages never include your focus history, the apps you choose or open, or your onboarding answers.

Our service providers process this information to provide their services to us, under terms that require them to protect it with safeguards at least equal to those described in this policy. Apple and Google also handle purchases under their own privacy policies. We do not sell personal information, share it for cross-context behavioral advertising, or use third-party advertising or cross-app tracking.

4. Permissions

Hermit asks for device permissions only for the features that need them. You can change them at any time in your device settings.

• Android Accessibility (Block Apps only). During a Block Apps session that you start, Hermit uses app identifiers and window identity, type, position, size and focus from Accessibility to distinguish opened apps from floating controls and return you Home when an app is blocked. Android requires the window-content capability for this window information. When an app on screen has not identified itself yet, for example right after Hermit restarts, Hermit reads only that window's app identifier. If a blocked app is open in a picture-in-picture window, Hermit closes it with Android's own close action. Hermit reads nothing else from any window. It also counts how many times you opened each blocked app during the session for your Stats. Hermit does not read screen content, text, passwords, messages or notifications, and it does not act inside other apps. The apps you open and these counts stay on your device. Accessibility is not used in Lockdown Mode.
• Android Display over other apps. Used to show the block screen and the Lockdown Mode timer.
• Android Do Not Disturb access. Used to silence interruptions during Lockdown Mode with Hermit's own rule, without changing your other rules.
• Android Usage Access (optional). Used to show which apps take your time in Stats. This is calculated and saved on your device.
• Android Autostart (Xiaomi, Redmi and POCO phones, Block Apps only). Lets your phone restart Hermit if it gets closed, so a Block Apps session keeps blocking. Hermit checks only whether this setting is on, and only on your device.
• Android Unrestricted Battery Use (optional). Lets Hermit run in the background without your phone's battery restrictions, so blocks appear on time.
• iPhone Screen Time. Used to let you choose apps and block them during a session. Apple keeps the apps you choose and your app usage inside its protected system, out of Hermit's reach.
• iPhone Live Activities (optional). Used to show your session countdown on the Lock Screen.

5. How Long We Keep Information

Information on your device stays until you delete it by uninstalling Hermit or clearing its data. Uninstalling does not delete information already held by our service providers, Apple or Google.

We and our providers keep information only as long as needed for the purposes in this policy: purchase records while needed to provide and restore Premium and to meet accounting, tax and other legal obligations; analytics and crash reports for a limited period under our provider settings; and support messages while needed to respond and resolve issues. Providers may keep limited records longer where the law requires it.

To ask about, or request deletion of, information held about you, contact us at support@loreon.tech. Because Hermit has no accounts, include the Support ID shown on Hermit's Account screen to help us find purchase records. Deleting records does not cancel a subscription; manage subscriptions through Apple or Google.

6. Legal Bases and International Transfers

If you are in the European Economic Area, the United Kingdom or Switzerland, we process information on these legal bases:

• Contract: to provide Hermit and the Premium access you purchase, and to restore your purchases.
• Legitimate interests: to understand how Hermit is used, fix errors, deliver updates, prevent abuse, respond to your messages and improve the App. You can object to this processing at any time by contacting us.
• Legal obligation: to keep records required by law, such as for tax and accounting.
• Consent: where we ask for it. You can withdraw your consent at any time without affecting earlier processing.

Our service providers may process information in the United States and other countries. Where the law requires it, these transfers rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses.

7. Your Rights

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to restrict or object to its processing, and to withdraw consent. If you are in the European Economic Area, the United Kingdom or Switzerland, you may also complain to your local data protection authority.

If you live in California or another US state with a privacy law, you may have the right to know what personal information we collect and to request its correction or deletion, without discrimination for using these rights. The categories we collect are identifiers (pseudonymous IDs and IP address), commercial information (purchase records), internet or other electronic network activity (app activity events and crash reports), approximate location, and information you send us (support messages). We do not sell or share personal information for cross-context behavioral advertising.

To use any of these rights, contact us at support@loreon.tech. Because Hermit has no accounts and uses pseudonymous IDs, we may need information from you to find records related to you, and we may be unable to act on records we cannot link to you.

8. Security

We use reasonable measures to protect information, and our providers encrypt data in transit. Information on your device is protected by your device's own security. No method of storage or transmission is completely secure.

9. Children

Hermit is not directed to children under 13, or under the minimum age required in your country. We do not knowingly collect personal information from children. If you believe a child has sent us personal information, contact us and we will delete it where we can.

10. Changes to This Policy

We may update this policy as Hermit or the law changes. We will post the new version on this page and update the date above. If a change materially affects your privacy, we will give additional notice where the law requires it, such as in the App. The updated policy applies from the date shown.

11. Contact

Questions about this policy? Contact Loreon LLC at support@loreon.tech.