Your data, explained.

Prepared for legal review. Company details and operational retention commitments must be confirmed before publication.

Last updated September 21, 2026

Private-test documentation · Legal review pending. Email contact details and operational claims must be verified before public release.

Operator and scope

This review draft covers the TMP website, account interface, desktop setup helper, and proposed iOS and MDM services. TMP is operated by Forfeit, Inc., a Delaware C Corporation, 2261 Market St #5010, San Francisco, CA 94114, United States, which also bills paid plans. Its affiliate Bush St, Inc. holds the Apple developer account that distributes the TMP apps and the Apple device-management certificate used to deliver the service; device-management records are handled only to provide TMP. Privacy contact: support@togglemyphone.com.

Account and support information

We process the account email, display name, authentication-provider identifiers, login/session records, and information voluntarily supplied to support. Security logs may include IP addresses, request times and error details. Passwords and private controller keys must not be included in support messages.

Device management and app inventory

Device setup uses identifiers, device name/model, OS version, supervision/enrollment state, management certificates or tokens, public controller identity and command acknowledgements. Wireless app inventory is limited to bundle identifier, reported name and version, classification/catalog version, observation times and removal status. The USB test catalog is fixture data, not a real inventory. These records can reveal interests and must be treated as personal information.

Focus and filtering

We store selected app groups, personal blocks, schedules/time zones, commitments, policy revisions and delivery status to enforce requested restrictions. The current wired app-blocking test does not establish that web filtering works. Before enabling filtering, the notice must explain any domain/URL processing, whether it remains on-device, and its retention.

Purpose and legal basis

Core account, device and policy processing serves the requested service. Where applicable, contract necessity supports that processing, legitimate interests support proportionate security and abuse prevention, and legal obligations support required records. Optional storage or marketing requires any legally necessary consent. Withholding necessary information may prevent enrollment; withdrawing optional consent must not prevent core service use.

Providers and data-use restrictions

The planned infrastructure includes Railway hosting and MDM services, Cloudflare D1 and network services, Apple device-management infrastructure and configured Apple/Google authentication. Payments are processed by Stripe for Forfeit, Inc.; Stripe collects card details directly, and Forfeit, Inc. receives your Stripe customer ID, plan, subscription status, billing email and payment or refund records, not full card numbers. No sale, advertising use or unrelated third-party use of device-management data is permitted under the proposed policy. Counsel must review necessary processor arrangements against Apple MDM rules before release. Provider access is not a claim of end-to-end encryption.

International processing

Service infrastructure may process information outside your country. Before launch, the company must verify hosting regions and any required transfer safeguards, including applicable EEA/UK transfer terms. This draft does not assert that contracts or certifications have already been completed.

Retention

Account and focus records are needed while providing the service; inventory tracks present and removed applications for management. Security, support and legal records may require different limited periods. Final periods, backup expiry and deletion jobs must be verified and published. We do not promise a deletion schedule the implementation has not demonstrated.

Your rights

Depending on applicable law, you may request access, correction, deletion, portability, restriction or objection, withdraw consent, appeal a decision and complain to a regulator. Contact support@togglemyphone.com. Identity checks must be proportionate. Account deletion and device unenrollment are explained separately on the deletion page.

Children and eligibility

The proposed initial release is for adults managing their own devices. Age eligibility and any future service for children require legal approval and appropriate consent controls. Do not enroll children in this private test.

Storage and updates

Essential authentication and security storage may be necessary for the site to function. See the cookie notice. Optional analytics and advertising are not part of this release. Material privacy changes should be communicated before a new use begins when required by law.