Privacy Policy
CB Industries, LLC — Squirrel ADHD Toolkit Effective date: June 8, 2026 Last updated: October 10, 2026 (corrected which apps ask for macOS permissions: two, not four. October 8: added the App Store versions, device backups, and notifications) Website: squirrel.cb-industries.co Contact: squirrel@cb-industries.co
The short version
The Squirrel apps collect nothing. Everything you type, toggle, or configure stays on your device. We never receive it, and we cannot see it. There are no accounts, no servers, no analytics, and no third-party tracking of any kind inside the apps.
When you purchase Squirrel from our website, our payment processor (Lemon Squeezy) collects your name, email address, billing address, and payment information to complete the transaction. That happens on their systems, under their policy — not ours. When you buy from the App Store, Apple handles the purchase and does not share your name or email with us.
1. Who we are
CB Industries, LLC ("CB Industries", "we", "us") makes and sells the Squirrel ADHD Toolkit — a suite of Mac apps for focus, time management, and daily life. This policy covers squirrel.cb-industries.co and the Squirrel apps themselves.
Contact us any time at squirrel@cb-industries.co.
2. The apps — what they collect (nothing)
Every Squirrel app runs entirely on your device. The apps:
- Do not connect to the internet (except BoringRedirect's optional "Real articles" mode, described below — and even that makes no network request itself; it hands a URL to your browser).
- Do not transmit any data to us or any third party.
- Do not include analytics, crash reporting, or tracking of any kind. (We run a code-level audit —
audit.py— that verifies this mechanically on every build.) - Do not require an account.
- Do not use cookies.
Where your data is stored:
Everything you enter into a Squirrel app is stored locally on your Mac:
- Web-wrapped apps (timers, trackers, journals, etc.) store data in
~/Library/Application Support/Squirrel/<app-name>.store.json. - Native apps (Waypoint) store data in
~/Library/Application Support/Squirrel/anchors.json.
You can delete this data at any time by using each app's built-in Reset button, or by deleting the files above in Finder.
Backups. Your own device backups (for example Time Machine on a Mac, or iCloud Backup or a computer backup of an iPhone or iPad) include app data the same way they include any other app's data. Those backups belong to your Apple account or your backup drive. We never receive them and cannot read them.
No sync. Squirrel does not use iCloud sync, iCloud Drive, or any server. Data you enter on your Mac stays on your Mac, and data you enter on your iPhone stays on your iPhone; the two are not connected.
Squirrel from the App Store (Mac, iPhone and iPad)
If you get Squirrel from the Mac App Store or the iOS App Store:
- The app runs inside Apple's App Sandbox and never connects to the internet. Its tools are built into the app, and it blocks every request that would leave your device. (On a Mac, the app's entitlements list "outgoing connections" only because macOS requires it for any app that shows web-based screens; Squirrel does not use it.)
- Your data is stored in the app's own sandbox container on that device (on a Mac:
~/Library/Containers/co.cbindustries.squirrel/). Deleting the app deletes that data. - Purchases are processed by Apple. Apple tells the app only which packs your Apple Account owns, so they unlock on every device signed in to it. We do not receive your name, email, or payment details.
- On iPhone and iPad, a few tools (timers, Leave By, Did I Take It, TellMeLater, Worry Window) can schedule local notifications if you allow them. These are created and delivered by your device; nothing is sent to us or to a push server.
- Our App Store privacy label is "Data Not Collected".
3. macOS permissions — two apps ask; two more read basic system state
Two apps ask macOS for a permission. macOS prompts you the first time, and you can revoke it at any time in System Settings → Privacy & Security.
| App | Permission | What it reads | What it does NOT read |
|---|---|---|---|
| Waypoint | Accessibility; the website version also asks for Automation for your browser | At the moment you save a waypoint: the frontmost app's name, the focused window's title (Accessibility) and, in the website version, the active browser tab's URL (Automation) — to build a "breadcrumb" of where you were | Document contents, keystrokes, page text, anything you didn't save |
| BoringRedirect (website version only) | Automation for your browser | Active browser tab URL (to decide whether to redirect a doom-scroll domain) | Page contents; it never reads the page, only the URL |
Two apps read basic system state that macOS makes available without any permission:
| App | What it reads | What it does NOT read |
|---|---|---|
| FocusJail | Which app is currently frontmost (to detect if you've wandered) | Anything inside any app |
| Surfacing | System idle time — how long since you touched the keyboard or mouse | What you were doing, only whether you were active |
No other Squirrel app reads anything outside itself.
None of this data is transmitted off your device. It is used only in-memory, in the moment, to make the app work.
4. BoringRedirect — the only external URL in the suite
When you opt into BoringRedirect's "Real articles" rescue mode, the app opens your browser to one of a fixed, hand-vetted list of public URLs (NASA APOD, Wikipedia science pages, etc.). This is equivalent to typing an address into your browser. The app makes no network request itself and sends no data to any server.
This feature is opt-in and off by default. You can turn it off or ignore it entirely.
5. Purchasing — what Lemon Squeezy collects
Squirrel apps are sold through Lemon Squeezy (lemonsqueezy.com), our payment processor and merchant of record. When you make a purchase, Lemon Squeezy collects:
- Your name and email address
- Your billing address
- Your payment information (credit card or other payment method)
- Your IP address and device/browser information (standard for fraud prevention)
Lemon Squeezy is the merchant of record, which means they are legally responsible for processing your payment, collecting applicable sales tax, and issuing your receipt. Their handling of your data is governed by their own privacy policy at lemonsqueezy.com/privacy.
What CB Industries receives: After a purchase, we receive your email address and order details so that your download link can be delivered. We do not receive your payment card details.
We retain purchase records (email + order ID) as required for business and tax purposes.
6. Download delivery
After purchase, Lemon Squeezy emails your download link to the address you provide at checkout. The apps have no activation, DRM, or license key — they run entirely offline once downloaded.
7. The website — squirrel.cb-industries.co
Our website may collect standard web server logs (IP address, browser type, pages visited, timestamp) as part of normal hosting operations. We do not run analytics, advertising trackers, or marketing pixels on the site.
8. Email communications
If you contact us at squirrel@cb-industries.co, we use your email address to reply and to resolve your issue. We do not add you to a marketing list without your explicit consent.
9. Children
The Squirrel apps are not directed at children under 13. We do not knowingly collect personal information from children under 13.
10. Your rights
Because the apps collect no personal data, there is nothing for us to access, correct, export, or delete on our end.
For purchase data held by Lemon Squeezy, contact them directly at lemonsqueezy.com/privacy.
For any question or request related to your interaction with CB Industries directly, email squirrel@cb-industries.co.
11. California residents (CCPA / CPRA)
The Squirrel apps collect no personal information, and CB Industries does not meet the thresholds that make a company a "business" under the California Consumer Privacy Act. For completeness and transparency:
- We do not "sell" or "share" your personal information as those terms are defined under California law, and never have. There is no advertising, no cross-context behavioral tracking, and no data brokering anywhere in our apps or our business.
- The only personal information tied to your purchase — your email address and order ID — is collected by Lemon Squeezy as merchant of record and passed to us solely to deliver your download and provide support.
- California residents may email squirrel@cb-industries.co to ask what purchase information we hold or to request its deletion. We will not discriminate against you for exercising any privacy right.
12. European Union & United Kingdom users (GDPR / UK GDPR)
If you are in the EU, EEA, or UK, this section applies to the limited purchase information we hold (your email address and order ID). The apps themselves transmit nothing, so there is no other personal data for us to process.
- Data controller: CB Industries, LLC — squirrel@cb-industries.co. Your checkout and payment details are collected and controlled by Lemon Squeezy as merchant of record, under their privacy policy.
- What we process and why: your email address and order ID, in order to deliver your download and respond to support requests.
- Legal basis: performance of our contract with you (GDPR Art. 6(1)(b)) and our legitimate interest in keeping basic sales and tax records (Art. 6(1)(f)).
- Retention: we keep purchase records only as long as needed for support and as required by tax and accounting law, then delete them.
- Your rights: access, rectification, erasure, restriction, portability, and objection. Email squirrel@cb-industries.co to exercise any of them. You also have the right to lodge a complaint with your local data protection supervisory authority.
- International transfer: CB Industries is based in the United States, so contacting us means your email is processed in the US.
13. Changes to this policy
If we make material changes to this policy, we'll update the effective date at the top. Because the apps collect no data, we do not anticipate significant changes.
14. Contact
CB Industries, LLC squirrel@cb-industries.co squirrel.cb-industries.co