Hello,
My colleague and I are building a digital wellbeing app for high school students aged 14–17. Students install it on their own iPhones and choose to use it. It is not a covert monitoring or parental control tool. Students set a daily social media goal and earn points for meeting it, which they can redeem for rewards offered by their school. We plan to use FamilyControls with individual authorization, and DeviceActivity.
We have read the Family Controls Framework section of the Developer Program License Agreement (section 3.3.3). It says device or usage data may not be shared beyond the individual and their device, and we want to design within it.
-
On-device storage: A DTS reply in another thread (https://developer.apple.com/forums/thread/825822) says device activity data may be used within the device activity target, as long as this doesn't involve storing or manipulating the data. May our DeviceActivityMonitor extension record in an App Group that a threshold was reached, so our main app can show the student their own progress?
-
Derived results: With the student's explicit consent, may the app send our server only a coarse result computed on the device? For example:
a. "Goal met" or "goal not met" for the day
b. A daily tier, such as "under 1 hour"
Does Apple consider either of these "device or usage data"? -
Redeeming rewards: If neither is allowed, what is the recommended way to let a student redeem a reward based on a result that stays on their device?
-
School distribution: Schools would distribute the app. Staff would see only class-level aggregates, computed on our server from the results in question 2, such as "70% of consenting students met their goal". No individual result is visible to anyone but the student. Would this count as an "organizational setting" under the agreement? If so, which part of the design causes that?
Would love some help on these questions,
Barak