Privacy Policy

Local-first by design.

Voyager has no account, no analytics and no advertising, and it does not run its own server for your browsing. Your settings stay on your iPhone.

Last updated: October 29, 2026Applies to: Voyager 1.0.1
✓No Voyager account
✓No analytics or ads
✓No Voyager browsing server
✓Settings stay on your iPhone

This Privacy Policy describes how Voyager for iPhone handles information. It does not govern the privacy practices of websites you choose to visit through Voyager.

1. Who we are

Voyager is an intentional web browser for iPhone, published by ModusBios Technologies Inc.

Voyager is designed to help you choose when and how you browse. It is not a parental-control product for monitoring someone else, and it is not a cloud service.

2. Summary

  • Voyager does not operate analytics, advertising, crash-reporting, or tracking infrastructure.
  • Voyager does not run its own backend for browsing, accounts, or Device Protection.
  • Settings, commitments, and browsing data that Voyager keeps stay on your iPhone.
  • Subscriptions are sold and billed by Apple through the App Store.
  • Websites you visit have their own privacy practices. Voyager cannot control those.

3. Data Voyager does not collect

Voyager does not include:

  • a Voyager user account
  • a Voyager website backend for syncing your browsing
  • analytics or telemetry SDKs
  • advertising SDKs
  • crash-reporting SDKs
  • sale of personal information to third parties

The app’s privacy manifest declares that Voyager does not track you and does not collect the data types Apple lists for nutrition-label disclosure.

4. Browsing

Voyager displays websites using Apple’s WebKit. When you browse, the website you open may set cookies, keep you signed in, or collect information under that website’s own policy. That happens between your iPhone and the website. Voyager does not operate a proxy or a Voyager-owned browsing server.

Focus and Scan share the same browser. They use the iPhone’s normal persistent web data store, so cookies, cached pages, and saved logins for sites you use in Focus or Scan can remain on the device after you leave a session. That is how staying signed in to a Focus site works. Voyager does not store passwords itself and is not a password manager. iOS Password AutoFill may still appear in the page, because that is an iOS feature.

You can clear this data in Voyager Settings with Clear Focus & Scan Website Data. It does not delete your Focus list or commitment settings.

Emergency Mode is a separate, time-limited browser. Emergency browsing uses a fresh in-memory web data store and a separate process pool. It does not start with your Focus cookies or logins. When the Emergency session ends, that in-memory store goes away with it, so Emergency browsing is not intended to leave those cookies, cache, or logins behind for later Focus use.

Emergency session limits and the running timer are stored on the device so the timer can continue if you leave or force-quit the app. That is session-control state, not a copy of the pages you visited.

5. Camera and Scan

Scan uses the camera only to recognize a QR code on the device. Voyager reads the QR code’s text locally and uses it to start a browsing session when the content is a web address. Voyager does not save camera frames to the Photos library, and it does not upload camera images to a Voyager server.

The first camera prompt appears when you choose to enable the camera in Scan.

Websites you open in Voyager never get the camera or the microphone. Voyager refuses every website request for them, in Scan, Focus and Emergency, so no website can record you through Voyager and you will not see a camera or microphone prompt for a website.

6. Settings and other on-device storage

Voyager stores, on your iPhone:

  • your Focus site list and related commitment settings
  • your Trusted Sites list
  • Emergency limits, timer, and daily-session counts
  • Standard / Hardcore commitment and pending changes
  • onboarding progress
  • Device Protection on/off intent, whether Screen Time was previously approved, and any request to turn Device Protection off

Most of this is kept in Apple’s standard on-device storage (User Defaults). Some Device Protection records are kept in the iOS Keychain on this device only.

Voyager does not keep a local “you are subscribed” file as the source of truth. Subscription access is checked with Apple through StoreKit.

When Voyager cannot confirm the current time, for example the first time it runs or after your iPhone restarts, it asks an Apple web server for the current time so that its delays cannot be skipped by changing the date. The request does not include your browsing, your settings, or any account information.

7. Subscriptions

Voyager is an auto-renewable subscription. Purchase, restore, billing, cancellation, and payment details are handled by Apple.

Voyager receives an on-device entitlement result from StoreKit so it can unlock the app. Voyager does not receive your full Apple Account payment information.

Manage or cancel the subscription in your Apple Account subscription settings, or from Manage Subscription inside Voyager Settings.

8. Device Protection and Screen Time

Device Protection is optional. It is not required to use Voyager.

If you turn it on, Voyager asks Apple for Screen Time (Family Controls) authorization on this iPhone. Voyager then uses Apple’s Managed Settings on the device to restrict Safari and the App Store, and to prevent installing new apps while protection is active. It also filters web content in other apps’ built-in browsers while Voyager is not on screen, except the Trusted Sites you add. The Trusted Sites list stays on your iPhone.

Voyager does not send Screen Time data to a Voyager server, does not offer a picker for choosing arbitrary apps to block, and cannot see, set, reset or recover your Screen Time passcode.

If you later remove Screen Time authorization, Voyager keeps your intent that Device Protection was enabled and shows that protection is unavailable. You can ask Voyager to turn Device Protection off in Settings › Device Protection; the request waits 30 days and you can cancel it at any time, with or without a subscription. If Apple’s signed subscription status confirms that your subscription has ended, Voyager removes its Screen Time settings the next time you open it. Voyager stores only the request, its due time and the time of that release on your iPhone, and it reads your subscription status from Apple on this iPhone only; no Voyager server is involved.

Device Protection does not make browsing anonymous, and it does not guarantee that every possible iOS bypass is impossible.

9. Incoming links

If another app or a voyager:// link tries to open a page, Voyager only loads it when you currently have access and the destination is allowed under the current browsing rules. Links are not queued for after a later purchase.

10. Logs

Release builds are not intended to print full URLs or personal browsing history. Debug tracing exists only in development builds.

11. Support emails

In the app, Settings › Contact Support prepares an email that includes only the app version and build, your iOS version, your device model, and whether Device Protection is on. You can read and edit it before you send it.

If you contact support, we receive the information you choose to send, such as your email address, screenshots, attachments, and a description of the issue. Support correspondence may be retained as reasonably necessary to respond, maintain records, resolve disputes, prevent abuse, or meet legal obligations.

12. Data retention and deletion

Settings stored on your iPhone remain there for as long as needed to operate Voyager, or until they are removed through available controls or by deleting the app. Device Protection records kept in the iOS Keychain may remain on the device after Voyager is deleted; Voyager discards them if it is installed again.

Focus and Scan website data may persist through Apple WebKit until cleared with Voyager’s website-data control, by iOS, by a website, or through other system behavior.

Because Voyager does not maintain a Voyager cloud account or a browsing-history server, there is generally no server-side record for us to delete.

13. Children

Voyager is a general web browser. Emergency Mode can reach the open web for a limited time. Voyager is not directed at children under 13 and is not a parental-surveillance tool.

14. Sale of personal information

Voyager does not sell personal information. Voyager does not collect a Voyager-side personal-information inventory that could be sold.

15. Websites you visit and Apple services

When you open a website, that site may collect data under its own policy. Voyager’s privacy practices do not replace the privacy policy of any site you choose to visit.

Apple also processes information when you use App Store purchases, Screen Time permissions, and other Apple platform services. Those services are governed by Apple’s terms and privacy practices.

16. Changes

If Voyager’s data practices change in a later version, this policy will be updated, with a new “Last updated” date, and the in-app and App Store links will point to the current version.

17. Contact

For privacy questions or support, email support@modusbios.com or visit the Voyager Support page.