Privacy Policy

Last updated: June 26, 2026 · Applies to the Unaddicted mobile app ("Unaddicted," "the app"), operated by Athletes Department LLC ("we," "us").

Unaddicted helps you build or break habits over 30, 60, and 90-day programs. We built it privacy-first and local-first: there are no accounts, and your personal habit data lives on your own device by default. This policy explains exactly what we collect, what stays on your phone, the few cases where data leaves it, and the choices you have.

1. No account, local-first by design

• There are no user accounts. You do not sign up, log in, or give us a name or email to use the app. The name you optionally enter during setup is stored only on your device to personalize the experience.
• Your habit data is stored locally on your device — your check-ins, streaks, calendar history, journal entries, photos, reflections, tools usage, and reminders. We do not keep a copy of this on our servers.
• Because there is no account, there is nothing to "log in" to recover. If you delete the app or your device data, your history is gone unless you have used an in-app export/backup.

2. Information stored on your device

This information is created by you, kept on your device, and is not transmitted to us:

• Health & recovery data — the habit/addiction/goal you track, daily check-ins, slips, "missed" days, streaks, and progress.
• Sensitive information — because a tracked habit or addiction can itself be sensitive.
• Your content — journal entries, reflections, notes, intentions, mood/craving logs, and any photos you attach to a day. These stay on your device — the one exception is a photo you deliberately attach to a shared Social Pact check-in (see Section 3).
• App settings — reminders, your optional name, and preferences.

Your Private Journal is encrypted at rest on your device, and your most sensitive settings use the device's secure keychain.

3. When information leaves your device

A small number of optional features send limited data off your device. Each is described honestly below.

• AI coach & AI features (only if you opt in). If you grant AI consent, the messages and the relevant context you choose to send are transmitted — through our secure proxy — to our AI provider (Anthropic) to generate a response. We route this through a server function so the provider key is never in the app, and we create an anonymous session and a per-install identifier solely to rate-limit abuse. Under our agreement with Anthropic, your inputs are processed only to generate your response, are not used to train any model, and are not retained beyond what is needed to return that response. If you do not consent to AI, none of this is sent.
• Crash & diagnostics data. To keep the app stable, we may collect crash reports and diagnostic information (e.g., error type, device model, OS version) via Sentry. This is configured to not attach personal identifiers and to never record your screen. This is active only when crash reporting is enabled for the build.
• Usage analytics. We collect basic, aggregate usage and performance data (e.g., app opens, feature interactions) via Expo / EAS Insights to understand how the app is used and improve it. This is not tied to your identity.
• Purchases. If you buy a subscription or in-app purchase, the transaction is handled by Apple and processed/validated through RevenueCat. We never see or store your payment-card details — Apple does.
• Social Pact (only if you create or join one). A Social Pact is a private, 1:1 accountability link between you and one person you personally invite. To pair your two devices and keep them in sync, the pact's details (each side's goal and stakes), your check-ins, encouragement reactions, and any check-in photos you choose to share are stored on our secure backend (Supabase) and are visible only to you and your one pact partner — enforced by per-row access controls; shared photos live in a private, member-only store. If you never create or join a pact, none of this applies, and you can end a pact at any time.

4. Third-party services we use

• Apple — App Store distribution, and (if applicable) in-app purchases. See Apple's privacy policy.
• Anthropic — AI processing for the optional AI coach, under a data processing agreement (no training on your data; no retention beyond generating your response). See Anthropic's privacy policy.
• Supabase — our secure proxy/edge function and anonymous-session/rate-limit infrastructure for AI features.
• Sentry — crash and diagnostics monitoring, when enabled.
• Expo / EAS Insights — aggregate usage analytics and app delivery.
• RevenueCat — purchase/subscription management.

5. How we use information

• To provide the app's core functionality (your tracking, calendar, streaks, tools, reminders).
• To provide optional AI coaching when you ask for it.
• To keep the app stable (crash/diagnostics) and to understand and improve usage (aggregate analytics).
• To process purchases, if you make them.

We do not sell your personal data. We do not use it for third-party advertising, and we do not track you across other apps or websites.

6. Legal bases for processing (EEA/UK — GDPR)

Where the GDPR applies, we rely on the following legal bases:

• Consent (Art. 6(1)(a); and Art. 9(2)(a) for any health-related data) — for the optional AI coach and any off-device processing of sensitive data. You can withdraw consent at any time in the app, which stops that processing going forward.
• Legitimate interests (Art. 6(1)(f)) — for crash/diagnostics, aggregate analytics, and abuse-prevention rate-limiting, balanced against your rights and limited to non-identifying or minimal data.
• Contract (Art. 6(1)(b)) — to process any purchase you make.

7. Your privacy rights (incl. California — CCPA/CPRA)

• Delete everything, anytime. In the app, go to Settings → Delete everything. This erases all of your data from the device and, if you have ever created or joined a Social Pact, also erases your pact data from our backend — your check-ins, the photos you shared, your reactions, and your notification token. Pacts you created are deleted; for a pact you joined, your identity is removed and the pact is ended. Because almost all of your data already lives only on your device, and the one exception (Social Pact data) is erased by this same control, this in-app delete is the primary and most complete way to remove your information.
• AI is optional. Decline AI consent and the app works fully without ever sending your content to an AI provider.
• We do not sell or share your personal information as those terms are defined under the CCPA/CPRA, and we do not use sensitive personal information beyond providing the features you request. We do not discriminate against you for exercising any privacy right.
• Depending on where you live, you may have rights to access, correct, delete, or port personal data, or to object to or restrict certain processing. To make a request, contact us at unaddictedai@gmail.com and we will respond as required by applicable law.

8. Children

Unaddicted is intended for users aged 18 and older and is not directed to children. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us at unaddictedai@gmail.com and we will delete it.

9. Data retention

Your on-device data is retained until you delete it (or delete the app). The limited server-side data used for AI rate-limiting (an anonymous per-install identifier and per-day call counts) is retained only as long as needed for abuse prevention and then discarded; AI prompt content is not retained by us or, under our agreement, by Anthropic beyond generating your response.

Social Pact data (the pact's goals and stakes, your check-ins, shared check-in photos, and encouragement reactions) is retained on our backend only while the pact exists. It is removed when you use Settings → Delete everything, and we delete pact data tied to inactive or ended pacts on a routine basis. Reports you submit about a pact are retained only as long as needed to review and act on them.

10. Security

We design to keep data on your device, encrypt your Private Journal at rest, keep provider secrets off the device, and transmit any off-device data over encrypted connections (HTTPS). The Social Pact data that does live on our backend is stored privately and is accessible only to you and your one pact partner, enforced by per-row access controls; shared photos are kept in a private, member-only store. No method of storage or transmission is 100% secure, but we work to protect your information.

11. International users

We operate from the United States. If you use the app outside the United States, any limited data processing described above may occur in the United States or in countries where our service providers operate, which may have different data-protection laws. Where required, we rely on appropriate safeguards for such transfers.

12. Changes to this policy

We may update this policy as the app evolves. We will revise the "Last updated" date above and, for material changes, provide notice in the app where appropriate.

13. Contact

Questions about this policy or your data: unaddictedai@gmail.com.
Athletes Department LLC, 4400 Muscatel Ave, Rosemead, CA 91770, USA.

This policy reflects how the Unaddicted app actually handles data. Keep it consistent with your App Store "App Privacy" answers and the in-app disclosures.