Privacy Policy

Effective August 12, 2026

Ungamble is an app for people who want to stop gambling. The nature of this app means the information you trust us with is sensitive, and we treat it that way. This policy explains exactly what we collect, why, where it lives, and how you delete it. No legal run-around: if anything here is unclear, email hello@ungamble.app and a human will answer.

Who we are

Ungamble is operated by Nodewave (Portugal). Contact: hello@ungamble.app.

What we collect and why

• Account. You sign in with Apple or Google. We receive your account identifier and email address (Apple lets you hide your real one). We use it to keep your data attached to you and to restore it on a new phone.
• Recovery profile. Your answers from onboarding: first name, what you bet on, how often, roughly how much, your risky hours, and past quit attempts. This is what personalizes the app, including Rux.
• Daily check-ins and streaks. Your mood, whether you had urges, and your clean-day count. This powers the streak, milestones, and the 30 day view.
• Conversations with Rux. Messages you send to Rux are stored with your account so Rux can remember context between chats. To generate replies, your messages are processed by an AI model provider acting on our behalf. Rux conversations are never used for advertising and never sold.
• Purchases. Subscriptions are handled by Apple and our billing partner RevenueCat. We never see your card number.
• Sites you choose to block. When you block a betting site, we store that site with your account so the block works on every device you sign in on. This includes sites you send to us with the iOS Share button while browsing. See Blocking, and what we can see for exactly what we receive.
• Usage analytics. We use PostHog to understand which screens and features are used, so we can improve the app. Analytics events never include your name, your messages, exact money amounts (amounts are grouped into ranges before leaving your device), or any site you visit or block.

Blocking, and what we can see

Blocking is the one part of Ungamble that touches the web you browse, so it gets its own section, in plain words.

• Sites you hand us on purpose. You can block a site from inside the app, or from Safari by tapping Share and choosing Ungamble. Either way we receive the site name and nothing else, the “example.com” part on its own. Never the full page address, never the path, never what was on the page, never anything you typed or searched. The domain is stored with your account, because that is what makes the block follow you to a new phone. Apple calls this category Browsing History, because it is a site you viewed outside the app, and we declare it as such on our App Store privacy label.
• Reporting a site for everyone. When you block a site, you choose who it applies to. Pick Just me and the domain stays on your own list. Pick Everyone and we also file the domain as a suggestion for the shared betting-site list, so the next person is protected before they have to ask. A person reviews those suggestions. Only the domain and your account identifier are filed, so that we can undo a mistake or spot abuse. Separately, we count that a block happened and which of the two options you picked, deliberately without the site name, so we can tell whether the feature is used at all.
• The DNS filter, and why we cannot watch you. When site blocking is switched on, iOS routes your phone’s domain lookups through Ungamble’s encrypted DNS filter, which answers “does not exist” for betting sites and passes everything else straight through. That means the lookups pass through our server. We never log them. Not sampled, not behind a debug flag, not kept for a while and deleted: there is no code in the filter that writes a site name anywhere, so there is nothing to store, hand over, or leak. It never sees your name or email either, only a random token. If it fails or cannot reach its list, it lets the lookup through rather than taking your internet down.
• Blocked apps are different. Choosing which apps to block uses Apple’s own Screen Time controls. That selection is handled by iOS on your device and never reaches us. We could not read it if we tried.

What never leaves your phone

• Your future-self video. Recorded, stored, and played only on your device. We could not watch it if we wanted to.
• Your emergency contact. The name and number you add for panic moments stays on the device.
• Your blocked app selection and app lock. Managed by iOS on your device.
• Crisis detection. If a message to Rux suggests you may be in crisis, the app shows real helpline resources. That check runs on your phone, before anything is sent anywhere.

What we never do

• We never sell your data.
• We never share your data with advertisers or data brokers.
• We never log the sites you visit, and we never build a profile of your browsing. The only sites we hold are the ones you deliberately asked us to block.
• We never show gambling ads or take money from the gambling industry.
• We never use your health-related information (like check-ins or conversations) for marketing.

Where your data lives

Server-side data is stored with Supabase, our database provider, with access locked to your account at the database level (row level security). Payments run through Apple and RevenueCat. Analytics run through PostHog (EU). AI replies are generated by a model provider under a data processing agreement; conversations are not used to train their models. The DNS filter and the shared betting-site list run on Cloudflare, keyed by a random token that is not your name or your email.

Deleting your data

Open the You tab and tap Delete my data. This deletes your login itself, which takes your profile, check-ins, conversations and blocked-site list with it, and resets the app on your device, immediately and permanently. One thing survives on purpose: if you told us a site was blocked by mistake, that note stays so the mistake stays fixed for everyone else, but your account is detached from it first, leaving only the site name. You can also email hello@ungamble.app from your account email and we will do it for you. Cancelling your subscription is separate and handled in your Apple ID settings.

Your rights

Depending on where you live (including under GDPR), you have the right to access, correct, export, and erase your personal data, and to object to processing. Email us and we will honor it. You can also complain to your local data protection authority.

Age

Ungamble is for adults. You must be at least 18 to create an account.

Not medical advice

Ungamble is a self-help app. It does not provide medical care, diagnosis, or treatment, and it is not a substitute for professional help. If you need support right now, call or text 1-800-GAMBLER (US) or your local problem gambling helpline.

Changes

If this policy changes in a way that matters, we will tell you in the app before the change takes effect. The current version always lives at ungamble.app/privacy.