Consumer Health Data Privacy Policy
This is a separate policy, required by Washington State's My Health My Data Act (RCW 19.373). It covers only consumer health data — information that identifies your past, present or future physical or mental health status. It also answers the equivalent requirements of Nevada SB 370 and applies to everyone in the United States, not only Washington and Nevada residents. Our general Privacy Policy covers everything else, and where the two overlap, this policy is the more specific one.
Who we are. No More Bets is operated by Olivia Co., Ltd., Ginza 1-chome Building 7F, 1-15-4 Ginza, Chuo-ku, Tokyo 104-0061, Japan. Contact: the contact form (write "Health data" in the message) or support [at] nomorebets.net. Full operator details are on the Legal notice page.
1. The consumer health data we collect, and what each part is for
No More Bets is a self-help program for stopping gambling. Because what you tell us describes your own condition and the behaviour you are trying to change, we treat all of it as consumer health data.
- Your assessment answers. The kinds of betting you want to stop; how often and how much you bet; the money you have lost; whether betting has affected your sleep, work, money or relationships; whether you have hidden it, borrowed to fund it, or bet to win losses back; what you want life to look like without it. Your date of birth (or, if you skip it, your statement that you are 18 or older) and, optionally, your gender. Used to produce your on-screen assessment and to build the 90-day program, the lessons you are given, and the money forecast.
- Your daily records. Daily check-ins, streak, urges and how you handled them, money saved, lesson progress and the notes you write inside lessons, your letter to yourself, the words on your SOS cards, and task and checklist progress. Used to run the program, keep your streak and totals, and show your own history back to you.
- Coach messages, if you use the optional AI coach. Used to generate the reply you asked for, and for nothing else.
- Places you flag and your device's location, if you turn on location alerts. Used to notice when you are near a place you told us to watch, so the app can check in with you. Your location is processed only on your phone and is never transmitted to us or anyone else. Only the names of the places you add are stored with your records.
- Blocking settings, if you turn on site or app blocking — which categories or apps you chose. Used to apply the blocks on your own device.
We do not infer, derive, or purchase any health data about you, and we do not collect precise location for any purpose other than the on-device alerts described above.
2. Where it comes from
From you, and only from you — what you type or tap inside the app on your own device. We do not buy or receive consumer health data from data brokers, advertising networks, health care providers, insurers, employers, other apps, or any public source. We do not read Apple Health, Google Fit, or any other app's data.
3. What we share, and with whom
We never sell consumer health data — not for money and not for anything else of value — so we neither seek nor hold the "valid authorization" that a sale would require under RCW 19.373.030(3). We never use it for advertising, marketing, profiling, or building audiences.
Consumer health data goes only to the following categories of recipients, each acting under a written contract that limits them to the purpose named:
- Our database and hosting provider (Supabase Inc., on Amazon Web Services in the United States, us-east-1) — stores your account so your records survive a reinstall or a new phone. This happens only if you consented to us keeping your answers in your account; if you declined, your records stay on your phone and nothing in this row applies to you.
- The AI service behind the optional coach (Anthropic PBC, United States) — receives the messages you write to the coach, only when you have separately turned that on. It uses them to produce the reply, deletes them within 30 days, and does not train models on them. We keep no copy after the reply.
- A person you invite yourself, through Accountability — sees only the items you choose (streak, money saved, whether you checked in today). Never your answers, your notes, your locations, or your history. You choose the items, you send the invite, and you can revoke it.
- Apple and Google — receive your purchase and subscription status as the sellers of the app. They do not receive your assessment answers, your check-ins, your notes, or your coach messages.
- Legal and safety — we would disclose data if we were legally required to. We have never received such a request. Consistent with Washington law, we do not respond to out-of-state requests seeking data about reproductive or other protected health care, and we do not disclose consumer health data to law enforcement without valid legal process.
We have no affiliates — no parent, subsidiary, or commonly controlled company — with whom consumer health data is shared. If that ever changes, this page will name them before any sharing begins.
4. Your rights, and how to use them
Whatever state you live in, you have the following rights over your consumer health data:
- Confirm and access. Ask whether we hold consumer health data about you, get a copy of it, and get the list of the specific third parties it has been shared with, together with contact details for each.
How: Settings → Privacy & data → Request a copy of my data in the app, or the contact form. - Withdraw consent — separately for collection and for sharing, at any time, without giving a reason and without losing access to the app.
How: Settings → Privacy & data, where the two consents are two separate switches. Turning off the first stops us storing anything in your account and the app continues to run on your phone alone; turning off the second stops any message reaching the AI service. - Delete. Have your consumer health data deleted from our records and from our backups, and have us pass the deletion on to every processor and third party that received it.
How: Settings → Delete account in the app, or the contact form. This is irreversible.
How long we take. We answer within 45 days. If a request is complex we may take one further 45 days and will tell you why within the first 45. Verification: your records sit under an anonymous account ID, so for a request made from inside the app we act on the account the app is signed in to; for a request by email we may ask you to confirm from the app or to give the email you registered for transfers, so that we do not hand your data to someone else.
If we say no. You may appeal by replying to our decision or writing again through the contact form with "Appeal" in the message. A different person reviews it and we respond within 45 days, in writing, with our reasons. If we still refuse, you may contact the Washington State Attorney General at atg.wa.gov/file-complaint, the attorney general of your own state, or the FTC. Washington's My Health My Data Act also gives residents a private right of action under the Consumer Protection Act.
5. How long we keep it
For as long as you use the app, because the program depends on your own history. Delete your account and everything is removed from our live systems immediately and from backups within 35 days. If you never consented to storage in your account, there is nothing on our servers to delete — clearing the app from your phone removes it.
6. Security
Data is encrypted in transit (TLS) and at rest. Access to production data is limited to the people who need it to run the service, under contract and multi-factor authentication. No name or email address is required to use the app, so what we hold is not tied to your identity unless you choose to add an email for transferring to a new phone.
7. Children
No More Bets is 18+. We do not knowingly collect consumer health data from anyone under 18. If you believe a minor has used the app, write to us and we will delete the account.
8. Changes to this policy
If we change the categories we collect, the purposes, or the recipients, we will update this page, change the date at the top, and — because that is a material change under RCW 19.373.020(4) — ask for your consent again in the app before the change applies to data we already hold.
9. Contact
Contact form: nomorebets.net/contact (fastest) · Email: support [at] nomorebets.net · Post: Privacy Officer, Olivia Co., Ltd., Ginza 1-chome Building 7F, 1-15-4 Ginza, Chuo-ku, Tokyo 104-0061, Japan.
No More Bets