Privacy Policy

This policy explains what No More Bets ("the app", "we") collects, why, and what we never collect. We built the app for people at a vulnerable moment, so we keep data to the minimum needed to make it work.

Who we are. The app and this website are operated by Olivia Co., Ltd., Ginza 1-chome Building 7F, 1-15-4 Ginza, Chuo-ku, Tokyo 104-0061, Japan. The person accountable for this policy is our Privacy Officer, reachable at that address or through the contact form (write "Privacy" in the message). Full operator details are on the Legal notice page. For people in the EU/EEA and the UK, we have appointed a representative under Article 27 GDPR / UK GDPR; their name and address are on the Legal notice page, and you may contact them instead of us on any privacy matter.

1. What we collect

• An anonymous account. When you first open the app we create an anonymous user ID so your progress can be restored. You may optionally add an email address to sign in on another phone; it is used only to send a sign-in code.
• Your quiz answers and progress. The kind of gambling you want to stop, your typical spend and frequency, your daily check-ins, streak, lesson progress, and the notes you write in lessons. Free-text answers are stored so you can see them again. Because this describes your health, we store it in your account only with your explicit consent, which the app asks for right after the quiz. If you say no, it stays on your phone and is never uploaded (partner sharing and restoring on a new phone are then unavailable); you can change your mind either way in Settings → Privacy & data.
• Purchase status. Whether you have an active subscription, provided by Apple or Google through RevenueCat. We never see your card or payment details.
• Usage analytics. Which screens are opened and which features are used, tied to the anonymous ID, so we can improve the program. We do not use advertising identifiers and we do not track you across other apps or websites.
• AI coach messages. Messages you send to the coach are sent to Anthropic's API (United States) to generate a reply and are not stored on our servers after the reply is returned. Anthropic deletes them within 30 days (longer only if its automated safety systems flag a message) and does not use them to train its models. The coach only works after you give explicit consent in the app, and you can withdraw it in Settings → Privacy & data; everything else in the app works without the coach.

If you are in the United States. Washington’s My Health My Data Act and Nevada SB 370 require a separate document covering consumer health data. Ours is at Consumer Health Data Privacy Policy; it repeats nothing here that contradicts it, and on health data it is the policy that governs.

2. What we do not collect

• Location. The optional "near a venue" reminder runs entirely on your device. Your location is never uploaded.
• Medical records and Health app data. We do not read from Apple Health, we hold no clinical or medical records, and the app does not diagnose or treat any condition. What you tell us about your own gambling — your quiz answers and your daily check-ins — is treated as health data: it is held on your account, it is never used for advertising or profiling, and you can delete all of it in Settings → Delete account.
• Contacts, photos, or browsing history. The site blocker works from a fixed list inside the app and does not see the sites you visit.

3. Why we use it, and our legal bases

To run the program (lessons, streak, money saved), to restore your progress across devices, to honour your subscription, and to understand which features help people stay stopped.

If you are in the EU/EEA or the UK, the GDPR asks us to name a legal basis for each use:

• Explicit consent (Art. 9(2)(a) and Art. 6(1)(a)) — your quiz answers, check-ins, streak and lesson notes (health data), and the messages you send to the AI coach. You give it in the app and can withdraw it at any time in Settings → Privacy & data; withdrawing does not affect what was done before.
• Performance of our contract with you (Art. 6(1)(b)) — creating your anonymous account, the sign-in code if you add an email, your subscription status, and answering your support messages.
• Our legitimate interests (Art. 6(1)(f)) — anonymous usage analytics that are not linked to your account, keeping the app secure and free of abuse, and knowing which advertising campaign an install came from (campaign-level only). You can object; see section 6.
• Legal obligations (Art. 6(1)(c)) — keeping the records the law requires, for example for tax, which are held by the app store as seller.

Automated assessment. The score and plan you see after the quiz are calculated automatically from your answers. They are self-help guidance only; no decision with legal or similarly significant effects on you is made automatically, and you can restart the quiz at any time.

4. Who we share with, and where your data goes

We do not sell data and we do not share it for cross-context behavioural advertising. We use these processors under their own privacy terms: Supabase (database and sign-in), RevenueCat (subscription status), Apple (purchases, push notifications), and Anthropic (AI coach replies), Expo (delivering push notifications), and OpenStreetMap / Nominatim (only when you search for a place by name or address — we send what you typed, never your location). We do not use the advertising identifier (IDFA) and we do not track you across other apps. If you installed the app from an Apple Search Ads campaign, Apple gives us a campaign-level attribution token (campaign, ad group and keyword IDs — never your identity) which we store with your account so we can tell which campaigns bring people who stay; we also store the subscription ID our billing provider assigns you. If you set an access code on a share link, it is stored as you typed it so the page can check it — treat it as a short code to share, not as a password you use elsewhere. If you enable accountability sharing, the person you invite sees only the items you tick — which may include a single total for money kept — and nothing else: never your notes, your flagged places, or your location.

Overseas transfer. Wherever you live, your data is stored and processed in the United States (Supabase, AWS us-east-1; Anthropic; RevenueCat) and by Apple or Google in the country of your App Store account. The operator is in Japan, which the UK and EU recognise as providing adequate protection; for transfers to the US we rely on our processors' contractual safeguards (standard contractual clauses / equivalent commitments). Your health data and coach messages are transferred only after you give explicit consent in the app, and the transfer itself is covered by those safeguards (Art. 46 GDPR). You can stop future transfers at any time in Settings → Privacy & data, and remove what is stored by deleting your account.

5. Retention and deletion

Data is kept while your account exists. You can delete your account and all data from Settings → Delete account in the app at any time; deletion is immediate and cannot be undone. Anonymous, aggregated statistics may be kept. In more detail: AI coach messages are not stored after the reply; usage analytics carry only an app-generated device ID and are kept for up to 24 months; support messages are kept for up to 24 months after the case is closed, with the account link removed if you delete your account; subscription records are held by Apple or Google under their own terms.

6. Your rights, and how to complain

Depending on where you live (EU GDPR, UK GDPR, California CalOPPA/CCPA, the Australian Privacy Principles, PIPEDA and Quebec Law 25) you may have the right to access, correct, export, or delete your data, to restrict its use, to withdraw consent, and to object to processing based on our legitimate interests. In the EU/EEA and the UK these are the rights in Articles 15–22 GDPR; we answer within one month, free of charge, and will ask you to confirm the email registered in the app (if any) so we do not hand your data to someone else. You can also send a request straight from Settings → Privacy & data → Request a copy of my data. How to exercise them: deletion is instant in Settings → Delete account; for access, correction or export, use the contact form and we will respond within 30 days (we will ask you to confirm the email registered in the app).

Complaints. Write to our Privacy Officer first via the contact form; we acknowledge within 5 business days and aim to resolve within 30 days. If you are not satisfied you may complain to your regulator: in the EU/EEA, the data protection authority of the country where you live or work (for Ireland, the Data Protection Commission, dataprotection.ie; for Germany, the authority of your federal state, listed at bfdi.bund.de); the ICO (UK), the OAIC (Australia), the Office of the Privacy Commissioner of Canada or the Commission d'accès à l'information du Québec, or the California Attorney General.

"Do Not Track". We do not use tracking cookies or cross-site advertising trackers on this website or in the app, so there is nothing to switch off; we do not respond differently to browser "Do Not Track" or Global Privacy Control signals because we already treat every visitor that way. Third parties do not collect personal information about your activity on our website. The only cookie-like storage is the anonymous session used by the contact form.

7. Children

No More Bets is for adults 18 and over. We do not knowingly collect data from anyone under 18.

8. Security

If you delete your account, messages you sent us through the contact form are kept as support records with your account link removed, so we can no longer connect them to you. Data is encrypted in transit and at rest with our providers. Messages you send through the accountability link pass through automatic filters: one containing amounts, contact details, links, or gambling-operator names is refused rather than delivered.

9. Changes

We will post any changes on this page and update the "last updated" date above. For material changes we will also show a notice in the app the next time you open it.

10. Contact

Privacy Officer, Olivia Co., Ltd., Ginza 1-chome Building 7F, 1-15-4 Ginza, Chuo-ku, Tokyo 104-0061, Japan. Use the contact form (fastest) or email support [at] nomorebets.net. EU/EEA and UK residents may also write to our representative named on the Legal notice page.