Privacy Policy

Last updated: 12 August 2026

1. Who we are

Untide is a mobile wellbeing app that helps adults reduce compulsive pornography use by learning to manage urges. This policy explains what happens to your information when you use it. You can reach us any time at privacy@untide.app.

2. No account, no real name

You can use Untide without registering. We do not ask for your name, phone number, or email to get started, and we do not create a profile that identifies you.

3. What stays on your device

The following is saved in the app's local storage on your phone and is not transmitted to us:

• Your onboarding quiz answers
• Every urge you log: time, duration, intensity before and after, the activity you chose, and the outcome
• Any trigger notes you write after a relapse
• Your daily check-ins: sleep, stress, mood, exercise
• Your Control Score and the patterns calculated from the above
• Your settings: language, reminders, discreet mode, biometric lock

If you delete the app, this data is deleted with it.

4. Anonymous usage statistics

So we can tell whether Untide actually helps people, the app sends us a small anonymous summary about once an hour while you use it. It contains:

• a random identifier generated on your device — it is not your name, email, phone number, advertising ID, or anything Apple or Google gave us, and it cannot be traced back to you;
• your language, platform, and app version;
• whether you finished onboarding, and whether you're on the free or Plus plan;
• counts only: how many urges you logged, how many you handled, how many relapses, how many check-ins, how many coach messages.

It never contains what you wrote, when exactly anything happened, your quiz answers, your trigger notes, or any message to the coach. It tells us "this device logged 7 urges and handled 5" — never a single word of what you typed.

If you'd rather send nothing at all, we will add a switch for this in Settings; until then, write to privacy@untide.app and we'll tell you how to opt out.

5. The AI Coach

The AI Coach is the one feature that requires the internet. When you send a message:

• Your message is sent over an encrypted connection (HTTPS) to our server, and from there to Google's Gemini service, which generates the reply.
• Alongside your message we send anonymous context so the coach can be useful: your Control Score, your percentage of urges handled, how many days you've used the app, your typical risky time window, and any trigger notes you wrote. This context contains no name, email, device identifier, or anything that identifies you.
• We do not store the conversation. It is not written to any database of ours. It exists in your phone's memory during the session and disappears when you close the chat.
• Google processes the request as our service provider under its own terms. We do not permit it to be used to build advertising profiles about you.

If you never open the coach, no message of yours ever leaves your phone.

6. Optional sign-in

You may sign in with Apple or Google. It is entirely optional and off by default: the app works fully without it. If you use it, we receive only the name and email address that Apple or Google shares with us. With Apple you can choose to hide your real email address, and that works fine here because we identify you by the permanent ID your provider gives us, not by your email. You can sign out at any time from Settings.

We verify your sign-in directly with Apple or Google on our server before granting anything. Sending us someone else's email address gets you nowhere.

7. Backup, only if you sign in

Signing in exists for one reason: so you don't lose months of progress when you change or lose your phone. When you are signed in, the app sends a copy of your logged urges, your check-ins and your quiz answers to our server, over an encrypted connection, about once every six hours.

• It is stored in private storage that is not publicly reachable, and every read and write requires proof that you are you, verified against Apple or Google.
• It is filed under the permanent ID from your provider, not your email.
• It never includes your conversations with the AI Coach. Those are never stored anywhere.
• If you sign out, we delete the backup from our server.

If you never sign in, none of this happens and your data never leaves your phone.

8. Biometric lock

If you enable Face ID or fingerprint unlock, the check is performed entirely by your device's operating system. We never receive, see, or store your biometric data.

9. Reminders and notifications

Reminders are scheduled locally by your phone. Your check-in time and your risky time window never leave the device to make this work, and notification text never mentions pornography or masturbation.

10. What we do not do

• We do not sell, rent, or trade your information. Ever.
• We do not run advertising networks or third-party tracking inside the app.
• We do not share your data with employers, insurers, family members, or anyone else.

11. Your rights

Because your data lives on your device, you are in direct control of it. In Settings → Your data you can:

• Export my data — get a complete copy of everything the app holds, in a readable file.
• Delete everything — erase all of it immediately and irreversibly, including any backup on our server.

If you are in the European Union, the United Kingdom, Brazil, California, or anywhere with similar law, these tools already give you access, portability, and erasure. For anything else — including questions about the optional sign-in — write to privacy@untide.app and we will respond within 30 days.

12. Adults only

Untide is for people aged 18 and over. We do not knowingly collect information from minors. If you believe a minor has used the app, contact us and we will help remove any associated data.

13. Untide is not medical care

Untide is a wellbeing tool, not medical treatment, diagnosis, or therapy, and the AI Coach is not a clinician. If your habit is seriously affecting your life, please speak to a professional. If you are thinking about harming yourself, contact your local emergency services or find a helpline at findahelpline.com.

14. Changes

If we change how we handle your information — for example if we add optional cloud sync or anonymous product analytics — we will update this page and change the date above. Material changes will be announced in the app before they take effect.

15. Contact

Privacy questions and data requests: privacy@untide.app
Everything else: support@untide.app