Privacy Policy
Effective 3 September 2026 · Version 1.0
The short version. Everything you record in Curb — what you’re quitting, your streaks, slips, mood check-ins, journal notes and reasons — is stored in a database on your device and is never transmitted to us or anyone else. Curb has no user accounts and no servers that receive your entries. We do not use analytics or advertising trackers. The only network activity is for subscription purchases and app updates, described below.
1. Who we are
Curb (“Curb”, “we”, “us”) is a mobile application that helps people track and reduce addictive habits. This policy explains how the app handles information. It applies to the Curb iOS and Android apps and to this website, joincurb.app.
Data controller: [LEGAL ENTITY NAME]
Postal address: [REGISTERED ADDRESS]
Email: privacy@joincurb.app
2. Data that stays on your device
Curb stores the following in a local database inside the app’s private storage area on your phone. None of it is transmitted to us, and we have no ability to access it.
| What | Examples |
|---|---|
| Habits you track | Porn, alcohol, smoking, vaping, weed, social media, gambling, other |
| Onboarding quiz answers | Frequency, how long, triggers, symptoms you selected, age range, goal |
| Streak & program data | Quit date, current and longest streaks, milestones reached |
| Daily activity | Pledges, evening check-ins (mood and difficulty ratings), optional notes |
| Urge records | When an urge occurred, its trigger and intensity, the outcome, how long it lasted |
| Slip records | Which habit, the trigger, your notes, the next actions you chose |
| Your reasons | The free-text reasons you wrote for quitting |
| Preferences | Reminder times, theme, whether reminders are on |
Some of this is sensitive information about health and behaviour. We have designed Curb so that this category of data is never collected by us in the first place.
Because your data is only on your device, it is only as durable as your device. If you delete the app, reset your phone, or lose it, your Curb history is permanently gone and cannot be recovered by us. Use Settings → Export everything to keep your own copy.
3. Data that leaves your device
Three narrow exceptions, none of which involve your recovery entries.
a. Subscription purchases
Curb offers a paid subscription and a one-time lifetime option. Payment is handled entirely by Apple or Google — we never see or receive your card details, billing address, or Apple/Google account credentials.
To know whether your subscription is active, the app uses RevenueCat, a subscription-management service. RevenueCat receives a randomly generated, pseudonymous app-user identifier together with the purchase receipt and subscription status issued by the store. It does not receive your name, email, or any of the recovery data listed above. See RevenueCat’s privacy policy.
For store-privacy purposes this is disclosed as Purchases → Purchase history, used for app functionality and analytics, not linked to your identity, and not used to track you across apps or websites.
b. App updates
Curb can receive improvements and fixes without a full store update, using Expo Application Services (EAS Update). When the app launches it asks Expo’s servers whether a newer version of the app’s code is available. That request contains only technical details — platform (iOS/Android), the app’s runtime version, the update channel, the identifier of the version currently installed — and, as with any internet request, your IP address. It contains none of your content. See Expo’s privacy policy.
c. This website
joincurb.app is a static site. It sets no cookies and runs no advertising or analytics scripts. Fonts are loaded from Google Fonts, which receives your IP address as part of serving the font files.
4. Notifications
Curb’s reminders (a morning pledge and an evening check-in) are local notifications — scheduled by the app and delivered by your phone’s operating system. There is no push server and no push token; nothing is transmitted to us or to Apple/Google beyond what the OS does to display a local alert. Reminders are optional, can be declined during onboarding, and can be turned off at any time in Settings or in your device settings.
5. Exporting your data
Settings → Export everything writes a JSON file containing your Curb data and hands it to your device’s standard share sheet. We do not receive this file. Once you send it somewhere — email, cloud storage, another app — that destination’s own privacy policy governs it.
6. No selling, sharing or advertising
We do not sell or share personal information as those terms are defined by the California Consumer Privacy Act as amended by the CPRA, and we do not process personal information for cross-context behavioural advertising. Curb contains no advertising SDKs, no analytics SDKs, and no social-media SDKs. We do not use sensitive personal information to infer characteristics about you, so the CPRA right to “limit the use of my sensitive personal information” does not arise. We have never sold or shared personal information, including in the preceding twelve months.
Curb does not track you across other companies’ apps or websites, and does not request permission to do so.
7. Your rights
Depending on where you live you may have rights to access, correct, delete, port, restrict or object to the processing of your personal information, and to opt out of its sale or sharing (CCPA/CPRA and other US state laws), or the equivalent rights under the UK/EU GDPR.
Because your Curb data lives on your own device and is never sent to us, most of these rights are exercised directly by you and immediately:
- Access and portability — Settings → Export everything.
- Correction — edit or delete individual entries in the app; undo a logged slip within 24 hours.
- Erasure — Settings → Delete everything, or delete the app. See Delete my data.
- Objection / restriction — stop using the app; nothing of yours is held elsewhere.
For the limited purchase data held by RevenueCat, or for any question about this policy, email privacy@joincurb.app. We will respond within 30 days. You will never be treated differently for exercising a privacy right. If you are in the UK or EEA you also have the right to complain to your data protection authority (in the UK, the Information Commissioner’s Office).
8. Legal basis for processing
For users in the UK/EEA: because your recovery entries never reach us and we hold no means of identifying you from them, we do not act as a controller of that data. For the on-device processing the app performs at your direction, the basis is your consent (Article 6(1)(a)), and for health-related entries your explicit consent (Article 9(2)(a)), given by choosing to record them. For purchase data the basis is performance of a contract (Article 6(1)(b)). You may withdraw consent at any time by deleting your data or the app.
9. Children
Curb is not directed to children. It is rated 16+/18+ and is intended for adults. We do not knowingly collect personal information from children under 13 (or under 16 where local law sets that threshold). If you believe a child has provided us with information, contact us and we will act on it — though in practice the app collects nothing from anyone.
10. Retention and deletion
We retain nothing, because we receive nothing. Your data persists on your device until you delete it or remove the app. Purchase records held by Apple, Google and RevenueCat are retained under their own policies and applicable tax and accounting law.
11. Security
Curb’s database is stored inside the app’s private container, protected by your device’s operating-system sandbox and, on modern devices, by full-disk encryption tied to your passcode or biometrics. Network requests use HTTPS. Because we hold no copy of your data, there is no server of ours that can be breached — but keeping your device locked and updated remains the most important protection.
12. Changes to this policy
If we change this policy we will update the effective date above and, for material changes, notify you in the app. Continuing to use Curb after a change means you accept the updated policy. Previous versions are available on request.
13. Contact
Privacy questions: privacy@joincurb.app
General support: support@joincurb.app
Postal: [LEGAL ENTITY NAME], [REGISTERED ADDRESS]