Privacy Policy for Rebooted
Effective date: August 3, 2026
Last updated: October 27, 2026
Rebooted ("the app") is developed by Branchout ("we", "us"). This policy explains what information the app handles, what stays on your phone, what leaves it, and what rights you have. If you have any questions, email us at ibraindump.dev@gmail.com.
The short version: your detailed streaks, relapse logs, journal entries, and other recovery records are stored only on your device. We send selected onboarding answers, a derived intake recovery category, and fixed-category app interaction events to our analytics and subscription providers as described below. What you post in the community and feedback you choose to send are stored on our servers. We do not sell your data and the app shows no ads. To measure our own ads, Meta learns when the app is installed and opened and when a trial or subscription starts or renews — never anything about your recovery.
1. Information We Collect
Information stored on our servers
When you first open the app, an anonymous account is created for you automatically. You do not provide an email address, phone number, or password. Linked to that anonymous account, we store:
• Your first name (the name you enter during onboarding), so the app can greet you and restore it if you reinstall.
• Account timestamps (when the account was created and last used).
• Community content, only if you join the community: the display name you choose, the posts and replies you write, your reactions and hearts, and, if you choose to show it, your streak in days at the time you post. Other community members can see your display name, posts, replies and the streak you chose to show. We also store the reports you make and the people you block, so we can moderate the community and hide blocked members from you.
• Community notifications: if you allow notifications, your phone's push token, together with your app language and platform (iOS or Android), so we can tell you when someone reacts to, replies to or hearts something you wrote. We keep a record of each of these notifications: who reacted, replied or hearted, on which post or reply, when, and whether you have read it.
• Feedback answers, only if you choose to send them (the "1 month free" offer): your multiple-choice answers and the text you write. Each answer is stored with your anonymous account ID, your subscription ID, your subscription status (for example trial or subscribed), the number of days since you first opened the app, your platform, your app version and your language. We review each answer by hand to grant the free month and to improve the app.
Information sent to analytics and purchase services
• Onboarding answers: Firebase Analytics receives the option you select for usage frequency and duration, viewing history, triggers, social platforms, feelings, escalation, past attempts, age range, goals, and a coarse last-use bucket. We use this to understand how people move through onboarding and improve it. We do not send your name or a precise last-use date to Firebase.
• Intake recovery category: Firebase Analytics and Adapty receive a category derived from your onboarding habit-history answers. We use it to understand aggregate audience cohorts and paywall performance. This category is not the dynamic level shown in the app.
• App feature interactions: Firebase Analytics receives fixed labels when you open Home information such as stats or quotes, start the relapse or urge-log flow, or use the Panic Button. Panic events include the fixed entry source, intervention buttons selected, and whether the breathing timer completed. We do not send the contents of a relapse or urge log, selected triggers or feelings, journal text, dates, app names, locations, recovery record IDs, or session IDs.
• Purchase and paywall activity: which paywall was shown, which subscription product you selected, and whether a purchase, restore, or trial succeeded or failed. This goes to Firebase Analytics and Adapty.
• Purchase receipts: when you subscribe, Apple or Google processes the payment and Adapty validates the store receipt. We never see or store your card details — payment is handled entirely by the App Store or Google Play.
• Crash reports: if the app crashes, Firebase Crashlytics sends a technical report (stack trace, device model, OS version, app version) so we can fix bugs.
• Automatic analytics data: Firebase Analytics automatically collects device model, operating system version, coarse region (derived from IP address), session information, and a random app-instance identifier.
• Advertising measurement (Meta): when the app is installed and opened, and when a trial or subscription starts, renews or ends, this is shared with Meta Platforms so we can see which of our ads bring people to Rebooted. On iOS it carries your device's advertising identifier only if you allow tracking when the app asks; otherwise an anonymous app ID. On Android it carries the Android advertising ID, which you can reset or delete in your phone's settings. Your recovery records, onboarding answers and journal are never shared with Meta.
• Identifiers: your anonymous account ID, the Firebase app-instance identifier and Meta's anonymous app ID are shared with Adapty so your subscription status, analytics and ad measurement can be matched to the same anonymous profile.
Detailed information stored only on your device
The following detailed records are stored locally and are not uploaded to our servers or analytics and purchase providers:
• Your streaks and recovery cycles, including their dates and durations.
• Relapse logs, including whether one was recorded, its date, triggers, context, and any journal text you write.
• Urge-session records, commitments, and breathing settings. The fixed-category feature interactions described above do not include these records or settings.
• Challenges, including your daily answers and any reflection you write after a slip.
• Your "why" (the reason you wrote for quitting) and any photo you add to the mirror card.
• The apps and websites you choose to block. On iOS, Apple's Screen Time keeps this choice on your device; we never see which apps you picked.
Your complete onboarding answers are also stored locally so the app can personalize your experience. Selected answers and the derived intake recovery category are sent to the providers described above. If you delete the app, local data is deleted with it.
Information we do NOT collect
• No email address, phone number, or contacts (unless you email us yourself).
• No precise location.
• No photos or camera recordings — the "mirror" feature shows a live camera preview on your screen only and nothing is recorded or transmitted. A photo you choose to add to the mirror card is saved only on your device and never uploaded.
• No ads inside the app. Advertising identifiers are used only to measure our own ads, as described above.
2. How We Collect Information
• Directly from you: your name and quiz answers during onboarding, content you enter in the app, what you post in the community, and feedback you choose to send.
• Automatically: analytics events, crash reports, and device information via the Firebase, Adapty and Meta SDKs.
• From the app stores: purchase and subscription receipts from Apple App Store or Google Play.
3. How We Use Information
• To provide the app: keep your anonymous account, restore your name, and unlock premium features you've purchased.
• To run the community: show your posts and replies to other members, send you notifications about reactions and replies, and act on reports to keep the community safe.
• To read your feedback: our team reads feedback you choose to send to improve the app and to grant the promised free month through our subscription provider.
• To understand usage in aggregate: analyze onboarding choices and progression, see which Home and Panic features are used, see how many people reach the paywall, complete purchases, or start trials, and improve the app.
• To fix problems: crash reports tell us when and where the app breaks.
• To manage subscriptions: validate purchases and restore them across reinstalls.
• To measure our own ads: see which ads bring people to install Rebooted and start a trial.
We never use your recovery records for advertising, and we do not sell or rent your data to anyone. The limited data described above is shared with Meta only to measure our own ads.
4. Legal Basis for Processing (GDPR)
If you are in the European Economic Area or the UK, we process your data on these bases:
• Performance of a contract: your anonymous account, name, purchase data, and your community content and notifications are needed to provide the app, the community and your subscription.
• Legitimate interests: aggregate analytics and crash reporting to maintain and improve the app, measuring our own advertising, and moderating the community.
• Consent: on iOS, your device's advertising identifier is shared with Meta only if you allow tracking when the app asks. Feedback answers are sent only when you choose to send them, and push notifications only when you allow them.
5. Data Sharing and Third-Party Services
We share data only with the service providers that make the app work:
• Supabase — Anonymous accounts and database. Receives: Anonymous account ID, first name, timestamps, community content, push tokens and notification records, feedback answers you send. Privacy policy: https://supabase.com/privacy
• Expo — Delivering push notifications. Receives: Your push token and the notification's title and text. Privacy policy: https://expo.dev/privacy
• Google Firebase (Analytics, Crashlytics) — Usage analytics and crash reporting. Receives: Selected onboarding-answer categories, derived intake recovery category, fixed-category app feature interactions, purchase events, device info, crash reports, app-instance ID. Privacy policy: https://firebase.google.com/support/privacy
• PostHog — Product analytics, feature flags and error reporting. Receives: The same usage events as Firebase (selected onboarding-answer categories, derived intake recovery category, fixed-category app feature interactions, purchase events), anonymous account ID, app open/close events, error reports, diagnostic logs that contain no personal content, device info, app version, IP address and approximate location derived from it. Processed in the United States. Privacy policy: https://posthog.com/privacy
• Adapty — Subscription management; sends trial and subscription events to Meta. Receives: Purchase receipts, paywall events, derived intake recovery category, anonymous IDs. Privacy policy: https://adapty.io/privacy
• Meta Platforms (Meta SDK) — Measuring our own ads. Receives: App installs and opens, trial and subscription events (sent by Adapty), advertising identifier (on iOS only with your permission) or anonymous app ID, device and app info, IP address. Privacy policy: https://www.facebook.com/privacy/policy/
• Apple App Store / Google Play — Payment processing. Receives: Payment details (handled entirely by them). Privacy policy: https://www.apple.com/legal/privacy/ / https://policies.google.com/privacy
We may also disclose information if required by law, such as in response to a valid legal request.
6. International Data Transfers
Our service providers may process data on servers located outside your country, including in the United States. Where required, these providers rely on safeguards such as Standard Contractual Clauses or equivalent mechanisms. Details are available in each provider's privacy policy linked above.
7. Data Retention
• Account data (name, anonymous ID): kept while your account exists; deleted when your account is deleted.
• Community content: your posts, replies, reactions, hearts, reports and blocks are kept while your account exists and deleted with it. Posts or replies that break the community rules may be hidden or removed earlier.
• Push tokens and notification records: kept while your account exists and deleted with it. A push token is also dropped once your phone stops accepting notifications.
• Feedback answers: kept while your account exists and deleted with it.
• Analytics data: retained by Firebase Analytics for up to 14 months, then automatically deleted or aggregated.
• Crash reports: retained by Crashlytics for 90 days.
• Advertising measurement data: retained by Meta under its own privacy policy.
• Purchase records: retained as long as needed to manage your subscription and meet legal (e.g., tax and accounting) obligations.
• On-device data: stays on your phone until you uninstall the app. This includes detailed recovery records and complete onboarding answers. Firebase Analytics may retain selected answer categories, the derived intake recovery category, and fixed-category app feature interactions; Adapty may retain the category and subscription data, as described above.
8. Your Rights
Depending on where you live, you have the right to:
• Access the data we hold about you.
• Delete your data ("right to be forgotten").
• Correct inaccurate data.
• Restrict or object to certain processing.
• Data portability — receive a copy of your data in a usable format.
• Lodge a complaint with your local data protection authority (EEA/UK).
California residents (CCPA/CPRA): you have the rights to know, delete, and correct your personal information, and to opt out of the sale or sharing of personal information. We do not sell your personal information. We share a device identifier and app install, open and subscription events with Meta to measure our ads, which California law may treat as "sharing". To opt out, choose "Ask App Not to Track" on iOS, delete or reset your advertising ID in your Android settings, or email us. We do not discriminate against you for exercising your rights.
To exercise any of these rights, email ibraindump.dev@gmail.com from any address and include your request. Because accounts are anonymous, we may ask you for information from your device (shown in the app) to locate your account. We respond within 30 days.
To delete your account and all associated data, open Settings → Delete account in the app. This immediately deletes your account and everything stored with it on our servers (name, community content, push tokens, notifications and feedback answers) and erases the data on your device. You can also email us at ibraindump.dev@gmail.com and we will remove your data from our servers and process erasure of analytics and subscription-profile data at our providers (Firebase, Adapty).
9. Security
• All data is transmitted over encrypted connections (HTTPS/TLS).
• Server data is protected by access rules so that only your own account can read your data. Community posts and replies are the exception: other community members can read them, along with the display name and any streak you chose to show.
• We keep detailed recovery records, journal entries, and precise last-use dates on your device. Selected onboarding-answer categories, a derived intake recovery category, and the fixed-category app feature interactions described above are transmitted to the service providers identified above.
No system is 100% secure. We design the app to keep detailed recovery records, journal entries, and precise last-use dates on the device, while the selected onboarding and app interaction data described above is handled by our service providers.
10. Children's Privacy
Rebooted is intended for adults and is not directed at children under 18. We do not knowingly collect personal information from children. If you believe a child has used the app and provided personal information, contact us at ibraindump.dev@gmail.com and we will delete it.
11. Changes to This Policy
If we make material changes, we will update the "Last updated" date above. Continued use of the app after changes take effect means you accept the updated policy.
12. Contact
Branchout
Email: ibraindump.dev@gmail.com
We aim to respond to all privacy inquiries within 30 days.