Privacy policy
Last updated 19 September 2026
Reclaim is an app for tracking recovery from compulsive pornography use. What you record in it is sensitive, and this policy is written to be specific about it rather than to cover us with generalities. It describes exactly what is collected, where it goes, and what you can do about it.
The short version. Your entries are stored in your account and used to show you your own history. They are never sold, never used for advertising, and never shared with anyone beyond the service providers listed below. You can export everything or delete everything from inside the app, at any time, without asking us.
Who we are
Reclaim is operated by the developer of the app, contactable at harshlohia26@gmail.com. For privacy questions, use the same address.
What Reclaim collects
Information you give us
| Data | Why |
|---|---|
| Email address | To create and sign you into your account, and to send a password reset if you ask for one. |
| First name or nickname (optional) | To greet you in the app. You can leave it blank. |
| Your reason for starting | Shown back to you in the app on the days it is hard to remember. |
| Streak start date, goal, known triggers | To run the counter and tailor what the app shows you. |
| Resets you log — time, type, triggers, mood, notes | To build your history and your pattern analysis. |
| Urges you log — time, intensity, trigger, what you did | Same. |
| Daily check-ins — mood, energy, sleep, urge level, notes, habits | To chart trends over time. |
| Journal entries — title and body | Stored so you can read them back. Nothing analyses or scans them. |
| Program progress — which of each day's tasks you marked done, and when | To show you where you are in the 90 days and keep your place across devices. |
| Lessons you have completed | To track your progress through the twelve lessons. |
| Your if-then plans — the situation you name and the action you choose | Shown back to you during an urge, and after a reset. Written by you, read only by you. |
| What you write after a reset — what happened before, what you needed, what you will change | Kept so the app can show you your own pattern over time. |
Your if-then plans and what you write after a reset are among the most personal things in the app. They are stored in your account under the same rules as everything else: never shared, never analysed, never used for anything except showing them back to you.
Your password is handled by Google Firebase Authentication and is never visible to us.
Information collected automatically
If the app crashes, a diagnostic report is sent through Firebase Crashlytics. It contains the error, a stack trace, your device model, operating system version and a random identifier for your account. It never contains anything you have written — no journal text, no notes, no entries.
Your subscription status is held by RevenueCat, which receives your account identifier and details of the purchase from the app store. Google Play or Apple confirm to RevenueCat whether a subscription is active; neither they nor RevenueCat receive anything you have written in the app.
If you allow notifications, reminder times are stored on your device and scheduled by it. The reminders contain no personal detail — they say only that it is time to check in.
What Reclaim does not collect
- No advertising identifiers, and no advertising of any kind.
- No location data.
- No contacts, photos, browsing history or usage of other apps.
- No third-party analytics or tracking software.
- No payment card details — those go directly to Google Play or Apple, and we never see them.
Where your data is stored
Account details and everything you log are stored in Google Cloud Firestore, in Google's asia-south1 region (Mumbai, India), encrypted in transit and at rest. Diagnostics are processed by Firebase Crashlytics and subscription records by RevenueCat, both of which may process data outside your country.
Who it is shared with
We do not sell your data and we do not share it for advertising. It is shared only with the providers needed to run the app:
| Provider | What they receive |
|---|---|
| Google Firebase | Your account and everything you log. Acts as our database and sign-in provider. |
| Firebase Crashlytics | Crash diagnostics and device information. |
| RevenueCat | Your account identifier and subscription status. |
| Google Play / Apple | Handle your payment. We receive only whether a subscription is active. |
We may also disclose data where the law genuinely requires it. If that ever happens and we are permitted to tell you, we will.
How long it is kept
Everything is kept until you delete it. Deleting your account removes your profile, streak history, resets, urges, check-ins, journal entries, program progress, lesson history, if-then plans and reset reflections from our database immediately and permanently. It cannot be undone and we cannot recover it for you afterwards.
Deleting your Reclaim account does not cancel a paid subscription. Billing is handled by Google Play or Apple and continues until you cancel it in your store account settings. Your subscription record is also held by RevenueCat and by the store for their own accounting obligations.
Crash diagnostics are retained by Firebase Crashlytics on its own schedule, typically around 90 days. Subscription records may be kept by RevenueCat and the app stores for their own accounting and legal obligations.
Your rights
- See and export everything. Settings → Export everything gives you a complete JSON file of your data.
- Delete everything. Settings → Delete account erases it permanently. You can also request deletion here if you cannot open the app.
- Correct it. Every entry can be edited or removed in the app.
- Withdraw consent. Delete your account and the processing stops.
Depending on where you live you may have additional statutory rights, including under the GDPR in the UK and EU and the DPDP Act in India. Write to us at the address above and we will honour them.
Children
Reclaim deals with adult subject matter and is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.
Security
Data is encrypted in transit and at rest. Access rules on the database are enforced per account, so one account cannot read another's data under any circumstances. The app offers an optional fingerprint or face lock for the app itself. No system is perfectly secure, and we will not pretend otherwise — but if a breach ever affects your data we will tell you promptly.
Changes to this policy
If this policy changes in a way that materially affects you, we will update the date at the top and notify you in the app before the change takes effect.