Privacy Policy

Last Updated: May 18, 2026

Introduction

This Privacy Policy describes how Lust Reboot ("we", "us", "our") collects, uses, discloses, and protects your personal information when you use the Lust Reboot mobile application and related services (the "App"), which is designed to help users overcome pornography and related compulsive behaviors. By installing or using the App, you acknowledge that you have read and understood this Privacy Policy.

This policy is designed to comply with the EU General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), the Children's Online Privacy Protection Act (COPPA), Google Play and Apple App Store data-safety requirements, and Google AdMob's publisher policies.

1. Information We Collect

1.1 Authentication Data

When you sign in using Clerk, we collect your email address, a unique user identifier, and account credentials so we can give you secure access to your account.

1.2 Sensitive Usage & Recovery Data

Entries, check-ins, mood logs, triggers, relapse events, streak data, and journal reflections are collected to provide personalized progress tracking and support. This information is treated as sensitive health-related data.

1.3 Device & Technical Data

We (and our advertising partners) collect technical information including: device model and manufacturer, operating system and version, language and region, mobile network information, crash logs, app version, time zone, screen size, IP address (truncated where possible), and general diagnostics used to improve security and performance.

1.4 Advertising Identifiers

If you have not opted out, the App may collect your Google Advertising ID (AAID) on Android or, on iOS, the Identifier for Advertisers (IDFA) where you have granted App Tracking Transparency permission. These are resettable, pseudonymous identifiers used by Google AdMob and its certified ad partners to deliver and measure ads.

1.5 Ad Interaction & Approximate Location

When ads are served in the App, our advertising partners may collect ad impressions, clicks, view-time, and approximate (city/region-level) location derived from your IP address. We do not collect precise GPS location for advertising purposes.

1.6 In-App Purchases

Billing details for purchases are processed directly by Google Play or Apple's App Store. We receive only a transaction confirmation and entitlement status — we never store your full payment card number.

2. How We Use Your Information

  • To authenticate you and operate core App features (streak tracking, journaling, check-ins).
  • To personalize content, reminders, and recommendations for your recovery journey.
  • To process purchases and manage subscriptions.
  • To diagnose crashes, debug issues, and improve performance and security.
  • To display advertisements through Google AdMob (see Section 5) and to measure ad performance.
  • To comply with legal obligations and enforce our Terms & Conditions.

Your sensitive recovery data (journal entries, relapse logs, mood data, trigger logs) is never used for advertising, is never sold, and is never shared with advertisers or insurance providers.

3. Legal Bases for Processing (GDPR / UK GDPR)

If you are in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following lawful bases under Article 6 (and where applicable Article 9) of the GDPR:

  • Consent (Art. 6(1)(a)) — for personalized advertising, optional analytics, and processing of sensitive recovery data.
  • Contract (Art. 6(1)(b)) — to provide the App, authenticate you, and fulfill purchases.
  • Legitimate interests (Art. 6(1)(f)) — to secure the service, prevent fraud, debug, and serve limited, non-personalized advertising.
  • Legal obligation (Art. 6(1)(c)) — to comply with applicable law, tax, and accounting obligations.
  • Explicit consent (Art. 9(2)(a)) — for processing of health-related/sensitive data you provide voluntarily in journals and trackers.

You may withdraw consent at any time using the in-app Privacy Settings, without affecting the lawfulness of processing carried out before withdrawal.

4. How We Share Your Information

We share personal data only with the categories of recipients listed below, and only to the extent necessary:

  • Clerk — authentication and account management.
  • Supabase — encrypted database hosting for account and journal data (EU/US regions).
  • Google AdMob and its certified ad technology providers — to serve, frequency-cap, and measure advertisements (see Section 5).
  • Google Play / Apple App Store — to process in-app purchases and subscriptions.
  • Crash & diagnostic services — to investigate technical issues.
  • Legal authorities — when required by law, subpoena, court order, or to protect the rights, property, or safety of users.

We do not sell your personal information for money. For the meaning of "sale" and "share" under California law, see Section 7.

5. Advertising & Google AdMob

The App is monetized in part through advertisements delivered by Google AdMob, a service provided by Google LLC and its affiliates. Google's use of data is governed by the "How Google uses information from sites or apps that use our services" page and the Google Privacy Policy.

5.1 What Data Is Used For Advertising

  • Advertising identifier (AAID on Android, IDFA on iOS where permitted).
  • IP address (truncated where required by law).
  • Approximate, non-precise location derived from IP.
  • Device and ad-event information (impression, click, viewability, time spent).
  • General app information (package name, app version).

We do not transmit your email, name, journal content, mood, trigger, or relapse data to AdMob or any ad partner.

5.2 Personalized vs. Non-Personalized Ads

Where personalized advertising is enabled, Google and its certified partners may use the data above to show you ads based on inferred interests and prior interactions. Where you opt out (or where required by law in your region), the App requests non-personalized ads, which use only contextual signals (such as the content of the App and approximate location) and basic frequency capping.

5.3 Google's Certified Ad Technology Providers

Google works with a list of certified Ad Technology Providers (ATPs) that may receive limited data to serve ads. The current list is published by Google here: https://support.google.com/admob/answer/9012903.

5.4 Consent & Choices for Advertising

  • EU/UK/Swiss users: On first launch (and whenever you reset your choice in Privacy Settings) the App displays a Google-certified consent message via the Google User Messaging Platform (UMP), allowing you to consent to or refuse personalized ads under the IAB Transparency & Consent Framework v2.
  • iOS users: We will only request the IDFA after presenting Apple's App Tracking Transparency prompt. If you choose "Ask App Not to Track," we will request non-personalized ads only.
  • All users: You can reset your advertising ID at any time in your device settings (Android: Settings → Google → Ads; iOS: Settings → Privacy & Security → Apple Advertising) and opt out of personalized ads at adssettings.google.com and aboutads.info/choices (DAA) or youronlinechoices.eu (EDAA).

6. GDPR Rights (EU / UK / EEA / Switzerland)

If you are located in the EEA, United Kingdom, or Switzerland, you have the following rights under the GDPR and UK GDPR:

  • Right of access — to obtain a copy of the personal data we hold about you.
  • Right to rectification — to correct inaccurate or incomplete data.
  • Right to erasure ("right to be forgotten") — to request deletion of your data.
  • Right to restrict processing — to limit how we use your data.
  • Right to data portability — to receive your data in a structured, machine-readable format.
  • Right to object — including to processing based on legitimate interests and to direct marketing.
  • Right to withdraw consent — at any time, where processing is based on consent.
  • Right to lodge a complaint — with your local supervisory authority (or the UK ICO at ico.org.uk).

To exercise any of these rights, email support@Lustrebootapp.com. We will respond within 30 days. We do not currently transfer EEA personal data outside the EEA other than to providers that rely on EU Standard Contractual Clauses or equivalent safeguards.

7. California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have the following rights under the CCPA, as amended by the CPRA:

  • Right to know what categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of third parties with whom we share it.
  • Right to delete personal information we have collected (subject to legal exceptions).
  • Right to correct inaccurate personal information.
  • Right to opt out of "sale" or "sharing" of personal information.
  • Right to limit use of sensitive personal information.
  • Right to non-discrimination for exercising your privacy rights.

"Sale" and "Sharing" of personal information: We do not sell your personal information for monetary value. However, under the broad CCPA definitions, our use of cookies and advertising identifiers to deliver cross-context behavioral advertising via Google AdMob may be considered "sharing" of personal information. The categories involved are: identifiers (advertising IDs, IP address), internet/network activity (ad interactions), and inferences for advertising.

Do Not Sell or Share My Personal Information: California residents can opt out of this sharing at any time in Settings → Privacy → Do Not Sell or Share My Personal Information inside the App, or by emailing support@Lustrebootapp.com with the subject line "CCPA Opt-Out". We also honor the Global Privacy Control (GPC) signal where technically feasible.

Sensitive Personal Information: We use sensitive personal information (such as your journal entries and recovery logs) only to provide the App's features. We do not use or disclose sensitive personal information for purposes that require a "right to limit" under the CPRA.

Authorized agents: You may designate an authorized agent to make a request on your behalf with signed written permission.

8. Children's Privacy (COPPA & "Families")

The App is not directed to children under 18. We do not knowingly collect personal information from children under 13. The App is tagged in Google AdMob and the Apple App Store as not primarily child-directed, and we do not use the AdMob "tag-for-child-directed-treatment" (TFCD) or "tag-for-under-age-of-consent" (TFUA) flags for general users; however, we configure ad requests so that no behaviorally targeted ads are served when a user indicates they are a minor. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

9. Cookies & Similar Technologies

The mobile App does not use browser cookies. It does use comparable technologies including local storage, SDK-level identifiers (Clerk session tokens, Supabase auth tokens), and the advertising identifiers described in Section 1.4. The App's web pages (such as this one) may use only strictly-necessary cookies.

10. Data Security

  • Data is encrypted in transit using TLS 1.2 or higher and at rest using industry-standard algorithms.
  • Supabase Row-Level Security ensures that only you can access your own records.
  • Access to production systems is limited to authorized personnel and audited.
  • We minimize the data we collect and pseudonymize identifiers where possible.

11. Data Retention

  • Account and journal data is retained while your account is active.
  • Upon deletion, account data is permanently removed from active systems within 30 days and from encrypted backups within 90 days.
  • Aggregated, de-identified data may be retained indefinitely.
  • Advertising logs held by Google AdMob are retained according to Google's own retention policy.

12. International Data Transfers

Your information may be processed in the United States, the European Union, and other countries where our providers operate. For transfers out of the EEA/UK, we rely on the European Commission's Standard Contractual Clauses (or the UK Addendum) and, where applicable, the EU-U.S. Data Privacy Framework.

13. Sensitive Content & App Safety

  • The App handles addiction- and pornography-related topics with care and offers privacy controls (such as discreet notifications) to prevent unwanted exposure.
  • User-generated content that is illegal or violates our Terms, Google Play, or App Store policies will be removed and, where required, reported to authorities.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced in-app and the "Last Updated" date at the top will be revised. Continued use of the App after changes take effect constitutes acceptance.

15. Contact & Data Controller

The data controller for your personal information is Lust Reboot App. For any privacy questions, requests, or to exercise your rights:

Email: support@Lustrebootapp.com
Subject lines we recognize: "GDPR Request", "CCPA Opt-Out", "Delete My Account", "Access Request".

Contact Form

← Back to Home