Dopamine Detox: Life Reset
Effective 9 August 2026 · Last updated 9 August 2026
Dopamine Detox is built to be local-first. Your journal entries, photos, check-ins, cravings, quests, XP, and your "why" never reach a server we operate. They live on your device, and — if you're signed into iCloud — sync privately between your own Apple devices through your personal iCloud account, where we cannot see them.
We don't run analytics. We don't use advertising or tracking SDKs. We don't sell your data, and there is nobody to sell it to.
The only things that reach a server of ours are the ones that have to: your account credentials, so you can sign in on a new phone, and your purchase status, so your subscription follows you.
Dopamine Detox is published by Casey Millstein ("we", "us"). You can reach us at cmillstein1@me.com about anything in this policy.
Almost everything. The following is stored in the app's private storage on your iPhone — and, when iCloud is available, in your own private iCloud database. It is never transmitted to us:
Some of this is also written into a shared container on your device so the home-screen and Lock Screen widgets can display it. That container is part of the app and does not leave your phone.
If you're signed into iCloud, the app keeps this content in the private database of your own iCloud account, so it survives a lost phone and appears on your other Apple devices automatically. This is Apple's CloudKit, and the important detail is who holds it: it sits in your iCloud, under your Apple ID, governed by Apple's privacy policy. We have no access to it. There is no dashboard where we could read your journal, and no server of ours it passes through.
Sync is on by default because losing years of entries with a dropped phone is the worse outcome. To turn it off, switch off iCloud for Dopamine Detox in iOS Settings → your name → iCloud; the app then keeps everything on the device only. If you're not signed into iCloud at all, the app simply works locally.
If you delete the app, the on-device copy goes with it. Anything synced remains in your iCloud until you remove it there — Apple explains how at https://support.apple.com/en-us/102428.
We use Supabase Auth to handle sign-in. When you create an account we send:
If you use Sign in with Apple, we receive an identity token from Apple and exchange it for a session. Apple shares your name and email only the first time you authorise, and only if you allow it. If you choose Apple's Hide My Email, we only ever see the relay address.
Supabase is our data processor for authentication and stores this on our behalf. Beyond authentication we use no Supabase database and no file storage, so none of your detox content is ever uploaded there. The single server function we run exists only to delete accounts when you ask us to; it reads nothing and stores nothing.
Subscriptions and one-time purchases are processed by Apple. We never see your payment details; Apple does not share them with us.
We use RevenueCat to check whether your subscription is active. When you're signed in, we give RevenueCat your Supabase account identifier so your purchase follows you across devices and reinstalls. RevenueCat receives purchase and subscription events from Apple, along with device and app identifiers it generates itself. It does not receive any of your detox content.
There is nothing else. No analytics, no crash reporting, no advertising identifiers, no attribution or marketing SDKs, no social logins beyond Apple, no third-party trackers. We do not ask for App Tracking Transparency permission because we do not track you.
Screen Time (Family Controls). Used to block the apps and categories you choose during a detox. Apple's framework hands us opaque tokens rather than app identities — the app genuinely cannot tell which apps you picked, only that you picked something. Your selection is stored on your device and is never transmitted.
Photos. Only used when you choose a photo to attach to a journal entry or a quest. The picker runs outside the app, so we only receive the specific image you select. It's stored on your device.
Notifications. All reminders are scheduled locally on your phone. Nothing about your habits is sent to a server to generate them, and we have no push notification infrastructure.
Motion. The app reads device tilt to animate the Dopamine Battery. Those readings are used for the animation in the moment and are never stored, logged, or transmitted.
Dopamine Detox is not directed to children under 13, and we don't knowingly collect information from them. If you believe a child has created an account, email us and we'll delete it.
Your account record lives with Supabase until you delete it, which you can do yourself at any time from inside the app. Deletion is immediate and permanent — we keep no archived copy and no backup we could restore you from. Purchase records are retained by Apple and RevenueCat under their own policies. On-device data lives on your device until you delete it or remove the app.
Delete your account, from inside the app. Settings → Delete My Account. This permanently deletes your account from our authentication system and erases everything on the device in the same step — your profile, memories, photos, XP, streaks, and history — along with what the widgets display, your scheduled reminders, and your blocked-app selection. If iCloud sync is on, the erase applies to your synced copy too, and therefore to your other devices.
There is no undo and no copy for us to restore. If the deletion can't be completed — you're offline, for instance — we tell you so and leave your data untouched, so you're never left with your content erased and your account still live.
If you're not signed in, the same button reads Delete All My Data and clears everything on the device.
Deleting your account does not cancel a subscription, because Apple manages billing and we can't touch it. Cancel in your Apple ID settings, and request any refund through Apple.
Access, correct, or export. Almost everything is already on your device and visible in the app. For the account data Supabase holds, email us and we'll provide or correct it.
Withdraw permissions. Screen Time, Photos, and Notifications can each be turned off in iOS Settings at any time. The detox keeps working in self-guided mode without Screen Time access.
Depending on where you live — for example under the GDPR in the UK/EEA, or the CCPA/CPRA in California — you may have additional rights to access, correct, delete, port, or restrict processing of your personal information, and to object to it. We honour these requests regardless of where you live. We do not sell or share personal information as those terms are defined under California law, and we never have.
Our lawful bases under the GDPR are: performance of a contract (providing your account and subscription), and legitimate interests (keeping the service working and secure).
Supabase, RevenueCat, and Apple may process data in countries other than yours, including the United States. Where required, transfers out of the UK/EEA rely on Standard Contractual Clauses or another approved safeguard.
Traffic to Supabase and RevenueCat uses HTTPS. Your session is stored in the iOS Keychain. On-device content is protected by iOS file-level encryption and your device passcode; synced content is protected by Apple's iCloud encryption under your Apple ID. No system is perfectly secure, but the strongest protection here is structural: the sensitive material — what you wrote, what you photographed, what you struggled with — never reaches a server we run, so there is no database of ours that could be breached to expose it.
| Who | What they get | Their policy |
|---|---|---|
| Supabase | Email, password hash, optional name | https://supabase.com/privacy |
| RevenueCat | Purchase events, your account identifier, device identifiers | https://www.revenuecat.com/privacy |
| Apple | Payment and subscription processing; Sign in with Apple; iCloud sync of your own content, held in your account and not readable by us | https://www.apple.com/legal/privacy/ |
If we change this policy we'll update the date above, and we'll tell you in the app before anything materially different takes effect.
cmillstein1@me.com
Casey Millstein