Effective Date: September 4, 2026 Last Updated: September 4, 2026
Washington’s My Health My Data Act, Nevada’s consumer health data law, and Connecticut’s health data provisions require companies handling health-related information to publish a separate policy explaining exactly how that information is handled. This is that policy.
It sits alongside our general Privacy Policy, which covers everything else. Where the two overlap, this document controls for consumer health data.
Reform is operated by Reform LLC, an Illinois limited liability company (“we,” “us,” “our”).
Reform helps people reduce or stop compulsive pornography use. Under these laws, information about that — your progress, your setbacks, your triggers, what you write about it, and even the fact that you use the App at all — is consumer health data.
Some companies in this category argue their way out of these laws. We are not doing that. We have written this policy on the assumption that everything Reform touches is consumer health data and should be treated accordingly.
The most important thing to understand about Reform is that we built it so we would not have your health data in the first place. Nearly all of it never leaves your phone, and we operate no backend server that stores any of it. What follows explains exactly where the line is.
The following is created by you and stored in a local database on your device. It is never transmitted to us. We have no technical ability to access it, read it, or retrieve it.
| Category | What it includes |
|---|---|
| Recovery status | Quit date, current and historical streak, relapse events you record |
| Check-ins | Daily check-in history and responses |
| Journal content | Journal entries, written reasons for quitting, photos you add |
| Onboarding responses | What you want to change, your triggers, your support system, your definition of success |
| Urge and trigger data | Which trigger you selected during panic/urge support, and when |
| Setback data | Whether you resisted or had a setback during a tracked urge |
| Milestones | Badges and achievements earned |
| Content blocking selection | Which apps and categories you chose to restrict — stored by Apple as a token our code cannot read |
Our position, stated plainly: because this information never reaches us and we cannot access it, we do not collect, receive, process, share, or sell it within the meaning of these laws. We describe it here anyway, in full, so that you know what the App holds on your own device even though we do not have it.
If you delete the App, this data goes with it. We hold no copy, so there is nothing for us to delete on our end and nothing for us to disclose to anyone.
There is exactly one category, and it applies to every user: your subscription record.
Reform requires a paid subscription. The fact that you subscribe to Reform indicates something about your health, because of what the App is for. We therefore treat your subscription record as consumer health data, even though it contains no journal content, no recovery history, and nothing else about how you use the App.
| Category collected | Source | Purpose |
|---|---|---|
| Subscription status, purchase and renewal events, trial status | Apple, via RevenueCat | To confirm you have access to the App you paid for |
| App user identifier, device identifier, device and app version, country | Your device, via RevenueCat | To associate the subscription with your installation |
We collect this because there is no way to operate a paid app without knowing who has paid. We collect nothing else from any user, in any circumstance, in v1 of the App.
We are stating these as commitments, not as descriptions of current practice.
There is exactly one: Apple, via RevenueCat — your subscription and purchase status.
Everything else Reform touches (your journal, triggers, streaks, and everything else in Section 2) is created by you, stays on your device, and never reaches us — so it is not “collected” within the meaning of these laws at all. We do not obtain consumer health data from data brokers, advertising networks, public records, social media, other apps, or any other third party. We do not derive or infer consumer health data from non-health information.
| Recipient | Category received | Role | Restrictions |
|---|---|---|---|
| RevenueCat | Section 3 data | Processor — subscription management | Bound by written contract to process only on our instructions and only to provide the service; may not use it for its own purposes, may not sell it, must delete on our instruction |
| Apple | Purchase and billing data | Independent controller for App Store transactions | Governed by Apple’s own privacy policy |
That is the complete list. We have no affiliates. We share consumer health data with no one else, for any reason, except as described in Section 9 (legal process).
RevenueCat is a processor, which means it acts only on our instructions under a binding written contract, as these laws require. It is not permitted to use your information for its own purposes.
The subscription data in Section 3 is collected because it is strictly necessary to provide the paid service you requested — it is not collected on the basis of separate opt-in consent, because there is no way to provide a paid subscription without it.
For sharing. We do not share your consumer health data with third parties beyond RevenueCat and Apple as described in Section 6, so we do not seek consent to do so. If that ever changes, we will request separate, specific consent first. Disclosure to RevenueCat is a processor relationship, not sharing, and is limited to what is necessary to run the App.
There is no consent-based collection to withdraw in v1 — because subscription verification isn’t optional for a paid app, there’s nothing to opt out of short of cancelling the subscription itself, which you can do at any time (see the Terms of Service, Section 6.5).
You have the following rights regarding consumer health data. We extend them to every user, not only residents of states that require them.
Confirm whether we collect, share, or sell your consumer health data, and get a copy. You can export everything on your device instantly from Settings → Export. For your subscription record, email us.
Get a list of all third parties and affiliates with whom we have shared or sold your consumer health data, including active contact information for each. Section 6 above is that list, and it is current. Here is the contact information the law requires us to give you:
| Recipient | Contact |
|---|---|
| RevenueCat, Inc. | privacy@revenuecat.com |
| Apple Inc. | apple.com/legal/privacy/contact |
Not applicable to what we currently collect. As described in Section 7, the only consumer health data we collect — your subscription record — is necessary to provide the paid service, not consent-based. There is nothing to withdraw short of cancelling your subscription.
Have your consumer health data deleted. When you make a deletion request about your subscription record, we will:
Two honest limits. We cannot delete your subscription record while your subscription is active, because that record is what tells the App you have access — cancel first, or ask us to delete it after your subscription ends. And we may be required to retain a minimal transaction record for tax, accounting, or dispute purposes; if that applies to your request, we will tell you exactly what is being kept and why.
For everything else: delete the App. All on-device data goes with it. You do not need our permission or our help.
Email support@reformapp.org with “Health Data Request” in the subject line.
We will not ask you to identify yourself. We do not know who you are and we are not going to start now in order to process a privacy request. There is no account. For a request about your subscription record, we will ask you for the app user identifier shown in Settings → About, which lets us find that record without learning who you are. We will never require identity documents.
Timing: we respond within 45 days. If we need more time, we will tell you within that period and may extend once by 45 days.
No charge, and no discrimination — exercising any of these rights will never affect your subscription, your price, or your access.
If we deny a request, we will explain why in writing and tell you how to appeal.
To appeal: reply to our response, or email support@reformapp.org with “Appeal” in the subject line. We will respond within 45 days with a written explanation of our decision.
If we deny your appeal, you may submit a complaint to your state Attorney General:
We require valid legal process before disclosing consumer health data, we will narrow or challenge demands that are overbroad or defective, and we will notify you before disclosing anything unless we are legally prohibited or there is an emergency risk of serious harm.
Practically, there is very little for anyone to obtain. Your journal, check-ins, triggers, and blocking selections are on your device and we hold no copy. A subpoena to us would produce nothing responsive beyond a subscription record, because we never collected anything else.
We use access controls and encryption in transit for the limited subscription information described in Section 3. Your app PIN is stored in your device’s secure enclave.
The strongest protection is architectural: the overwhelming majority of your consumer health data is never sent to us at all. It cannot be breached at our end because it is not there.
| Data | Retention |
|---|---|
| On-device data (Section 2) | Held by you, on your device, until you delete it. We hold no copy. |
| Subscription records (Section 3) | As required for tax, accounting, and dispute purposes, then deleted |
If we materially change how we handle consumer health data, we will notify you in the App before the change takes effect, and we will obtain your consent where these laws require it rather than relying on your continued use. We will not apply a material change retroactively to data already collected without your consent.
Reform LLC An Illinois limited liability company support@reformapp.org
Subject line “Health Data Request” for rights requests, “Appeal” for appeals.