Effective Date: September 4, 2026 Last Updated: September 4, 2026
If you are in Washington, Nevada, or Connecticut, or you want to know specifically how we handle health-related information, please also read our Consumer Health Data Privacy Policy, which is a separate document required by law in those states.
Reform (the “App”) is operated by Reform LLC, an Illinois limited liability company (“we,” “us,” “our”). We are the controller of the limited information described in this policy.
This policy explains what the App collects, what it does not, who receives it, and what control you have. It applies to the Reform iOS app. Reform is currently available only in the United States.
The rest of this policy is the detail behind those statements.
The following is stored in the App’s local database on your device. Except as described in Section 5 (widget) and Section 10 (export), it is not transmitted to us or to anyone else, and we have no technical means of accessing it.
| Category | What it includes |
|---|---|
| Recovery tracking | Quit date, streak history, check-in history, grace/forgiveness usage, relapse events you log |
| Journal and reflection | Journal entries, written reasons for quitting, photos you add |
| Onboarding responses | What you want to change, your triggers, your support system, your definition of success |
| Trigger and urge data | The trigger you selected when using panic/urge support, and timestamps |
| Achievements | Badges and milestones earned |
| Setbacks | Whether you resisted or experienced a setback during a tracked urge |
| App lock | Your app PIN, if you set one — stored in the device’s secure enclave (Keychain), never on our servers |
We do not collect this information. It is created by you, stored by the App on hardware you control, and never sent to us. If you delete the App, it is deleted with it, except to the extent it is contained in a device backup you control (Section 9).
Much of what Reform handles relates to sexual and mental health. Under several laws this is sensitive personal information and consumer health data, and we treat it that way.
We use this information for one purpose only: providing the features you asked for. We do not use or disclose it for advertising, profiling, marketing, or any purpose you would not expect. Because we limit it to those purposes, the right to restrict use of sensitive personal information under California law is satisfied by default — there is no secondary use to restrict.
Our Consumer Health Data Privacy Policy covers this in the specific detail Washington, Nevada, and Connecticut law requires.
If you add the Reform widget, your current streak count and last check-in date are written to an App Group container — a storage area iOS keeps private to Reform and its widget extension. This stays on your device. It is not transmitted anywhere. It exists so the widget can display your streak and so the widget’s check-in and urge-support buttons can pass that action back to the App.
Reform’s content blocking uses Apple’s Screen Time frameworks (Family Controls, Managed Settings, Device Activity), applied by you, to your own device, at your own direction.
We never learn which apps or sites you chose to block. Apple’s design represents your selection as an opaque token that our code cannot read or reverse. We know that a selection exists. We do not know what is in it.
No information about which apps you use, which sites you visit, or how you use your device is transmitted off your phone. Where the App receives device activity events from Apple’s framework in order to apply or refresh a restriction, those events are processed entirely on your device and are not transmitted to us or retained beyond what is needed to keep the restriction working.
This information is never used for advertising, never shared with data brokers, and never shared with anyone for any purpose other than delivering this feature to you.
(Separately from privacy: content blocking has real limitations, including that it can be turned off at the operating system level outside the App. Those limitations are described in our Terms of Service.)
Reform requires a subscription, sold and billed by Apple.
We never receive your payment card information. Apple handles payment entirely.
We use RevenueCat to determine whether your subscription is active. To do that, RevenueCat receives:
RevenueCat does not receive your journal entries, recovery data, Screen Time information, or any content from inside the App. RevenueCat is the only server-side data relationship Reform has, for any user, for any reason.
One thing worth naming: the fact that you subscribe to Reform is itself information about you, because of what the App is. We treat your subscription record with the same care as the rest of your data, and RevenueCat is contractually restricted to processing it only to provide the service to us.
Reminder notifications are scheduled locally on your device by iOS. Scheduling and displaying them does not transmit anything about you to us or anyone else.
A note on lock screens. Notification text can appear on your lock screen where someone else might see it. If that is a concern, you can turn on discreet notifications in Settings, which uses neutral wording, or configure iOS to hide notification previews until unlocked.
If you back up your device to iCloud or a computer, your local Reform data may be included, like any other app’s data. That is standard iOS behavior and it means your data survives a device upgrade. We do not control it and cannot access it. It is governed by Apple’s policies, or your backup software’s. You can exclude Reform from iCloud backup in iOS Settings.
You can export everything at any time from Settings → Export — a PDF summary or a complete JSON file. The file is generated on your device and leaves it only if you send it somewhere yourself. We never receive a copy.
We do not sell your personal information. We do not share it for cross-context behavioral advertising. We do not disclose it to data brokers. We have never done any of these things and we do not intend to.
We disclose the limited information described in Section 7 only to:
| Recipient | What they receive | Why | Restriction |
|---|---|---|---|
| RevenueCat | Subscription and device identifiers (Section 7) | Subscription status | Contractually bound as a processor; may not use it for its own purposes |
| Apple | Purchase and billing data | Sale, billing, and delivery of the App | Independent controller under Apple’s own privacy policy |
We have no other recipients. If that ever changes, this table changes first, and we will notify you under Section 19.
| Information | Retention |
|---|---|
| On-device data (Section 3) | Until you delete it or delete the App. We hold no copy. |
| Subscription records (Section 7) | As long as required for tax, accounting, and dispute purposes, then deleted |
| Records of subscription terms | Consumer-protection law requires us to be able to show what subscription terms were presented to subscribers, and that agreement to them was affirmative. We keep records of the terms displayed in each version of the App, and the dates each version was available, for three years, or one year after a subscription ends, whichever is longer. These records describe what was shown to subscribers generally. They contain no journal entries, no recovery data, and nothing else about you. |
Delete individual entries in the App, or delete the App to remove all of it. There is no account and no server-side copy of your recovery data — deleting the App removes everything of yours that exists.
Your subscription record is held by Apple and RevenueCat and is governed by Section 12. If you want that record deleted, email us; note that we cannot delete it while a subscription is active, because it is what tells the App you have access.
We use reasonable technical and organizational measures, including access controls and encryption in transit, for the limited subscription information described in Section 7. Your PIN, if you set one, is stored in the device Keychain.
No system is perfectly secure and we cannot guarantee absolute security. Because virtually all Reform data never leaves your device, your device’s own security — passcode, Face ID, the App’s PIN lock — is the most important protection for your information.
If a breach affecting your information occurs, we will notify you and any regulator as required by applicable law, without unreasonable delay.
We think you should know exactly where you stand here, because for an app like this it matters.
We cannot produce what we do not have. Your journal entries, check-ins, triggers, and blocking selections are on your device. If we received a subpoena tomorrow demanding a user’s journal, we would have nothing responsive, because we never collected it. That is a deliberate design choice, not an accident.
For the limited information we do hold (Section 7):
We extend the rights below to every Reform user, regardless of where you live. Some are required by law in some states; we have chosen not to make you check.
| Right | What it means | How to use it |
|---|---|---|
| Know / access | Find out what we hold about you and get a copy | Settings → Export, or email us |
| Delete | Have your information deleted | Delete the App, or email us about your subscription record |
| Correct | Fix inaccurate information | Edit it in the App, or email us |
| Portability | Get your data in a usable format | Settings → Export (JSON) |
| Opt out of sale, sharing, targeted advertising, or profiling | Not applicable — we do none of these things. There is nothing to opt out of. | — |
| Limit use of sensitive information | Satisfied by default — see Section 4 | — |
| Non-discrimination | We will never deny service, change your price, or degrade your experience because you exercised a privacy right | — |
How to make a request. Email support@reformapp.org. Most rights are exercisable directly in the App without contacting us, and that is usually faster.
Verification. We do not know who you are, and we are not going to start collecting identifying information in order to process a privacy request. There is no account to verify. For a request about your subscription record, we will ask you for the app user identifier shown in Settings → About, which lets us locate that record without learning your identity. We will never ask you for identity documents, and we will never require you to give us more personal information than we already have.
Timing. We respond within 45 days. If we need more time, we will tell you within that period and may take up to 45 additional days.
Authorized agents. You may use an authorized agent, who must provide written proof of authorization.
Appeals. If we decline a request, we will tell you why, and you may appeal by replying to our response or emailing support@reformapp.org with “Appeal” in the subject line. We will respond to an appeal within 45 days with a written explanation. If we deny your appeal, we will give you a link to submit a complaint to your state Attorney General.
The California Consumer Privacy Act applies to businesses meeting revenue or volume thresholds that Reform does not meet, so we are not a “business” subject to the CCPA. We extend CCPA-equivalent rights to you anyway, as described above. For transparency, here is the statutory mapping:
| CCPA category | Do we collect it? | Source | Purpose | Disclosed to |
|---|---|---|---|---|
| Identifiers | Device/app identifiers, for subscription verification only | Automatic (RevenueCat) | Verify entitlement | RevenueCat |
| Commercial information | Subscription and purchase records | Apple | Verify entitlement | RevenueCat, Apple |
| Internet or network activity | No — we operate no backend server for app usage; the only network calls are Apple StoreKit and RevenueCat | — | — | — |
| Geolocation | No — we never collect location, precise or approximate, beyond country from Apple | — | — | — |
| Sensitive personal information | Health and sexual-health-related data, stored on your device only | You | Provide the App | Not disclosed |
| Biometric information | No | — | — | — |
| Inferences / profiles | No — we build no profiles | — | — | — |
Do Not Sell or Share My Personal Information: we do not sell or share personal information as those terms are defined under the CCPA, so no opt-out mechanism is required. If that ever changes, we will provide one before it does.
Shine the Light (Cal. Civ. Code § 1798.83): we do not disclose personal information to third parties for their direct marketing purposes.
Reform is a native iOS app and does not use web tracking technologies, cookies, or cross-site tracking. We do not track you across other apps or websites, and we do not permit anyone else to. Because we do no tracking at all, there is no behavior for a Do Not Track or Global Privacy Control signal to change. We do not request App Tracking Transparency permission, because we have no reason to.
Nevada residents may submit a request that we not sell covered information. We do not sell covered information. You may still submit a request to support@reformapp.org.
See our separate Consumer Health Data Privacy Policy, which contains the disclosures those states require, including the right to a list of every third party that has received your consumer health data.
Reform requires users to be 18 or older and is not directed at anyone under 18. We do not knowingly collect information from anyone under 18. If we learn that we have, we will delete it promptly. Contact support@reformapp.org if you believe this has happened.
If Reform is ever acquired, merged, or its assets sold, information could transfer to a successor. We commit to the following, and we intend these to bind any successor:
Our commitment not to sell your data is not contingent on who owns the company.
We may update this policy. For material changes — anything that expands what we collect, how we use it, or who receives it — we will notify you in the App before the change takes effect, and where the change requires your consent under applicable law, we will ask for it rather than assume it. Otherwise we will update the “Last Updated” date.
We will not apply a material change retroactively to information already collected without your consent.
Reform LLC An Illinois limited liability company support@reformapp.org
For privacy requests, put “Privacy Request” in the subject line. For appeals, “Appeal.”