Last updated: March 2026
We collect the following types of information when you use Gambld:
Account Information: Your email address and password when you create an account.
Onboarding and Profile Data: Responses to onboarding questions about your recovery goals, preferences, and personal information you provide to personalize your experience.
User-Generated Content: Journal entries, daily check-in responses (including mood, urge intensity, and triggers), breathing exercise completions, thought challenge entries, and task completion records that you voluntarily submit through the app.
Usage and Analytics Data: We automatically collect information about how you use the app, including which screens you visit, which features you use (such as journaling, breathing exercises, and check-ins), session duration, onboarding progress, and general engagement patterns. This data is collected to improve the app experience and is associated with your account.
Device Information: We collect your device platform (iOS or Android) and push notification tokens to deliver notifications. Our payment processor, RevenueCat, may also collect device identifiers (such as Identifier for Vendors on iOS or Android ID) for transaction processing and attribution purposes.
Local Storage: The app stores authentication tokens and your preferences locally on your device to keep you signed in and remember your settings. This data remains on your device and is not transmitted to our servers except as needed for authentication.
Your information is used to provide and improve our recovery support services, personalize your journey and daily content, track your progress and streaks, send relevant notifications and reminders, process subscription payments, analyze usage patterns to improve the app, and maintain the security of your account.
Gambld uses RevenueCat to manage subscriptions and in-app purchases. When you subscribe, RevenueCat processes your transaction through Apple's App Store or Google Play. RevenueCat receives purchase data including transaction identifiers, subscription status, and device identifiers for the purpose of managing your subscription and preventing fraud. We do not directly collect or store your payment card details. For more information about how RevenueCat handles your data, please visit their privacy policy at revenuecat.com/privacy.
Your data is stored securely using industry-standard encryption and security practices. We use secure database infrastructure to protect your personal information. Passwords are hashed and never stored in plain text. Authentication uses short-lived access tokens with secure refresh token rotation. We regularly review and update our security measures to protect against unauthorized access.
We do not sell, trade, or rent your personal information to third parties. We share data with the following service providers who assist in operating the app:
RevenueCat: Receives purchase and subscription data, device identifiers, and platform information to manage in-app subscriptions and process payments.
Apple App Store / Google Play: Process payments and manage subscriptions on their respective platforms.
We may also share anonymized, aggregated data for research purposes related to gambling addiction recovery. We may disclose information if required by law or to protect the safety of our users.
With your permission, we send push notifications to support your recovery journey, including daily check-in reminders, motivational messages, and milestone celebrations. To deliver these notifications, we collect and store your device's push notification token and platform type. You can disable notifications at any time through your device settings or within the app.
You have the right to access, update, or delete your personal data at any time. You can export your journal entries and recovery data. You may request complete account deletion by contacting us, and we will remove your data as described in our data retention policy. You can opt out of non-essential notifications through the app settings or your device settings.
We retain your data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where we are required by law to retain certain information. Analytics data is retained in aggregated form and cannot be used to identify you after account deletion.
Our service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a minor, we will take steps to delete it promptly.
We may update this Privacy Policy from time to time. We will notify you of any significant changes through the app or via email. Your continued use of the app after changes constitutes acceptance of the updated policy.
If you have any questions about this Privacy Policy or our data practices, please email us at grant@trygambld.com.