Nuff Labs Privacy Policy

Last Updated: April 12, 2026

1. Clinical & Wellness Disclaimer

Nuff is an independent wellness toolkit for educational and self-help purposes only. It is not a medical device, nor does it provide clinical diagnosis or treatment for gambling disorder. Nuff is not a substitute for professional medical advice.

2. Information We Collect

We treat your information as Sensitive Personal Information (SPI) under the Texas Data Privacy and Security Act (TDPSA). The following data is collected when you use Nuff:

• Account Data: Display name and email address provided at registration.
• Behavioral Data: Streak start date, daily check-in logs, mood entries, urge logs, and accountability contact information you choose to enter.
• Device Data: Push notification tokens (when you opt in to notifications), device platform (iOS/Android), and app version.
• Usage Data: Anonymised diagnostic data collected via Vercel on the website (IP address, browser type) for security and performance. The app itself does not collect analytics.

3. Data Retention

We retain your account and behavioral data for as long as your account remains active. If you delete your account, your data is removed from our active databases immediately. Deleted data may remain in encrypted backups for up to 30 days before permanent removal.

4. Notifications & Push Tokens

We utilize the following providers to ensure your data is secure and high-performing:

• Vercel: Website hosting and diagnostic analytics.
• Supabase: Secure database management and user authentication. Your behavioral data and push notification tokens are stored here.
• Expo (Notifications): When you opt in to push notifications, your device’s Expo push token is registered with Expo’s notification delivery service and stored in our Supabase database. This token contains no personal information beyond a device identifier. You can revoke this at any time by disabling notifications in Settings.
• RevenueCat: Subscription management. We do not store credit card information; payment processing is handled entirely by Apple or Google.

5. App Store Privacy Disclosure

In accordance with Apple App Store and Google Play requirements, the following data types are collected and linked to your identity:

• Contact Info: Email address (account creation).
• User Content: Check-in logs, mood entries, and urge logs.
• Identifiers: User ID and push notification token.

No data is collected for tracking or advertising purposes. No data is shared with data brokers.

6. Your Privacy Rights (DSAR) & Breach Notification

Under Texas law and the CCPA, you have specific rights regarding your personal information. You may submit a Data Subject Access Request (DSAR) to exercise the following:

• Right to Access: Request a copy of the data we hold about you.
• Right to Correction: Request that we fix inaccurate or incomplete information.
• Right to Deletion: Use the “Delete Account” button in settings for an immediate wipe of your records from our active databases. Deleted data may remain in encrypted backups for up to 30 days.

In the event of a data breach affecting your personal information, we will notify you within 30 days as required by the Texas Data Privacy and Security Act.

7. Children’s Privacy

Nuff is strictly prohibited for users under the age of 18. We do not knowingly collect data from minors.

8. Legal Disclosures & Transfers

• Business Transfers: In the event of a merger, acquisition, or asset sale involving Y Cubed Solutions LLC, your personal data may be transferred as a business asset.
• Law Enforcement: We may disclose your data if required by law or in response to a valid request by public authorities (e.g., a court or government agency).

9. Contact & Governing Law

This policy is governed by the laws of the State of Texas. For any privacy inquiries, please contact our Data Protection Officer:

Email: privacy@nufflabs.com