Drinking Control Privacy Policy

Effective date: July 16, 2026

Last updated: July 27, 2026

Drinking Control helps you record alcohol use, understand trends, and make your own choices. Your drink records, goals, wellbeing check-ins, cabinet data, and other personal content are stored on your device. We do not use iCloud, CloudKit, a Drinking Control account, or our own cloud database to store, back up, or sync this content.

This Privacy Policy explains what information the App handles, where it is stored, when it may be shared with another provider, and the choices available to you.

1. Scope

This Policy applies to the Drinking Control iPhone app, its paired Apple Watch app, and Apple Watch complications or Smart Stack widgets (collectively, the "App").

The App does not provide a Drinking Control account system, and we do not operate a cloud database that stores your drink records or wellbeing data. Information processed through Apple services is also governed by Apple's terms and privacy policies. Information you deliberately share with another app, person, or service is governed by the recipient you select.

2. Information handled by the App

The App may handle the following information, depending on the features you use:

We do not sell your personal data. We do not use drink details, notes, wellbeing check-ins, or cabinet content for advertising profiles, marketing lists, or usage analytics.

3. Local storage and Apple-device features

Local database

Personal records are stored locally by the App. The App does not use CloudKit database sync and does not upload these records to our own servers. Local data may not be recoverable if you change devices, lose or damage a device, or delete the App.

Apple Watch and shared App data

To support the paired Apple Watch app, a system-protected shared space stores necessary summaries. These may include estimated pure alcohol for today and recent periods, goals, Dry Day streak, status, and Premium entitlement. This space is available only to Drinking Control and its Watch extension and is not a developer-operated cloud service.

Complications and Smart Stack widgets show only a status and Dry Day streak, not exact alcohol amounts. This information may still be visible to anyone who can see your watch. You can remove these widgets at any time.

Communication between iPhone and Apple Watch

Paired devices exchange necessary summaries and actions started on Apple Watch through Apple's device-communication features. If the Watch cannot reach the iPhone, an action may be queued locally and sent later. This is not cloud sync, and the information is not stored on our servers.

System backup exclusion

The App marks its local personal database, shared Watch summaries, and preferences directory for exclusion from system cloud backups. The operating system ultimately controls backup behavior, so this setting is not an absolute guarantee. Apple manages App Store transaction records separately.

4. Apple Health

Drinking Control does not integrate with Apple Health, request Apple Health permission, or read, write, or import data from Apple Health. Wellbeing check-ins entered in Drinking Control are stored only in the App's local database.

5. Usage analytics and advertising-result measurement

Drinking Control does not send your name, email address, drink records, goals, wellbeing check-ins, notes, or other personal content to Firebase Analytics. The App does not provide a Drinking Control account or set a Firebase User ID.

Firebase Analytics generates a pseudonymous app-instance identifier for an installation and may process automatically generated events such as first open, session, engagement, App version, and operating-system version. App Store integration may also provide purchase and subscription events. Firebase may process basic technical context such as device type, language, network information, and approximate region as part of providing aggregate App activity and purchase reporting. We do not use this information to identify you or connect it to your personal records in the App.

The custom analytics events sent by the App are limited to:

Custom event parameters are limited to paywall placement, product identifier, trial eligibility, and outcome. Continuing with the free version is counted as dismissing the paywall and does not send a separate event.

Analytics events do not include drink quantities, alcohol amounts, drink names, prices, notes, goal values, wellbeing check-ins, or cabinet content. We do not use analytics to create a profile of your drinking behavior.

Advertising-result measurement is limited to Apple's privacy-preserving attribution, including SKAdNetwork aggregate campaign results. The App does not allow Firebase to store advertising data, use analytics data as advertising user data, or personalize advertising. The current version does not collect IDFA, request App Tracking Transparency permission, or use analytics events for personalized advertising or remarketing audiences.

Firebase Analytics is provided by Google. For more information, see Firebase Privacy and Security and the Google Privacy Policy.

6. Purchases, notifications, sharing, and support

App Store purchases

Monthly, annual, and lifetime purchases are processed by Apple through the App Store. We do not receive your payment-card details or complete payment information. The App receives product identifiers, purchase status, and entitlement results to unlock and restore Premium. Apple manages transactions and your Apple Account. See the Apple Privacy Policy.

Local notifications

If you enable reminders, the App schedules local notifications on your device and stores settings such as whether a reminder is enabled and its selected time. Notification content may be visible on your Lock Screen. You can disable reminders, sounds, or Lock Screen previews in the App or system Settings.

Export and deliberate sharing

When you choose to share a report, the App creates a temporary image containing the selected statistical summary and opens the system share sheet. Content is provided to another app, person, or service only after you choose a destination. Review the image and destination before sending it. The selected recipient is responsible for further handling.

Support

If you email support, we and the email service provider receive the email address, message, and attachments you choose to provide. We use this information to reply, investigate the issue, and retain necessary support records. Do not send drink or health details that are not needed for your request.

7. Purposes and legal grounds

We handle information to:

Where applicable law requires a legal basis, we rely on performance necessary to provide the features you request, legitimate interests or another basis permitted by applicable law for improving and protecting the App and measuring promotions, and legal obligations that require processing. Notification permission remains your choice and can be withdrawn in system Settings.

8. Retention, deletion, and security

Retention

Local records remain until you delete the relevant content in the App or uninstall the App. Queued Watch actions and temporary report files are retained only as needed to complete the requested feature. Apple, Google, email providers, and destinations you choose for sharing retain information under their own policies and settings. Where we control a retention setting, we retain information only for as long as reasonably needed for the purposes described in this Policy or as required by law.

Deletion

You can delete individual drink records or all drink records for a day in the App and manage other goals and custom content where a delete action is provided. Uninstalling the App removes its local sandbox from the device. Uninstalling does not remove Apple-managed transaction records, retract content you already shared, or erase information already received by another service.

You may contact us to request deletion of personal data that we actually control. Because the App does not provide an account, we cannot search a server for records stored only on your device. We may also be unable to associate pseudonymous analytics events with you using only an email address. We will explain what we can reasonably identify and delete.

Security

We use the App sandbox, permission controls, restricted shared storage, and paired-device communication protections supplied by iOS and watchOS to reduce unnecessary exposure. No storage or transmission method is completely secure. Protect your device with a passcode, current system updates, and appropriate Lock Screen privacy settings.

9. Your choices and rights

You may:

We may need to verify your identity before handling a rights request. Do not send identity documents unless we specifically request them and explain why they are needed.

10. Minors

Drinking Control is not intended to promote alcohol use to anyone below the legal drinking age where they live and is not designed to encourage drinking. We do not use an account to solicit children's names or contact details. If you believe a child has sent personal information to us, contact us and we will respond as required by applicable law.

11. Third-party processing and international transfers

These providers may process information outside your country or region under contractual, certification, or legal safeguards applicable to them. We require providers that receive data from the App to protect it consistently with this Policy and applicable law. Their own privacy terms also apply. Using these services does not give us your Apple Account password or payment-card details.

12. Changes to this Policy

We may update this Policy when App features, third-party services, or legal requirements change. We will update the date above and provide notice of material changes through the App, release notes, or another reasonable method. The revised Policy applies from its stated effective date.

13. Contact

Privacy and support email: yearplan@163.com

For a privacy request, use "Privacy Request" in the email subject and describe your country or region and what you are requesting. Do not send identity documents or unnecessary health information unless we specifically request them to verify the request.