Your recovery is personal. The data behind it should stay that way. This policy explains, in plain language, what CashOut collects, why we collect it, who we share it with, and the control you have over all of it.

CashOut ("CashOut," "we," "us," or "our") makes a mobile app for iOS (iPhone and iPad) and operates the website at getcashoutapp.com (together, the "Service"). The Service helps you quit gambling and stay clean — tracking your streak, blocking gambling sites and apps, and giving you tools to ride out an urge. This Privacy Policy covers the app and the website alike.

By creating an account or using the Service, you agree to the practices described here. If you do not agree, please do not use the Service. If you are in crisis right now, you can call or text the National Problem Gambling Helpline at 1-800-522-4700 (1-800-GAMBLER), 24/7.

Introduction

We built CashOut for people who are trying to get their life back from gambling. That mission only works if you trust us with some genuinely sensitive information — your urges, your relapses, your reasons for quitting, your money. We take that seriously.

Two principles guide everything below. First, we collect only what the Service actually needs to work. Second, we never sell your data, and we treat your recovery data as sensitive, health-related information that gets the highest level of care we can give it.

Your recovery data is yours. Check-ins, streaks, urges, journal entries, your reasons for quitting, your pledges, your chats with Ace — we treat all of it as sensitive, health-related data. We never sell it, never rent it, and never use it for advertising. You can export it or permanently delete it at any time.

Information we collect

We collect information in a few different ways: information you give us directly, information generated as you use the app, and information we receive from the app stores when you subscribe.

Account information

When you create an account, we collect your email address and, depending on how you sign up, your name. CashOut supports signing in with Apple and signing in with Google. When you use one of these, we receive a basic identifier and the email address associated with that account from Apple or Google — we do not receive your password, and we never see your Apple or Google login credentials.

Recovery data you enter

This is the heart of the app, and the most sensitive data we hold. Depending on which features you use, it can include:

  • Your quit date and streak ("clean days") and milestone progress;
  • Daily Check-Ins and your daily Pledge;
  • Urges you log in the Urge Tracker, including the trigger (for example Loneliness, Boredom, Stress, Big Loss, Big Win, or Money In) and any notes;
  • Journal entries and reflections;
  • Your reasons for quitting list;
  • Information you enter to power your Progress analytics, such as figures used by the Money-Saved ticker and your self-rated wellbeing scores across the six axes (Mental, Focus, Sleep, Relationships, Time, Financial);
  • Your messages to Ace, our AI recovery companion, and the conversation history needed to keep the chat coherent.

We treat all of this as sensitive, health-related data. It is private to your account and is used to run the features you asked for — not to profile you or sell to anyone.

Community content you post

If you participate in the Community forum, the posts, comments, and reactions you share are collected and stored so they can be displayed to other members. Treat anything you post in Community as visible to other CashOut members under the username you choose. Please don't share information in Community that you wouldn't want others to see.

Device & usage data

To keep the Service running and to fix problems, we collect limited technical information automatically, such as your device type and operating system version, app version, general app interactions (which features are opened), crash reports, and approximate region inferred from your IP address. The system-wide Content Blocker and Lockdown Mode operate on your device to filter the 150+ gambling sites and apps we cover; we do not receive a log of every site you try to visit.

Purchase & subscription information

CashOut subscriptions are sold and processed by Apple's App Store. We do not collect or store your full credit card number or payment details — those are handled by the App Store. We do receive confirmation of your subscription status (active, expired, plan type, renewal date) so we can unlock the right features for your account.

How we use your information

We use the information we collect to:

  • Provide the Service — create and maintain your account, track your streak and milestones, run the Content Blocker, power the Panic Button and its distraction games, generate replies from Ace, and display your Progress analytics;
  • Personalize your experience — show your reasons for quitting at the right moment, surface trigger tips, and tailor the Learn curriculum and check-in prompts to where you are in recovery;
  • Operate the Community — display your posts and keep the forum safe and on-topic;
  • Communicate with you — send service messages, respond to support requests, and (only if you opt in) send streak reminders or encouragement;
  • Keep things working and safe — diagnose crashes, prevent abuse and fraud, and improve features based on aggregated, de-identified usage trends;
  • Meet legal obligations — comply with applicable laws and enforce our Terms of Service.

We do not use your recovery data to serve you ads, and we do not sell it.

If you are in the European Economic Area, the United Kingdom, or another region with similar laws, we process your personal data under these legal bases:

  • Performance of a contract — to deliver the features of the Service you signed up for;
  • Consent — for sensitive recovery and health-related data, optional communications, and any processing where we ask you to opt in. You can withdraw consent at any time;
  • Legitimate interests — to keep the Service secure, prevent abuse, and improve the product, balanced against your rights;
  • Legal obligation — where the law requires us to retain or disclose information.

How we share it

We share information only in the limited ways below. We never sell your personal or recovery data.

  • Service providers. We use trusted vendors to run the Service. For example, we use Supabase for our backend, authentication, and database; analytics providers for aggregated usage trends; and an AI provider that processes your chat messages to generate Ace's replies. These providers are contractually limited to processing data on our behalf and only for the purposes we specify.
  • App stores. Apple and Google handle billing for subscriptions and share subscription status with us, as described above.
  • Legal compliance. We may disclose information if required by law, subpoena, or valid legal process, or to protect the rights, safety, and property of our users, the public, or CashOut.
  • Business transfers. If CashOut is involved in a merger, acquisition, or sale of assets, your information may be transferred — but it remains subject to this Privacy Policy, and we will notify you of any change in control or use.

When your messages to Ace are sent to our AI provider to generate a reply, they are used to produce that response and are subject to that provider's commitments to us. We do not authorize providers to use your content to train general-purpose models for their own purposes.

Data retention

We keep your information for as long as your account is active so the Service can do its job — your streak and history wouldn't mean much if we deleted them every month. When you delete your account, we delete or de-identify your personal and recovery data, except where we are required to keep certain records (for example, basic transaction records for tax, accounting, or legal compliance). Backups are purged on a rolling schedule. De-identified, aggregated data that can no longer be linked to you may be retained to understand product trends.

Your rights & choices

You have meaningful control over your data, and we've built the most important controls right into the app.

  • Access & export. You can view your recovery data in the app, and you can request a copy of the personal data we hold about you.
  • Correct. You can update your profile and edit or remove most of the data you've entered directly in the app.
  • Delete. You can permanently delete your account and data at any time, right from your device.
  • Object & restrict. Where applicable law allows, you can object to or ask us to restrict certain processing.
  • Opt out of communications. You can turn off optional notifications and reminders in your device or app settings.

How to delete your account in the app: Open CashOut and go to Settings → Delete profile & data. Confirming this permanently removes your account and cascades the deletion across all of your data — streaks, check-ins, urges, journal entries, pledges, reasons, Community posts, and your chats with Ace. This action can't be undone. Prefer email? Write to privacy@getcashoutapp.com and we'll handle the request and verify your identity first.

Depending on where you live, you may have additional rights under laws such as the GDPR or the California Consumer Privacy Act (CCPA/CPRA), including the right not to be discriminated against for exercising your privacy rights. To exercise any right, contact us at the address below. You also have the right to lodge a complaint with your local data protection authority.

Children's privacy

CashOut is intended for adults and is rated 17+. The Service is not directed to and is not intended for anyone under 18 years of age, and we do not knowingly collect personal information from minors. If you believe a person under 18 has provided us with personal information, please contact us and we will delete it.

Security

We protect your information using industry-standard safeguards. Data is encrypted in transit (TLS/HTTPS) between your device and our servers, and access to production systems is limited to authorized personnel under access controls. Our backend, authentication, and database run on Supabase, which provides encryption and security controls at the infrastructure level. No method of transmission or storage is ever 100% secure, so while we work hard to protect your data, we can't guarantee absolute security. Use a strong, unique account and keep your device locked.

International users

CashOut is operated from the United States. If you access the Service from outside the U.S., your information will be transferred to, stored, and processed in the United States and other countries where we or our service providers operate. These countries may have data protection laws that differ from those in your country. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for international transfers.

Third-party links

The Service may link to third-party websites and resources — for example, the National Council on Problem Gambling or app store pages. We are not responsible for the privacy practices of those sites. When you follow a link, we encourage you to read the privacy policy of the site you visit.

Changes to this policy

We may update this Privacy Policy from time to time as the Service evolves or the law changes. When we make material changes, we'll update the "Last updated" date above and, where appropriate, notify you in the app or by email. Your continued use of the Service after an update means you accept the revised policy.

Contact us

Questions about this policy or your data? We want to hear from you. Email our privacy team at privacy@getcashoutapp.com, or reach general support at support@getcashoutapp.com. We'll do our best to respond promptly and to verify your identity before acting on any request involving your personal data.

CashOut is a self-help recovery tool, not a medical or crisis service. If you or someone you know is struggling, help is available 24/7 — call or text the National Problem Gambling Helpline at 1-800-522-4700 (1-800-GAMBLER), text 53342, or visit ncpgambling.org.