Privacy

Effective 29 September 2026.

The short version

• No ads, no tracking, no selling or sharing data for marketing. Ever.
• Our DNS guard sees the web addresses your phone looks up so it can refuse betting sites. We only record the betting sites it refused ("knocks"). Everything else is answered and forgotten.
• Your promise words, why wall, reflections, daily check-ins and money figures stay on your phone.
• You can delete your account in the app at any time.

What we keep on our servers

What	Why
A random account ID and a device key (Apple App Attest)	So only the genuine app on a real iPhone can use your account. No sign-up needed.
Your Apple ID, name and email, only if you choose Sign in with Apple	So your account can come with you to a new phone. We also keep Apple's sign-in token, only so we can cancel it with Apple when you delete your account.
Your streak start date, days of progress, promise length and first name	So the people on your rope see how you're doing, and a new phone can pick up where you left off.
The people on your rope, invites, and cool-off requests	So supporters can join and decide with you before a protection is turned off.
That a slip happened (never your reflection), and only shared if you choose	So your streak is honest, and your people can support you if you want them to.
Knocks: betting sites the guard refused, and when (kept 180 days)	So you can see the doors that held. Supporters only ever see weekly counts, and only if you turn that on.
Your face sticker, only if you switch on "Show my face to my people"	So it appears on your rope for your supporters. Deleted when you switch it off.
Your notification token and time zone	To send decisions and reminders, never at night where you are.
Which banks you've switched a gambling block on at (self-reported)	To show it in Protect. Supporters see only how many, never which bank. We never see your bank account.
Names of other devices you protect	So you can manage them.
Gambling ads you report: when, where from, which country you were in (from your internet connection, nothing finer), whether it was a gambling ad, its House Tricks score and which tricks it used	So we can count what got blocked and publish country totals of the tricks gambling ads use (only once a country has enough reports that no one can be picked out). Never the screenshot, the text in it, or the link.
Whether you have a plan (free trial, yearly or monthly) and when it renews	Protections are part of your plan. Apple handles the payment; we never see your card.

The DNS guard

When the guard is on, your phone asks our server (run on Cloudflare) for the address of each site and app it uses. Betting sites are refused. For everything else we pass the question on and don't log it. If a site is new to us, its name alone (never who looked it up) may be checked by our classifier, which can read the site's public pages. We never see the pages you visit, what you type, or your messages.

Reporting a gambling ad

When you send a screenshot or a link of a gambling ad, your phone first reads the words in the screenshot itself. The screenshot and those words go to our server once, and from there to Anthropic and TypeSafe, who read the ad: is it gambling, who's behind it, and which tricks it uses. Neither keeps it to train their models, and we don't store the screenshot, its words or the link at all. A screenshot shows whatever was on your screen, so crop out anything personal (notifications, names, messages) before you send it. The House Tricks card is made on your phone from your own screenshot, with the operator blurred, and is only shared if you tap Share.

This website

It runs no scripts, sets no cookies and uses no analytics. The App Store links carry a campaign tag so Apple can tell us how many people installed the app from this site: a count, never who.

Who helps us run it

• Cloudflare: the DNS guard and this website.
• OVHcloud: our server. PlanetScale: our database (United States).
• Apple: device checks, Sign in with Apple, notifications and payments.
• RevenueCat: keeps track of your plan (linked to a random account ID, never your name or card).
• Anthropic, TypeSafe and Browser Use: to read public web pages (to tell betting sites apart from others, and to keep bank instructions accurate). Anthropic and TypeSafe also read the ad screenshots you choose to report (see above). Neither trains on what we send.

Keeping and deleting

Knocks are deleted after 180 days. When you delete your account (in the app: menu, Delete my account), it takes 7 days, the same pause every protection has, and you can cancel until then. After that, everything above is deleted from our servers. The DNS guard address on your phone keeps blocking betting sites until you remove it, but it's no longer linked to anyone.

Children

You vs The House is for adults (18+). We don't knowingly keep data about children.

Your rights and questions

You can see, correct and delete your information in the app, or ask us at hello@youvsthehouse.com. Depending on where you live (for example under the GDPR, POPIA, PIPEDA or Australian Privacy Principles) you can also complain to your data protection authority.

You vs The House is a support tool, not medical treatment. If you need help now, see support and helplines.