Legal
Privacy policy
IronWill is an app about the most sensitive thing you are likely to track on a phone. This page says plainly what happens to that information — including the parts that are less flattering than the marketing.
Last updated
The short version. There is no account. Your streaks, check-ins, journal entries, trigger logs and relapse history are stored on your own device and are never uploaded to us. The website blocker decides what to block on the device, so your browsing history is never sent anywhere. What does leave the phone is ordinary app plumbing — anonymous usage statistics, crash reports, advertising requests on the free tier, and any message you choose to send to the AI coach. We do not sell data, and we could not sell your logs even if we wanted to, because we do not have them.
Who we are
IronWill is published by CoolCool Studio. You can reach a human at andevstudioth@gmail.com, which is the same address the app's Settings → Contact Us opens.
What stays on your device
All of this is written to a local database on the phone. It is not transmitted to us, it is not backed up to a server we control, and it is deleted when you delete the app:
- Your streak, start date, longest streak and relapse history
- Daily check-ins — mood, energy, urge intensity and trigger categories
- Journal entries and free-text notes, including those written in emergency mode
- Your onboarding assessment answers and the recovery plan generated from them
- Achievements, ranks, pledges and the urges-resisted tally
- Your settings, reminder times, chosen language and personal playlist
Because there is no account, there is nothing for us to look up, nothing to breach at our end, and nothing to hand over if someone asks. That is a design decision, not a promise about our intentions.
What the website blocker can see
The blocker works differently on each platform, and on both of them the decision is made locally.
On iPhone and iPad, IronWill uses Apple's Screen Time web
content filter (the FamilyControls and
ManagedSettings frameworks). The filtering happens inside
Apple's own system process. IronWill is never told which sites you visited.
On Android, IronWill registers an accessibility service that reads the address bar of your browser in order to decide whether the page should be blocked. That inspection happens entirely on the device and the URLs are not stored, logged or transmitted. This use of the Accessibility API is disclosed in every Google Play listing, as Google requires.
Neither mechanism produces a browsing history that we can read. There is a fuller technical write-up in how the website blocker works.
What leaves your device, and who receives it
| Service | What it receives | Why |
|---|---|---|
| Google Firebase Analytics | Anonymous, app-generated events such as "onboarding started" or "check-in completed", plus a random install identifier, device model, OS version, language and coarse country. Never the content of a check-in, journal entry or note. | To see which parts of the app are used and where people get stuck. |
| Google Firebase Crashlytics | Crash and error reports: stack traces, device model, OS version, and a random install identifier. | To find and fix crashes. |
| Google Firebase AI Logic (Gemini) | Only when you message the AI coach: the text you type and the earlier turns of that conversation, so the model has context. Nothing is sent unless you send it. | To generate the coach's reply. |
| Google AdMob | Standard advertising request data — device and ad identifiers, approximate location derived from IP, and app context — for users on the free tier. Pro subscribers see no ads and generate no ad requests. | To fund the free tier. |
| RevenueCat | Purchase and subscription receipts, and an anonymous app user ID. No name, email or payment card — the card is handled entirely by Apple or Google. | To know whether you have Pro, and to restore purchases on a new phone. |
| Firebase Remote Config & App Check | A device integrity token and basic app/device metadata. | To change settings without an app update, and to stop other people abusing our AI quota. |
That is the complete list. Each of these providers processes the data under its own privacy policy: Firebase, Google AdMob and RevenueCat.
Advertising and your choices
Ads appear only on the free tier. Before requesting any ad in a region that requires it, the app shows Google's consent form, and your answer is respected — if you decline personalised advertising you will still see ads, but non-personalised ones. On iOS, the App Tracking Transparency prompt controls whether the advertising identifier can be used at all; declining it is a real refusal, not a preference we route around.
Buying Pro removes advertising entirely.
The AI coach
The coach is a large language model, not a person and not a clinician. When you send it a message, that message and the conversation so far are sent to Google's Gemini API to produce a reply. Conversations are not used to train the model, are not attached to an identity, and are not readable by us.
Please still apply the rule you would apply to any chat interface: do not type anything you would be unwilling to have leave the device. Everything else in IronWill can be used entirely offline.
Permissions the app asks for
- Notifications — for the daily reminder you set. Optional.
- Camera — used by one emergency-mode tool, "Look in the Mirror", which shows a live front-camera preview. It is preview-only by construction: nothing is recorded, saved or transmitted.
- Accessibility service (Android only) — required by the website blocker, as described above.
- Screen Time (iOS only) — required by the website blocker.
Every one of these can be refused, and the rest of the app keeps working.
Children
IronWill is not intended for children. Do not use it if you are under 13, or under the minimum age of digital consent in your country if that is higher. We do not knowingly collect information from children.
Your rights
Because we hold no account and no identifiable record of you, the practical answer to "delete my data" is: uninstall the app, and everything personal goes with it. For the anonymous analytics and crash data described above, write to andevstudioth@gmail.com and we will do what we can — but be aware that without an identifier there may be nothing we can single out as yours, which is the point of collecting it that way.
If you are in the EU or UK, our legal basis is legitimate interest for analytics and crash reporting, consent for personalised advertising, and performance of a contract for purchases. If you are in California, we do not sell or share personal information as those terms are defined by the CCPA.
Changes
If this policy changes materially, the date at the top of the page changes with it. We do not quietly edit it.