Sit Out · Legal
Consumer Health Data Privacy Policy
Washington’s My Health My Data Act (RCW 19.373), Nevada’s consumer health data law (SB 370) and Connecticut’s consumer health data rules give special protection to information about your health. This policy explains how Sit Out handles it. We apply it to everyone in the United States.
It adds to our Privacy Policy, which covers everything else. Sit Out is made by Kafra Technologies LLC (“Kafra”, “we”, “us”).
The short version
- We don’t sell your consumer health data, and we don’t share it with third parties or affiliates.
- By default it stays on your phone. It reaches our servers only if you turn on backup & sync and agree on a separate consent screen.
- You’re in control. You can confirm what we hold, access it, delete it and withdraw consent at any time, and appeal if we say no.
1. What counts as consumer health data in Sit Out
Because Sit Out exists to help people stop betting, nearly everything in it can be consumer health data, including the fact that you use it.
-
Your betting history and goals
- Includes
- Sports and kinds of betting, how often you bet, your estimate of what betting cost you, what else it has cost you, past attempts to stop, and your goal for the money you keep.
- Why we use it
- To set up your plan and calculate the money you’ve kept (your estimate).
- Where it lives
- On your phone. In our cloud only if you turn on backup & sync.
-
Urges, check-ins and slips
- Includes
- Urge levels, moods and notes from check-ins; Timeouts and how they ended; slips, with optional amounts, triggers and notes.
- Why we use it
- To run the Board, Timeout, the Log and your Season, and show your progress.
- Where it lives
- On your phone. In our cloud only if you turn on backup & sync.
-
Your plan and reasons
- Includes
- Your reasons for stopping, your vow, the game times you choose and your daily check-in time.
- Why we use it
- To show your reasons when an urge hits, and to schedule check-ins.
- Where it lives
- On your phone, and in our cloud only with backup & sync. The signature you draw on your vow never leaves your phone.
-
Your age range
- Includes
- The range you pick during setup, such as 25–34.
- Why we use it
- To tailor what the app shows you. It is never sent to analytics.
- Where it lives
- On your phone. In our cloud only if you turn on backup & sync.
-
The fact that you use Sit Out
- Includes
- Your account email if you sign in; the fact that you have a Sit Out subscription; a random install ID in usage analytics if you allow it.
- Why we use it
- To run your account and subscription and, with your consent, improve the app.
- Where it lives
- With the processors listed in section 5.
-
The store’s age signal
- Includes
- Whether the App Store or Google Play reports you as an adult.
- Why we use it
- To keep Sit Out for adults.
- Where it lives
- On your phone only. It is never sent to us or anyone else.
2. Where it comes from
- You, when you enter it in the app.
- Your device, when it sends usage events, and only if you allow analytics.
- Apple or Google: your sign-in details if you sign in with them, and your purchase and subscription status. The age signal also comes from them and stays on your phone.
3. How we use it
Only to provide the features you ask for: the counters, reminders, Timeout, the Log, backup & sync and your subscription. If you allow analytics, we also use usage events to understand which features get used, never the content of your entries.
We don’t use consumer health data for advertising, marketing, profiling or training AI, and we don’t sell it.
4. Consent
We ask for your consent before collecting any consumer health data beyond what’s needed to provide what you asked for:
- Backup & sync: a separate consent screen comes before anything is stored on our servers. “Keep everything on this phone” is always an option.
- Analytics: “Help improve Sit Out”, with Allow and Not now. Not now means analytics never starts.
We don’t share consumer health data with third parties, so we never ask for consent to share it. If that ever changes, we’ll ask you separately first. We never sell consumer health data, so we will never ask you to sign an authorization to sell it.
To withdraw consent, turn off Settings › Privacy › Help improve Sit Out, or delete your account in Settings › Account › Delete account, which removes everything stored in the cloud. You can also email us.
5. Sharing
Categories of consumer health data we share with third parties: none. Third parties and affiliates we share it with: none. We have no affiliates that receive it.
To run Sit Out we use processors. They handle data only on our instructions, under contracts that limit what they can do with it. Giving data to a processor isn’t “sharing” under these laws, but you should still know who they are:
| Processor | What they do for Sit Out |
|---|---|
| Google LLC (Firebase) | Signs you in and stores backup & sync data, only after your consent. |
| PostHog, Inc. | Usage analytics, only with your consent. |
| RevenueCat, Inc. | Subscription status. |
| Code Town, Inc. (Shorebird) | App updates. Receives only technical data and a random install ID. |
You buy subscriptions from Apple or Google under their own terms and privacy policies.
6. Your rights
You have the right to:
- confirm whether we collect, share or sell your consumer health data;
- access it, including a list of all third parties and affiliates we have shared it with (there are none) and contact details for our processors;
- review and correct it (you can edit most of it in the app);
- delete it. We also tell our processors to delete it, and copies in backup systems are deleted within 6 months;
- withdraw your consent;
- ask us to stop collecting, sharing or selling it;
- not be discriminated against for using these rights.
How to make a request
Email hello@kafra.tech with “Consumer health data request” in the subject line, from your account email if you have an account. We’ll confirm the request comes from you, usually by replying to that address. We respond within 45 days; if we need more time, we may extend that once by up to 45 days and will tell you why. Requests are free. You can use an authorized agent; we’ll ask for proof that they act for you.
If you never created an account, your entries exist only on your phone. Use Settings › Export my data and Settings › Reset all data; we hold no copy.
Appeals
If we decline to act on your request, reply to our decision email with “Appeal” in the subject line. We’ll respond in writing within 45 days and explain our decision. If we deny your appeal, you can contact the Washington State Attorney General, the Nevada Attorney General or the Connecticut Attorney General.
7. Other protections
- No geofencing. We don’t collect your location and never set up virtual boundaries around places such as health care facilities.
- No third-party tracking. No other company can collect consumer health data about you over time and across apps or websites through Sit Out or this website. There are no ad or tracking tools and no cookies.
- Limited access. Only people who need it to run Sit Out or answer your request can access consumer health data, and they’re bound by confidentiality.
- Processor contracts. Every processor works under a contract that limits its use of the data to providing its service to us.
8. Changes to this policy
We’ll post changes here with a new effective date. For material changes, we’ll tell you in the app before they take effect, and we’ll ask for your consent before collecting or sharing consumer health data in a new way.
| Version and date | Change |
|---|---|
| 1.0 · October 1, 2026 | First version. |
9. Contact us
Kafra Technologies LLC
Email: hello@kafra.tech
See also: Privacy Policy · Terms of Use · Delete your account