Consumer Health Data Privacy Policy

Effective September 3, 2026

This policy is about consumer health data specifically. It is separate from our Privacy Policy, which covers everything else. Where the two overlap, both apply. It is written for the Washington My Health My Data Act and the Nevada consumer health data law, and we apply it to everyone in the United States rather than only to residents of those states.

No More Drinks is made by Olivia Inc. (株式会社オリビア), Tokyo, Japan. We are the entity responsible for the data described here. Contact: [email protected].

1. What consumer health data we collect, and why

Everything below is information about drinking, which is health-related. We collect it only to provide the app to you, and we ask for your consent before the intake questions begin.

What you tell us — the kinds of alcohol you usually drink, how often you drink, how much you drink on one occasion, how much you spend on it, what sets it off, how long you have gone without, what you have tried before, what you want to change, and your date of birth. Some questions have a free-text box; what you write there is yours and we do not read it for any other purpose.

What the app works out from that — a risk band, a 90-day plan, which lessons you get and in what order, your daily check-ins (drank or did not drink), how many days in a row you have kept, and how much money you have kept.

How you use the parts of the app that relate to drinking — when you open the SOS screen, which lessons you finish, what you choose to post to the anonymous community, and whether you have turned on blocking for sites or apps.

Places you ask the app to watch — if you turn on the optional reminder for bars and liquor stores, the places you add are kept on your phone and the matching happens on your phone. Your location is not sent to us and we do not keep a location history.

Why we use it — to build and adjust your 90-day plan and your lessons; to show you your streak, your progress and the money you have kept; to generate the Coach's replies to what you ask; to show the community the posts you chose to publish; and to keep the app working (crashes and anonymous usage counts). That is the whole list. We do not use it to profile you, to make decisions about you, or for advertising.

2. Where it comes from

From you, in the app. Nothing else. We do not buy consumer health data, we do not receive it from data brokers, advertising networks, health plans, pharmacies or medical providers, and we do not infer it from your web browsing.

We do not collect health records, test or lab results, a diagnosis from a clinician, prescription data, genetic data or biometric data.

3. What we share

We do not sell consumer health data. Not for money, not for anything else of value. We do not share it for advertising of any kind, and we do not share it with data brokers.

We share it only with the service providers that make the app run, only for the purposes below, and only under a contract that binds them to those purposes:

• Cloud database and sign-in (Supabase Inc., United States) — stores your answers, your plan, your check-ins and the anonymous usage counts.

• The Coach (Anthropic PBC, United States) — when you send the Coach a message, that message and the recent conversation are sent to generate a reply. No name or contact details are attached, and it is not used to train models.

• Subscription status (RevenueCat, Inc., United States) — whether you have an active subscription and which plan. This is purchase information, not health data; we list it so the picture is complete.

The person you invite — if you set up shared progress yourself, the specific things you chose (your streak, the money you kept, how you are doing) go to the person you invited. This is off unless you turn it on, and you can turn it off.

The community — only the posts you choose to publish, under an anonymous handle. Do not post anything you would not want read by strangers.

Legal — we may disclose data if the law requires it, and we will not disclose it in response to a request about someone seeking or obtaining health care unless we are legally compelled to.

Olivia Inc. has no affiliates or subsidiaries, so there are none to list.

4. How long we keep it

While your account exists. When you delete your account in the app (Settings → Delete account), your answers, your plan, your progress, your shared-progress records and the messages from your accountability partner are deleted from our live systems, and backups are overwritten on a routine schedule.

5. Your rights, and how to use them

You have the right to confirm whether we hold consumer health data about you and to get a copy of it; to get a list of the third parties with which we have shared it, with contact information for each; to withdraw your consent to our collection and sharing of it; and to have it deleted.

How to delete it yourself, right now — in the app: Settings → Delete account. This deletes the data and withdraws your consent at the same time.

How to ask us — email [email protected] and say what you want. The app is anonymous, so we verify a request through the app itself; if we cannot confirm that a request is yours, we will tell you why. We answer within 45 days and may extend once by 45 days if we tell you why. An authorized agent may make a request on your behalf with your written permission.

Withdrawing consent stops future collection and sharing. It does not undo processing that already happened, and because the app cannot build your plan without this information, withdrawing consent means the app can no longer be used.

If you think we got a request wrong, you can appeal by replying to our answer or writing to [email protected] with "appeal" in the subject line. We will respond within 45 days and explain our reasoning. Washington residents may also contact the Washington State Attorney General; the Act also gives you a private right of action under the Consumer Protection Act.

6. Security

Data is encrypted in transit and at rest at our hosting provider. Access is limited to the people who need it to run the service. No system is perfect, and we do not claim otherwise.

7. Changes

If we change what we collect, why we collect it, or who we share it with, we will update this page and change the effective date at the top before the change takes effect. If a change requires your consent, we will ask you again in the app.

8. Contact

Olivia Inc. (株式会社オリビア), Tokyo, Japan — [email protected]