Privacy Policy
Moderation — Drink Tracker Last updated: September 24, 2026
Moderation is built so that your data stays yours. This policy explains what the app stores, where it goes, what it shares, and what never happens with it.
The short version
- Your drink log lives on your devices and in your Apple accounts — never on our servers. We don’t have any.
- There is no account, no advertising, and no tracking across apps or websites.
- The app sends anonymous usage statistics, such as which features get used, so we can keep improving it. They never include your drinks, your goals, or your spending.
- We cannot see your data. Not your drinks, not your goals, not your spending.
What the app stores
Moderation records the entries you create: drinks (with optional type and cost), confirmed dry days, and your settings (goals, theme, preferences). This data is stored:
- On your device, in the app’s private storage.
- In Apple Health, if you enable Health sync — drinks are saved as alcoholic-beverage records that you can view, export, or delete in the Health app at any time. Moderation reads back alcoholic-beverage records (including those written by other apps) solely to display your history. Health data is never used for marketing, advertising, analytics, or any purpose other than showing you your own log, per Apple’s HealthKit requirements.
- In your private iCloud database, to sync between your iPhone, iPad, and Apple Watch. This is Apple’s CloudKit private database: it belongs to your Apple Account, is encrypted in transit and at rest, and is not accessible to the developer.
Anonymous usage statistics
To understand which parts of the app people use and where it can improve, Moderation sends basic, anonymous usage statistics through TelemetryDeck, a privacy-focused analytics service.
A statistic records that something happened — for example, finishing the introduction, opening the subscription screen, or using a widget or Siri during the week — along with general details such as the app version, device model, and system version. Each installation is represented only by a salted, one-way hash of an app-specific device identifier, so the statistics can’t be traced back to you or your Apple Account.
Usage statistics never include what you drink, how much, when, what it cost, your goals, your dry days, or anything from Apple Health. They aren’t used for advertising and aren’t combined with data from other sources. TelemetryDeck’s privacy policy is at telemetrydeck.com/privacy.
Subscriptions
Payments are processed entirely by Apple through the App Store; we never see your payment details. To validate subscriptions, the app uses RevenueCat, a subscription-management service that receives your purchase receipt and an anonymous identifier — no name, email, or health data. RevenueCat’s privacy policy is at revenuecat.com/privacy.
Notifications
Check-ins, morning summaries, and weekly wrap-ups are scheduled locally on your device. No notification content leaves it.
What we never do
We never collect anything about your drinking, we don’t run ads, we don’t sell or share your data, and we don’t fingerprint or track you across apps or websites.
Deleting your data
Delete drinks in the app or in Apple Health. Removing the app’s data from iCloud can be done in Settings → Apple Account → iCloud → Manage Storage. Deleting the app removes its on-device data.
Changes
If this policy changes, the new version will be posted at this address with an updated date. Material changes will be noted in the app’s release notes.
Contact
Questions? Email hello@usemoderation.com.