Privacy Policy

1. Information We Collect

Information You Provide Directly

We collect information you provide directly to us, including your name, email address, and any behavioral or wellness data you choose to log, such as sleep, screen time, daily check-ins, mood or cognitive assessments, habits, and other self-reported inputs.

Wearable & Device Data

If you connect a wearable device or health platform, we may receive device-generated activity and wellness data, strictly with your explicit authorization. We request only the data needed to operate the features you enable.

Garmin Connect Data

Clean Dopamine integrates data from consenting users' Garmin wearables via Garmin Connect's Health API. If you choose to connect your Garmin account, then, and only with your explicit authorization through Garmin’s OAuth consent screen, we collect the following Garmin device-sourced data:

• Sleep: sleep stages (deep, light, REM, awake), duration, and sleep score
• Heart rate: resting, average, and maximum heart rate
• Heart rate variability (HRV)
• Steps and daily activity: daily step count, distance, active time, moderate/vigorous intensity minutes, floors climbed, and active calories
• Stress and Body Battery

How we use Garmin data. Garmin data is used to let you view your Garmin-derived activity and wellness data within Clean Dopamine alongside your other key metrics (such as screen time and user-logged habits), via graphs and charts. If you choose to participate in optional wellness challenges and share your metrics (ex- a  step count challenge), your Garmin-derived metrics and scores may be visible to other participants (see “How We Share Your Information” below). We do not use Garmin data for any purpose other than providing the features you enable, and we never share it with advertisers or data brokers.

How Garmin data is processed and stored. Garmin transmits your data to our servers over an encrypted (HTTPS) server-to-server connection. We process and store it using Google Firebase and Google Cloud Platform (Cloud Functions for processing and Cloud Firestore for storage), hosted in the United States. Google acts as our data sub-processor under its data-processing terms. Garmin data is never processed by, shared with, or used to train any third-party artificial-intelligence service or any external data-processing service.

Third parties. Other than Google (Firebase/Cloud) as described above, we do not share Garmin data with any third party, except (a) other participants in wellness challenges or leaderboards you choose to join, who can see your derived metrics and scores, (b) recipients of leaderboard content members choose to share as described below, and (c) where required by law. We never sell Garmin data, share it with advertisers or data brokers, or use it for targeted advertising.

Disconnecting Garmin. You can disconnect Garmin at any time in the app’s connection settings. Disconnecting calls Garmin’s deregistration endpoint, after which Garmin stops sending us new data and your stored Garmin access tokens are deleted. Garmin data already incorporated into your check-ins and history is retained unless you request deletion (see “Data Retention & Deletion” below).

WHOOP Data

If you connect your WHOOP account, then with your explicit authorization we collect sleep (staging, duration, quality), recovery and readiness scores, resting heart rate and HRV, strain, and workout/movement data. WHOOP data is used, processed, stored, and shared on the same basis described above for Garmin (Google Firebase/Cloud as sub-processor; visible to other participants only if you join a challenge or leaderboard; no third-party AI or advertising use). You may disconnect WHOOP at any time in the app’s connection settings, and we will stop receiving new WHOOP data upon disconnection.

Google Health (Fitbit) Data

Clean Dopamine integrates with the Google Health API, which provides data from Fitbit devices and compatible sources. If you choose to connect your Google account, then — and only with your explicit authorization through Google's OAuth consent screen — we collect the following data, limited to the scopes you approve:

• Sleep — sleep stages (deep, light, REM, awake), duration, and bed/wake times
• Activity & fitness — daily step count, distance, active time, and exercise/workout sessions
• Health metrics — resting heart rate and heart rate variability (HRV)

You may grant some scopes and not others; we only receive — and only request — the data categories you approve, and the features tied to any scope you decline simply remain empty.

How we use Google Health data. Google Health data is used to let you view your Fitbit-derived sleep, activity, and heart metrics within Clean Dopamine alongside your other key metrics (such as screen time, sleep, and habits), including in the summary scores and trends the app displays. If you choose to participate in optional wellness challenges or group leaderboards, your derived metrics and scores may be visible to other participants (see "How We Share Your Information" below). We do not use Google Health data for any purpose other than providing the features you enable, and we never share it with advertisers or data brokers.

How Google Health data is processed and stored. Google Health data is transmitted to our servers over an encrypted (HTTPS) server-to-server connection and is processed and stored on the same basis described above for Garmin (Google Firebase / Google Cloud Platform as sub-processor, hosted in the United States). Google Health data is never processed by, shared with, or used to train any third-party artificial-intelligence service or any external data-processing service, and is never used for advertising.

Limited Use disclosure. Clean Dopamine's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Disconnecting Google Health. You can disconnect at any time in the app's connection settings. Disconnecting revokes our access token with Google, after which we stop receiving new data and your stored tokens are deleted. You may also revoke Clean Dopamine's access directly from your Google Account security settings at any time. Data already incorporated into your check-ins and history is retained unless you request deletion — including deletion of your Google Health history specifically (see "Data Retention & Deletion" below).

Apple Health & Other Connected Wearables

You may also connect other supported sources (such as Apple Watch via Apple Health, or Strava). In these cases we may receive heart rate, movement, sleep staging, activity, and related metrics, strictly with your explicit authorization, and handle them on the same basis described above.

Invitations & Referral Attribution

When your account is created or next connects to our referral service, we assign it a unique referral identifier. Invitations you share can include that identifier alongside the group code. If you open a referral link or enter someone else's referral code in Settings, we may record the referring account, your account, the code, whether it came from a link or manual entry, and when credit was recorded. We also record attempt counts and time windows to limit misuse. Referral attribution is separate from group membership and does not itself grant a discount or change your subscription. We do not use wearable or health data to determine referral credit.

A referral identifier is visible in the invitation URL; it is not a password. Someone receiving or forwarding the link can also forward its referral identifier. We use these identifiers to recognize invitations within Clean Dopamine, not to track your activity across other companies' apps or websites.

Messages Extension & Sharing

If you use the Clean Dopamine Messages extension, the main app makes a limited sharing cache available on your device. It contains your account identifier, group names and codes, your referral identifier, and saved leaderboard images with their preparation or update times. Images may include participating members' displayed names, rankings, and wellness metrics for the selected category and time range. The extension uses this cache to let you preview and prepare content for sharing; it does not receive your sign-in credentials or raw HealthKit records. You choose when to send the prepared message using Messages.

Technical Information

We also collect standard technical information such as IP address, device type, and usage or error logs to help maintain security, performance, and reliability. This is separate from your wearable health data.

2. How We Use Your Information

We use the information we collect to:

• Operate and improve the Clean Dopamine platform
• Let you view and track your Garmin-derived and self-logged data over time, alongside other key metrics like screen time and habits
• Support check-in and optional social features you choose to use
• Recognize referrals from invitation links or codes you enter, record attribution, and prevent duplicate or abusive claims, without using your health data for that purpose
• Analyze aggregated or de-identified app-usage patterns to understand how the product is used; this excludes your raw Garmin and other wearable health data, and cannot be used to identify you
• Maintain the security, performance, and reliability of our systems

We do not use your Garmin or other wearable health data to train artificial-intelligence models or for any analytics beyond operating the features you have enabled.

3. How We Share Your Information

We do not sell your data, rent it, or share it with advertisers or data brokers, and we never use your information for targeted advertising.

Your data is shared only in the following situations:

• Service Providers (sub-processors): We use Google Firebase / Google Cloud Platform (Cloud Functions and Cloud Firestore) to process and store your data, including Garmin and other wearable data, under Google’s data-processing terms. We do not use any other third-party processor for wearable health data.
• Wellness Challenges & Leaderboards: If you choose to participate in optional wellness challenges or group leaderboards, the metrics and scores derived from your wearable data, including Garmin-derived data, are visible to the other participants. This is entirely opt-in, and you can stop at any time. Only derived metrics and scores are shared this way; never your raw data, and we do not provide it to advertisers or data brokers. Members can also share leaderboard images as described below.
• Invitations & Shared Leaderboards: Invitations may reveal the group name, join code, and sender's referral identifier. Group members can choose to export leaderboard images through Messages or other sharing apps. Those images may include other participants' displayed names, rankings, and derived wellness metrics, and recipients may be outside the group. Recipients can save or forward the content. Messages and any other service you choose handle sent content under their own terms and privacy policies; we cannot retract their copies when you leave a group or delete your account.
• Website Hosting: Our website and invitation pages are hosted by Netlify. Serving a page may involve processing your IP address, browser information, and requested URL, including a group code or referral identifier in an invitation link. Invitation URLs do not contain raw health records.
• Healthcare Providers: With healthcare providers or other professionals only when you explicitly opt in. Summarized reports, rather than raw data logs, are provided. You control this access, must grant it yourself, and may revoke it at any time.
• Legal Requirements: If required by law, regulation, or valid legal process.

Except as described above, wearable-derived data is never shared with any third party, including advertising networks, analytics providers, data brokers, or third-party AI services, without your explicit consent.

4. Data Storage & Processing

Your data, including Garmin and other wearable data, is stored and processed on Google Cloud Platform / Firebase infrastructure located in the United States (Cloud Firestore for storage, Cloud Functions for processing, Firebase Cloud Messaging for notifications). Google processes this data solely as our sub-processor to provide the service.

The app also stores limited information locally to support invitations and sharing. A pending referral link is eligible for attribution for up to 30 days. It is cleared after processing or replaced by a new pending link; once bound to an account, it is also discarded on sign-out or a switch to another account. The Messages sharing cache is cleared on sign-out or account change. Cached group information becomes unavailable to the extension after 24 hours without a refresh, although saved image files may remain locally until replaced or cleared. These local limits do not delete content already inserted into or sent through Messages.

5. Data Security

We take security seriously and use industry-standard safeguards, including encrypted data transmission, secure storage, and restricted access controls. Although no system is perfectly secure, we continuously monitor and update our protections to keep your data safe.

6. Data Retention & Deletion

We retain your information as needed to provide the features you use, respond to deletion requests, and meet applicable legal obligations. Disconnecting a wearable stops new syncing from that connection; it does not by itself erase data already incorporated into your history.

You can request account deletion in the app under Settings → Manage Account → Delete Account, or contact us at connect@clean-dopamine.com for account or specific-data deletion, including connected-wearable history. The in-app flow records a deletion request, freezes the account, initiates disconnection of linked wearables, and signs you out. It displays a 30-day cancellation window and a scheduled deletion date. To cancel a pending request during that window, sign back in and use the account-restoration option; disconnected wearables must be connected again.

Submitting a request is not confirmation that permanent deletion has completed. Contact us at connect@clean-dopamine.com to ask about completion or request assistance. Deletion is subject to any retention required by law. Deleting your Clean Dopamine account does not cancel an Apple subscription; manage or cancel that subscription separately through your Apple account.

Referral identifiers and recorded attribution are retained with the associated accounts until deletion is processed. Processing a recipient's deletion removes their referral attribution. Processing a referrer's deletion removes their identifier and their identifying link from credited referrals; an anonymized record may remain on the recipient's account to prevent assigning credit again. Temporary pending links and the Messages cache follow the local limits described above. Account deletion cannot remove messages or images already saved or forwarded by recipients or other services.

7. Your Rights & Controls

You may, at any time:

• Request access to your data or ask for corrections
• Disconnect Garmin, WHOOP, Google Health (Fitbit), or any other connected wearable, revoking our access to new data from that source
• Revoke healthcare-provider access or other sharing permissions, and leave any challenge or leaderboard
• Request account deletion in Settings → Manage Account → Delete Account, or contact us to request deletion of specific data
• Request a portable copy of your data

To exercise any of these rights, contact us at connect@clean-dopamine.com.

8. Children’s Privacy

Clean Dopamine is intended for users 18 and older. If we become aware of data collected from a minor without proper consent, we will delete it promptly.

9. Changes to This Policy

We may update this policy occasionally. If we make material changes, we will notify you through the website or in-app. Continued use of Clean Dopamine following any update means you accept the revised policy.

10. Contact Us

For questions, requests, or concerns about this Privacy Policy or how we handle your data, please contact us at connect@clean-dopamine.com.