How we handle your information.

Who we are

Detox With Me is made by CAB Labs LLC, a Florida company. This one policy covers both the Detox With Me mobile app and this website, because the same people run both. Where something applies only to the app or only to the site, we say so.

What the app collects

The app exists to walk you through a detox you have chosen. Everything it stores is something you typed or tapped, and it stays tied to your account until you delete it.

Your account

• Your email address and the display name your sign-in provider shares with us. You sign in with Google or with Apple, through Firebase Authentication (a Google service). We never see or store a password.
• If you use Apple's Hide My Email, we store the relay address Apple gives us instead of your real one. That works fine, with one catch: a detox buddy who invites your real address will not be matched to your account.
• A display name you can change, and a profile-picture slot that is not yet used.
• Whether you have turned on the morning reminder and the evening reflection prompt.

Your health information

This is the sensitive part, so it gets its own list.

• Your detox set-up. The length you chose (7, 14, 21, or 30 days), the type of detox, your food plan, how involved you want the app to be, and which day and phase you are on.
• Daily tasks. Which of the day's tasks you ticked off, and when.
• Evening reflection. Your energy, sleep, digestion, and mood ratings (each on a 1 to 5 scale) and any notes you type, up to 240 characters a day.
• Your self-assessment. Your answers to the short intake at the start, the starting path the app recommended, and the path you actually chose. The intake includes health screening: whether you told us about a kidney or liver condition, an active gut condition, pregnancy or nursing, being under 18, mercury or mold exposure, or current alcohol or drug use. If a screening answer means the app is not right for you, we still keep that record so we can show we pointed you to a practitioner.
• Buddies. If you invite a friend, we store the email address and the name you typed for them so we can deliver the invitation and match them when they sign up. Buddies can see each other's current phase and start date only, never reflections, notes, or task details.

We use this information to run the app for you and for nothing else. We do not sell it, share it for marketing, or use it to advertise to you.

How we measure the app

We use Firebase Analytics (Google) to understand which parts of the app people actually use. It records events such as signing up, starting a detox, completing a day, finishing the self-assessment, saving an evening reflection, and opening a support tool. Each event is tied to a random user identifier, not your name or email, so we can count a returning user without knowing who they are. Analytics never receives your ratings, your notes, your self-assessment answers, or any other health information: it records that you saved a reflection, never what it said.

In the language of the App Store and Google Play privacy labels: this is Usage Data and Identifiers, linked to you.

Crash reporting

If the app crashes or hits an error, a report goes to Sentry so we can fix it. A report carries your random user identifier, the technical error, and the phone model and operating system. Before it leaves your phone, the app strips email addresses and the health fields listed above out of the report. Sentry never receives your reflections, notes, or self-assessment answers.

Reminders

Morning reminders and the evening reflection prompt are scheduled on your phone by the app itself. There is no push-notification service and no message ever leaves your device to make them work.

Where your information lives

• Your account and health information are stored in a Postgres database hosted by Neon, Inc. in the United States (AWS, US East). Only your own account can read your own rows.
• Sign-in is handled by Firebase Authentication, run by Google in the United States.
• A copy of your information is also kept on your phone, in a private database only the app can read, so the app works when you are offline.

Who else sees it

We share information only with the services we need to run the app and the site:

• Neon, Inc. hosts the database that holds your account and health information.
• Google LLC provides sign-in (Firebase Authentication) and usage measurement (Firebase Analytics).
• Apple Inc. provides Sign in with Apple and distributes the app through the App Store and TestFlight.
• Sentry, Inc. receives crash and error reports, scrubbed as described above.
• Cloudflare, Inc. serves the product photos in the support-tools catalog.
• Vercel, Inc. hosts this website and keeps ordinary server logs.
• Amazon.com, Inc. If you follow one of the Amazon links in the support-tools catalog, you leave the app and Amazon's own privacy policy applies from that point. Amazon may set a cookie that credits us for a purchase. We never send Amazon anything about you, and we cannot see who bought what. CAB Labs LLC is an Amazon Associate and earns from qualifying purchases.

None of these companies is allowed to use your information for their own marketing.

What we do not collect

• No Apple Health or HealthKit data.
• No location.
• No contacts, photos, camera, or microphone access.
• No advertising identifiers, no ad networks, and no data brokers.
• No payment information. The app is free.

What this website collects

The public website at detoxwith.me collects only what you give it: your email address, if you submit it to join the early tester list. Vercel also keeps standard request logs (time, browser, IP address, referring page) for security. We do not set advertising cookies or run fingerprinting analytics on the site.

Deleting your account

Open Settings in the app, choose Delete account, and confirm. The app immediately deletes your account record, and everything attached to it goes with it: your detoxes, tasks, reflections, buddy connections, and self-assessment. The app then removes your sign-in record from Firebase Authentication as well; if Google or Apple require a fresh sign-in before allowing that and it cannot complete, the record is removed by hand when you email us. Deletion of your data happens right away and cannot be undone. Crash reports and analytics events already sent are pseudonymous and expire under each provider's normal retention period; they are not linked back to you once your account is gone.

If you would rather we do it for you, or you want a copy of what we hold, email hello@cab-labs.co and we will respond within a reasonable time.

Age

Detox With Me is for adults. The intake routes anyone under 18 to a practitioner rather than into a protocol, and we do not knowingly keep an account for anyone under 18. If you think a minor has one, tell us and we will delete it.

Security

The app talks to our servers over encrypted connections only. Your sign-in session is kept in your phone's secure keychain. The database only ever returns rows that belong to the signed-in account. No system is perfectly secure, and we will tell you if something goes wrong that affects you.

Changes

When we change this policy in a way that affects you, we will update the date below and, for anything material, tell you in the app. This page will change before we start collecting anything new.

Contact

Questions about your information? hello@cab-labs.co.