Privacy policy
Last updated: November 1, 2026
VOW is made for someone who hasn't told anyone. We collect only what the lock and the monk need to work, nothing more. This page applies the EU General Data Protection Regulation (GDPR) and the French Data Protection Act.
Data controller
Antoine Fraboulet, entrepreneur individuel (micro-entreprise), publisher of the VOW app, 44 boulevard du Temple, 75011 Paris, France. Contact: nofapplication@gmail.com.
What stays on your phone
Your streak, your record, your relapses, your answers to the questionnaire, your logbook and your moods stay in the app's local storage. So does your first name, unless you use the friends competition (see below). They are sent nowhere and disappear when you delete the app.
What we process, why, and for how long
| Data | Purpose and legal basis | Retention |
|---|---|---|
| Pseudonymous Apple identifier, received through Sign in with Apple. No name, no email. | Linking your vault to your account. Performance of the service you request (Art. 6(1)(b)). | Until you delete your account. |
| Four digit Screen Time passcode | Giving it back to you after the delay, or earlier if you are stuck and write to support with your support number (Profile, help). The publisher may look it up for that reason only. Performance of the service (Art. 6(1)(b)). | Until you empty the vault or delete your account. |
| Session tokens, random | Recognizing you without asking you to sign in again. Performance of the service (Art. 6(1)(b)). | 400 days at most. |
| A hash of your IP address, never the address itself, and daily message and code-attempt counters | Limiting abuse and protecting the service. Legitimate interest (Art. 6(1)(f)). | 2 days. |
| Your first name, the start of your streak and the list of friends you linked, only if you use the friends competition | Showing your first name and your number of days to the friends you linked yourself, and seeing theirs. Performance of the service (Art. 6(1)(b)). This is the first name you choose in the app, never your Apple name. | Until you remove the friend or delete your account. |
| Friend code, eight characters derived from your identifier, distinct from the support number | Letting a friend who has this code link to your account. Performance of the service (Art. 6(1)(b)). | Until you delete your account. |
| Messages written to the monk, with your streak, your record, the context ticked in urge mode and a few questionnaire answers as checkboxes | Producing the monk's reply. Your explicit consent, asked in the app before the first message (Art. 6(1)(a) and 9(2)(a): these messages may concern your sex life or your health). | Not stored by us: they pass through our server without being recorded. See Anthropic below. |
Technical error logs, without the content of your messages or your passcode, may be kept for a few days by our host to diagnose an outage.
The monk's artificial intelligence
The monk is a language model, not a person. To answer you, our server sends your conversation to Anthropic PBC (United States), which provides the model. Anthropic does not use data sent through its API to train its models and keeps it only for a limited time, under its privacy policy. Nothing is sent without your consent, and you can withdraw it at any time in the app: Profile, Privacy. Withdrawing your consent does not affect exchanges already made.
Filtering
The “Limit Adult Websites” filter is iOS's own: it runs on your device, VOW only guides you through turning it on, and it sends us nothing. We see neither the sites you visit nor the ones that are blocked.
Recipients and processors
- Cloudflare, Inc. (United States): hosts the server and the vault storage.
- Anthropic PBC (United States): produces the monk's replies, only if you consented.
- Apple: Sign in with Apple and payments. We never see your payment details.
- Mixpanel, Inc. (United States, data hosted in the European Union): audience measurement. Six events only (onboarding finished, subscription screen shown, trial, purchase, return after one day and after seven days), tied to a random identifier generated on your device, with no link to your Apple account. Never your streak, your urges, your messages or your first name. Your IP address is not used to locate you.
No data is sold, rented or used for advertising. No advertising trackers, no advertising identifier.
The vowblock.com website
The website sets no cookie and stores nothing on your device. To learn which pages are useful, it sends Mixpanel (data hosted in the European Union) one event when a page loads, when you reach the bottom of a guide and when you tap the download button. That event holds the page address, the site you came from (google.com, for example), its category, the language and the type of device (iPhone, iPad, Android or computer). Each page view gets a random identifier that is never reused: two pages can't be linked to the same person, and the website can't be linked to the app. Your IP address is not used to locate you. Legal basis: legitimate interest in measuring the website's audience (Art. 6(1)(f)). The website is hosted by Cloudflare.
Transfers outside the European Union
Cloudflare and Anthropic are based in the United States. These transfers are covered by the EU US Data Privacy Framework when the provider is certified under it, and otherwise by the standard contractual clauses adopted by the European Commission.
Your rights
You have the right to access, rectify, erase, restrict, object to and port your data, as well as the right to withdraw your consent at any time and to set instructions for what happens to it after your death. To exercise them, write to nofapplication@gmail.com. Since we know neither your name nor your email, we may ask you to make the request from the app to check that it really comes from you.
You can also lodge a complaint with the French data protection authority, the CNIL, or with the authority of the country where you live.
Deleting your data
In the app: Profile, Leave, Delete my account. Your first name, your streak and your friend links are erased with the account, and your friends no longer see you. If no passcode is stored, deletion is immediate and permanent. If a passcode is stored, deletion follows the same delay as releasing it and the passcode is returned to you at the end: otherwise you would be left with a lock that nobody can open.
Security
Exchanges with our server are encrypted (HTTPS). The Apple sign in is verified by signature, and the AI model key never leaves the server. The identifier we hold is pseudonymous, not anonymous: we protect it as personal data.
Age
VOW offers free access to under-18s after age verification. Downloads remain subject to the App Store age rating and parental settings.
Optional ID and selfie verification
With your agreement, Didit directly receives your ID document and selfie, checks the document, liveness and face match. Didit provides access to verification data and images through its console and API. Our server reads the response and your date of birth in memory, without downloading images or retaining your identity or date of birth. The app only receives an under-18 result or not. We keep that result linked to a pseudonymous session for up to 90 days, ending by your 18th birthday, to grant free access. Other results are kept for up to 24 hours.
Didit verification retention is set to one month. Persistent face-template search and use for model training are disabled. See Didit's privacy policy for its processing and retention periods. You can delete VOW's verification record from Profile, delete age verification. Free access then ends. No age result is sent to analytics.
Changes
If this policy changes in a significant way, especially regarding what is sent to the monk, the app will ask for your consent again.
This is a translation of the French privacy policy, which prevails in case of disagreement.