Privacy policy
Last updated: September 22, 2026
NoFapp is made for someone who hasn't told anyone. We collect only what the lock and the monk need to work, nothing more. This page applies the EU General Data Protection Regulation (GDPR) and the French Data Protection Act.
Data controller
Antoine Fraboulet, publisher of the NoFapp app. Contact: nofapplication@gmail.com.
What stays on your phone
Your streak, your record, your relapses, your first name, your answers to the questionnaire, your logbook and your moods stay in the app's local storage. They are sent nowhere and disappear when you delete the app.
What we process, why, and for how long
| Data | Purpose and legal basis | Retention |
|---|---|---|
| Pseudonymous Apple identifier, received through Sign in with Apple. No name, no email. | Linking your vault to your account. Performance of the service you request (Art. 6(1)(b)). | Until you delete your account. |
| Four digit Screen Time passcode | Giving it back to you after the delay, or earlier if you are stuck and write to support with your support number (Profile, help). The publisher may look it up for that reason only. Performance of the service (Art. 6(1)(b)). | Until you empty the vault or delete your account. |
| Session tokens, random | Recognizing you without asking you to sign in again. Performance of the service (Art. 6(1)(b)). | 400 days at most. |
| A hash of your IP address, never the address itself, and daily message counters | Limiting abuse and protecting the service. Legitimate interest (Art. 6(1)(f)). | 2 days. |
| Messages written to the monk, with your streak, your record, the context ticked in urge mode and a few questionnaire answers as checkboxes | Producing the monk's reply. Your explicit consent, asked in the app before the first message (Art. 6(1)(a) and 9(2)(a): these messages may concern your sex life or your health). | Not stored by us: they pass through our server without being recorded. See Anthropic below. |
Technical error logs, without the content of your messages or your passcode, may be kept for a few days by our host to diagnose an outage.
The monk's artificial intelligence
The monk is a language model, not a person. To answer you, our server sends your conversation to Anthropic PBC (United States), which provides the model. Anthropic does not use data sent through its API to train its models and keeps it only for a limited time, under its privacy policy. Nothing is sent without your consent, and you can withdraw it at any time in the app: Profile, Privacy. Withdrawing your consent does not affect exchanges already made.
Filtering
NoFapp's DNS filter sends your phone's DNS queries to Cloudflare's family resolver (1.1.1.3), directly, without going through our server. We see neither the sites you visit nor the ones that are blocked. Cloudflare handles these queries under its public resolver policy. iOS's “Limit Adult Websites” filter runs on your device and sends us nothing.
Recipients and processors
- Cloudflare, Inc. (United States): hosts the server and the vault storage.
- Anthropic PBC (United States): produces the monk's replies, only if you consented.
- Apple: Sign in with Apple and payments. We never see your payment details.
No data is sold, rented or used for advertising. No trackers, no analytics tools, no advertising identifier.
Transfers outside the European Union
Cloudflare and Anthropic are based in the United States. These transfers are covered by the EU US Data Privacy Framework when the provider is certified under it, and otherwise by the standard contractual clauses adopted by the European Commission.
Your rights
You have the right to access, rectify, erase, restrict, object to and port your data, as well as the right to withdraw your consent at any time and to set instructions for what happens to it after your death. To exercise them, write to nofapplication@gmail.com. Since we know neither your name nor your email, we may ask you to make the request from the app to check that it really comes from you.
You can also lodge a complaint with the French data protection authority, the CNIL, or with the authority of the country where you live.
Deleting your data
In the app: Profile, Leave, Delete my account. If no passcode is stored, deletion is immediate and permanent. If a passcode is stored, deletion follows the same delay as releasing it and the passcode is returned to you at the end: otherwise you would be left with a lock that nobody can open.
Security
Exchanges with our server are encrypted (HTTPS). The Apple sign in is verified by signature, and the AI model key never leaves the server. The identifier we hold is pseudonymous, not anonymous: we protect it as personal data.
Age
NoFapp is for adults only (18 and over).
Changes
If this policy changes in a significant way, especially regarding what is sent to the monk, the app will ask for your consent again.
This is a translation of the French privacy policy, which prevails in case of disagreement.