Dubz Up · Last updated 19 September 2026
Dubz Up is a daily-wins tracker. This policy explains what the app collects, why, and what it deliberately does not collect. It is written to be read, not to be survived.
Dubz Up is operated by Chris Stone (“we”, “us”). For anything in this policy, including requests about your data, contact hello@dubzup.com.
The app creates an anonymous account on first launch. It is a random identifier and nothing more — no email, no name, no device fingerprint. It exists so your wins are backed up rather than living only on the phone.
An anonymous account cannot be recovered. The key to it is stored on this device only, so deleting the app, resetting the phone or moving to a new one leaves those wins unreachable — there is no password or code that would let us give them back, and we cannot identify which account was yours. Sign in with Apple is the only way to get your wins onto another device.
If you later choose Sign in with Apple, we receive the identifier Apple gives us, plus your name and email address only if you choose to share them. Apple lets you hide your real email; if you do, we only ever see the relay address. Signing in is optional and is offered as a backup, never as a requirement.
| Data | Why |
|---|---|
| Wins you log (the text and the date) | They are the product. They form your receipts and your streak. |
| Big Wins, and why they matter to you | To show progress toward them. |
| Your first name, your stated dream, chosen traits and alter ego | Collected during onboarding to personalise the app’s copy. |
| Time zone | Streaks reset at your local midnight. Without it we would reset at the wrong time. |
| Settings — reminder time, sound, haptics | To apply your preferences. |
| Subscription status and expiry | To unlock paid features. |
This information is stored on your device and synced to our database so it is not lost if you change or lose your phone.
We cannot see which apps you choose to lock, and neither can anyone else. Win Lock uses Apple’s Screen Time (Family Controls) framework. When you pick apps, Apple hands the app opaque tokens rather than names or icons — the app is technically incapable of identifying them. Those tokens never leave your device.
What does reach our database is only whether Win Lock is switched on and how many wins you set as the target. Not which apps. Not how long you spent in them. Not how many you picked.
Only if you say yes. We ask during setup, and we record nothing at all unless you tick it. You can change your mind at any time in Settings → Usage Data; switching it off also discards anything still waiting to be sent.
If you do agree, we record a small, fixed list of events so we can tell where the app is confusing or broken — for example that a screen was viewed, a win was logged, the paywall was shown or dismissed, or a subscription started. Events are tied to your account identifier and carry no advertising identifier and no third-party analytics SDK. We run this ourselves rather than handing it to an analytics company.
We never record the text of your wins, your name, or anything about the apps you lock — including how many you picked.
Reminders are scheduled on your device, not sent from a server. We have no push notification system, and the app works with no signal. If you decline notifications, the app never asks again.
We do not sell your data or share it for advertising. We use a small number of providers to run the service:
| Provider | Role |
|---|---|
| Supabase | Database and authentication hosting. Your synced data is stored here. |
| Apple | App distribution, payments and subscription management, and Sign in with Apple. |
| RevenueCat | Subscription management. Receives your anonymous account identifier and App Store purchase and subscription information so the app knows whether you have Pro. It does not receive your wins or profile. |
| Hostinger | Email hosting, if you contact us by email. |
We may disclose information if legally required to do so, or to protect our rights or the safety of others.
Data is stored on servers in the United Kingdom (our database is hosted in Supabase’s London region). Where data is transferred outside the UK or EEA, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or Standard Contractual Clauses.
We keep your data while your account exists.
Deleting a win removes it from your phone immediately and from our database as soon as the app can reach it. If you delete a win while offline, the app remembers and completes the deletion on our side the next time it connects.
Deleting your account removes your profile, wins, Big Wins, settings and analytics events permanently — deletion cascades, so nothing is left behind under a stale identifier. If you used Sign in with Apple, we also ask Apple to revoke the app's access to your Apple ID; if that cannot be completed at the time, the app tells you so and shows you how to finish it yourself. Backups may persist for a short period before being overwritten.
Deleting your account also deletes your subscription record held by RevenueCat, our payments provider. You do not have to ask us for this and you do not have to email anyone — it happens as part of the same step. If it cannot be completed at the time, the app tells you.
One record survives, and it is not ours to remove: Apple keeps its own history of your purchases and subscriptions. That is what makes Restore Purchases work, and only Apple can change it.
Under UK and EU data protection law you have the right to access, correct, delete, restrict or object to our processing of your data, and to receive a copy in a portable format. You can exercise most of these directly in the app. For anything else, contact hello@dubzup.com and we will respond within one month.
You also have the right to complain to a supervisory authority. In the UK that is the Information Commissioner’s Office (ico.org.uk).
Dubz Up is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has provided us with personal data, contact us and we will delete it.
Data is encrypted in transit. Our database enforces row-level security, so each account can only ever read and write its own rows. Subscription status is writable only by our server, never by a device. No system is perfectly secure, and we cannot guarantee absolute security.
If we change this policy we will update the date at the top, and for significant changes we will tell you in the app.