We built ScapeX around trust. Your recovery data belongs to you — here's exactly how we handle it.
ScapeX is a recovery and accountability application published by DIGITAL ROCKET LLC, a limited liability company incorporated in the State of Delaware, United States.
When this policy says "ScapeX," "we," "us," or "our," it means DIGITAL ROCKET LLC and the ScapeX mobile application available on the Apple App Store.
ScapeX is designed for users aged 13 and older seeking to overcome pornography addiction and build healthier habits. We take the privacy of your recovery journey extremely seriously.
We only collect what's necessary to run the app. We never sell your personal data, and we never share your recovery history with third parties for advertising purposes.
| Data Type | What It Is | Required |
|---|---|---|
| Name | Display name you provide during sign-up | Yes |
| Email Address | Used for login and account recovery | Yes |
| Password | Stored as a salted hash — never plain text | Yes |
| Apple ID Token | If you sign in with Apple — we receive only a token, not your Apple ID credentials | Optional |
| Google Token | If you sign in with Google — same token-only approach | Optional |
| Data Type | What It Is | Stored on Server |
|---|---|---|
| Streak & Relapse History | Your clean-day count and event log | Yes |
| Daily Habit Completions | Which habits you completed each day | Yes |
| Check-In Responses | Daily mood rating, urge level, and optional notes | Yes |
| Onboarding Quiz Answers | Addiction duration, triggers, recovery goals | Yes |
| AI Coaching Messages | Your conversations with the in-app AI coach, sent to our AI provider (OpenAI) to generate replies — see §2.7 | Shared with OpenAI |
| XP / Level / Rank | Gamification progress metrics | Yes |
If you grant permission, ScapeX reads the following from Apple HealthKit: steps, active calories, heart rate, and workout minutes. This data is used only to display fitness insights inside the app. It is never transmitted to our servers and never shared with any third party.
If you subscribe to the Family plan and add members, we store each member's display name, initials, streak count, activity status, and platform blocking preferences. This data is only visible to the admin account holder.
All subscriptions are purchased through Apple In-App Purchase. We store your subscription tier and expiry date. We do not store your credit card number, CVV, or banking details — payment is handled entirely by Apple.
We may collect device type, iOS version, and app version for crash diagnostics and compatibility purposes. We do not use persistent device identifiers for advertising.
ScapeX includes an optional in-app AI recovery coach ("Axiom"). When you choose to send a message to the AI coach, we transmit the following to a third-party AI provider, OpenAI, L.L.C. (the "ChatGPT" / OpenAI API), solely to generate a response:
We request your explicit consent inside the app before any chat data is sent to OpenAI for the first time. If you do not consent, no messages are sent and the AI coach is not used. OpenAI processes this data only to return a reply and, per its API terms, does not use it to train its models. This data is never used for advertising. See OpenAI's privacy policy at openai.com/policies/privacy-policy.
We never use your recovery data (streak history, check-ins, urge logs, AI chats) for advertising, marketing profiling, or sale to data brokers.
We do not sell personal data. We share data only with the following service providers, solely to operate the app:
| Partner | Purpose | Data Shared | Privacy Policy |
|---|---|---|---|
| Supabase | Database & authentication hosting | Account info, recovery data, family data | supabase.com/privacy |
| OpenAI | AI recovery coach responses (only after in-app consent) | AI chat messages, streak count, recovery mode | openai.com/policies/privacy-policy |
| Apple | In-app purchases, Sign in with Apple, App Store distribution | Purchase receipts, auth tokens | apple.com/privacy |
| Sign in with Google (optional) | Auth token only — no profile data read | policies.google.com/privacy |
We may disclose data to law enforcement when required by valid legal process (e.g., court order or subpoena) and will notify you where legally permitted.
If DIGITAL ROCKET LLC is acquired, merged, or sold, your data may transfer to the new entity. You will be notified at least 30 days in advance with the option to delete your account.
HealthKit data is processed on-device only. It is never uploaded to our servers and never shared with any third party — including Supabase, OpenAI, or our analytics providers.
We recognize that information about pornography use and addiction is deeply personal and potentially sensitive under applicable privacy laws. We treat all recovery-related data (streaks, urge logs, check-ins, quiz responses) with the same protections as health information, including:
ScapeX offers auto-renewing subscriptions (Basic monthly, Premium annual, Family annual). Payment is charged to your Apple ID or card at the time of purchase and at each renewal period.
Cancellations take effect at the end of the current billing period. No refunds are issued for partial periods, except as required by applicable law or Apple's refund policy.
If a free trial is offered, it converts to a paid subscription at the end of the trial unless cancelled at least 24 hours before the trial ends.
ScapeX is rated 13+ on the App Store and is not intended for anyone under the age of 13. We do not knowingly collect personal information from users under 13.
If you are a parent or guardian and believe your child under 13 has created a ScapeX account, please contact us immediately at privacy@pornscape.io. We will delete the account and all associated data within 7 business days.
We do not knowingly collect personal information from children under 13 as defined by the Children's Online Privacy Protection Act (COPPA). If we discover such data has been collected, it will be deleted immediately.
| Data Type | Retention Period |
|---|---|
| Account & Profile | Until account deletion + 30 days |
| Recovery / Streak Data | Until account deletion + 30 days |
| Check-Ins & Habit Logs | Until account deletion |
| Payment Records | 7 years (legal / tax requirement) |
| Anonymized Analytics | Indefinitely (no personal identifiers) |
| HealthKit Data | Never stored on servers — on-device only |
You can delete your account at any time from Settings → Account → Delete Account. Deletion removes all personal data from our servers within 30 days, except where retention is required by law (e.g., payment records).
Depending on where you live, you may have the following rights regarding your personal data:
California residents have the right to know what personal data we collect, the right to delete it, and the right to opt out of the "sale" of personal data. We do not sell personal data. To exercise your rights, email privacy@pornscape.io with subject line "CCPA Request."
If you are in the European Economic Area, you have rights under the General Data Protection Regulation, including the right to restrict processing, object to processing, and lodge a complaint with your local supervisory authority. Our lawful basis for processing is contractual necessity (to provide the app) and legitimate interest (service improvement). Email privacy@pornscape.io for any GDPR request.
We respond to all verified privacy requests within 30 days.
All data is encrypted in transit using TLS 1.3 and encrypted at rest using AES-256 in Supabase's managed PostgreSQL infrastructure hosted on AWS.
Despite these measures, no system is 100% secure. If you discover a security vulnerability, please report it responsibly to security@pornscape.io.
We may update this Privacy Policy from time to time. When we make material changes, we will:
Your continued use of ScapeX after the effective date of a revised policy constitutes your acceptance of the changes.
To exercise your privacy rights, ask a question, or report a concern:
Registered in the State of Delaware, United States
Operator of ScapeX mobile application
General support: support@pornscape.io