Privacy Policy
Your privacy matters. Here’s exactly what we collect, why, who else touches it, and what you can do about it.
Effective September 9, 2026
This policy covers the Let's Reset mobile app and the Let's Resetwebsite (together, the “Service”), owned and operated by Blue Chalk Pty Ltd(“we,” “us,” “our”). It forms part of our Terms of Service. We’ve written it in plain language so you can actually understand it.
The short version
- We do not ask you to create an account. There is no login, and we never ask for your name, email, or password to use the app.
- We do store a random device identifier. It is how we know which subscription is yours, and it is the closest thing to an “account” we have.
- We store the moods you pick, so the app can give you different content each session and so we can see which content is worth making more of.
- We do not sell your personal information, and we do not use your mood selections to advertise to you.
- Two companies process data on our behalf: Google (Firebase) and RevenueCat. Both are named below.
Information we collect
We collect only what the app needs to work. There is no account, so there is no profile, no email address, and no password.
A device identifier
When you first open the app, we generate or read a persistent device identifier and store it on your device.
- On iOS this is Apple’s
identifierForVendor— an ID Apple assigns to your device for our apps specifically. It is not your Apple ID, and it does not identify you across other companies’ apps. - On Android this is the Android ID.
- If neither is available, we generate a random ID instead.
This identifier is the primary key for everything else in this policy. It is the name of your record in our database and it is the ID we give to our subscription provider so your Premium access can be recognised. It persists until you delete the app (and, on iOS, every other app of ours on that device).
We are naming this plainly because it matters: under GDPR a persistent device identifier is personal data, even though it is not your name.
An anonymous sign-in
The first time you open the app, it silently creates an anonymous authentication session with Google Firebase. This is a technical measure that lets our database tell a real app from a random script — it involves no username, no password, and no personal detail from you. You are not asked to do anything and there is nothing to remember.
Your mood selections
Each time you choose a mood, we record that choice with a timestamp against your device identifier. We use it to rotate the content you receive so you do not get the same session twice, and to understand which moods people actually reach for.
Session activity
We record when a session takes place, which mood it was for, and the device identifier it belongs to, and we keep a simple per-mood counter of how many sessions have run. This tells us which content is being used. It contains no message content and nothing you have typed.
Subscription status
If you buy Premium, we process and store whether your subscription is currently active, and when it renews or lapses. See Section 4.
Anything you send us
If you email us or use a contact form, we receive whatever you put in it — typically your name, email address, and your question. We do not ask for, and do not want, sensitive personal information beyond what you voluntarily share.
What we do not collect
We do not collect your name, email address, contacts, photos, location, microphone or camera input, health records, or advertising identifiers, and we do not track you across other companies’ apps or websites.
How we use your information
| What we use | What for |
|---|---|
| Device identifier | Recognising your subscription; keeping your session history attached to your device |
| Mood selections | Choosing and rotating the content you receive |
| Session activity | Understanding which content is used, so we make more of what helps |
| Subscription status | Unlocking Premium content you have paid for |
| Anonymous sign-in | Keeping our content database closed to scripts and scrapers |
| Anything you send us | Answering you |
We do not sell your personal information. We do not share it with advertisers. We do not use your mood selections to advertise to you, and we never will.
Who processes your data
We use two providers to run the Service. Both act on our instructions, and both are bound by their own agreements and privacy commitments.
| Provider | What they do for us | Their policy |
|---|---|---|
| Google (Firebase) — Cloud Firestore, Firebase Authentication | Stores your device record, mood history and session activity. Provides the anonymous sign-in. | Firebase privacy · Google privacy policy |
| RevenueCat, Inc. | Manages subscription and entitlement status, keyed to your device identifier. | RevenueCat privacy policy |
In addition, Apple and Google Play distribute the app and process your payment if you subscribe. They are not acting on our behalf — they are separate controllers of the payment data, under their own privacy policies. We never see your card details.
Subscriptions and payments
Premium is an auto-renewing subscription sold through the Apple App Store or Google Play.
We never see or store your payment details. Your card, billing address and purchase history stay with Apple or Google. What we receive, through RevenueCat, is the answer to one question: is this device’s subscription currently active?
That entitlement is tied to your device identifier and to your store account. It is not tied to a personal profile, because we do not have one for you.
Billing, renewal, cancellation and refund terms are set out in Section 7 of our Terms of Service.
Where your data goes
Our providers are based in the United States, and Firebase stores data in Google’s cloud infrastructure. If you use the Service from outside the US — including from the UK, the EEA, or Switzerland — your information is transferred to and processed in a country whose data protection laws may differ from your own.
Where such a transfer takes place, we rely on the transfer mechanisms our providers make available, including the European Commission’s Standard Contractual Clauses and, where applicable, the EU–U.S. Data Privacy Framework.
How long we keep it
| Data | Retention |
|---|---|
| Device identifier and device record | While you use the app, and for up to 24 months after your last session |
| Mood history | Up to 24 months from each entry |
| Session activity | Up to 24 months from each entry |
| Aggregate counters (e.g. total sessions per mood) | Kept indefinitely — these contain no identifier and cannot be traced to you |
| Subscription status | For the life of the subscription, plus the period RevenueCat and the app stores require for billing and tax records |
| Emails you send us | For as long as needed to resolve your question, and to keep a record of it |
Deleting the app removes the identifier stored on your device. On iOS, if you have no other app of ours installed, Apple retires the identifierForVendor — which means the record on our side is permanently orphaned and can no longer be connected to you or recovered by you.
Your rights and choices
You can ask us to access, correct, or delete the information held against your device.
Because there is no account, we need your device identifier to find your record — otherwise we cannot tell which of many anonymous records is yours, and we will not guess. You can find it in the app under Settings → Privacy → Your device ID, where there is a button to copy it. Include it in your request.
Email hello@letsreset.net and we will respond within 30 days.
You can also, at any time and without contacting us:
- Stop the collection entirely by deleting the app.
- Reset your identity by clearing the app’s data (Android) or deleting and reinstalling it (iOS, where it is the only app of ours on the device). You will get a new device identifier and a clean record — but note that this may disconnect your Premium subscription from the app until you use Restore.
We cannot action a deletion request we cannot verify. If you cannot supply the device identifier — for example because you have already deleted the app — the record can no longer be linked to you by anyone, including us.
Your regional rights
If you are in the UK, EEA or Switzerland (UK GDPR / GDPR)
You have the right to access your data, to have it corrected or erased, to restrict or object to how we use it, to data portability, and to withdraw consent where we rely on it. You also have the right to complain to your local supervisory authority — in the UK, the Information Commissioner’s Office.
We rely on these legal bases:
| Processing | Legal basis |
|---|---|
| Device identifier, mood selections, content delivery, subscription status | Contract (Art. 6(1)(b)) — we cannot provide the Service without them |
| Anonymous sign-in, protecting content from scraping | Legitimate interests (Art. 6(1)(f)) — securing our service and our intellectual property |
| Session activity and counters | Legitimate interests (Art. 6(1)(f)) — understanding which content is worth producing |
| Answering your emails | Legitimate interests (Art. 6(1)(f)) — responding to you |
The data controller is Blue Chalk Pty Ltd, contactable at the email address in Section 12.
If you are in California (CCPA / CPRA)
In the twelve months before the effective date of this policy we collected the category of personal information described as identifiers (a device identifier) and internet or other electronic network activity (mood selections and session activity), for the business purposes set out in Section 2.
We have not sold or shared personal information, and we do not. We do not have actual knowledge of selling or sharing the personal information of anyone under 16.
You have the right to know what we collect, to request deletion or correction, to opt out of sale or sharing (there is nothing to opt out of), and not to be discriminated against for exercising these rights. Use the process in Section 7 — we treat every request the same regardless of where you live.
If you are in Australia (Privacy Act 1988)
We handle personal information in line with the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth). The device identifier described in Section 1 is personal information under that Act to the extent it can reasonably identify you.
You may ask for access to the personal information we hold about you, and ask us to correct it, using the process in Section 7 — we need your device identifier to find your record. We will respond within 30 days, and if we refuse access or correction we will tell you why in writing.
As set out in Section 5, our providers store and process information in the United States. Before personal information is disclosed overseas we take reasonable steps to ensure it is handled consistently with the APPs, including relying on the contractual protections and transfer mechanisms those providers offer.
If a data breach occurs that is likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.
If you believe we have breached the Australian Privacy Principles, contact us first at hello@letsreset.net and we will investigate and respond within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).
Children’s privacy
Let's Reset is not directed to children under 13, or the minimum age required in your region, whichever is higher. We do not knowingly collect personal information from children under that age. If you believe a child has provided us with information, contact us and we will delete it.
Data security
We take reasonable technical and organisational measures to protect your information. In practice that means: our database requires an authenticated app session to read, clients cannot enumerate the user list, clients cannot modify or delete content, and all traffic is encrypted in transit with TLS.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. What we can say is that we do not hold the information that would make a breach costly to you — no names, no email addresses, no passwords, and no payment details.
Ownership and intellectual property
All content in the Service — every written word, every audio recording and narration, the scripts, artwork, design, branding, and the Let's Reset name — is owned by or licensed to Blue Chalk Pty Ltd. All rights are reserved.
Reproducing, distributing, or making persistent copies of this content without permission is prohibited. The full restrictions are in Section 5 of our Terms of Service.
© 2026 Blue Chalk Pty Ltd. All rights reserved.
Changes and contact
We may update this policy. When we do we will revise the Effective date at the top of this page, and we will highlight significant changes where appropriate. Continuing to use the Service after a change takes effect means you accept the updated policy.
Questions, requests, or concerns about privacy:
Let's Reset
Owned and operated by Blue Chalk Pty Ltd
hello@letsreset.net