Privacy Policy
Effective July 1, 2026. This policy covers both the Electric Nipple Clamps mobile app and this website.
Electric Nipple Clamps (“ENC,” “we”) is an accountability app for people working to control gambling, sports betting, and similar compulsive habits. It counts — on your own device — how often and how long the apps you choose to watch come to the foreground, and, if you ask it to, emails a short categorical summary to the accountability partner you designate (your “Clamp of Record”) — one primary partner, plus up to two optional backups, each requiring their own separate authorization from you and their own acceptance. This policy explains what we collect, what we never collect, what your partner can and cannot see, and how you delete it.
The short version
- Counting happens on your device. We never receive the names of the apps you watch, any websites, your screen contents, messages, or search terms.
- Our backend receives only category counts, coarse session-length buckets, and a salted per-account token that is not derived from any app, site, or content.
- Nothing is shared with an accountability partner unless you designate one and that partner explicitly accepts. Either of you can end it at any time.
- What a partner sees is limited to gambling/speculation category counts — never explicit-content categories, never an app or site, never content.
- You can delete your data (see below). We do not sell your data.
Waitlist
If you joined our waitlist, we collect your email address solely to notify you about the app. We do not share it and do not use it for anything else. To be removed, email [email protected].
Website analytics
This website — not the app — uses Microsoft Clarity, Cloudflare Web Analytics, and
Google Analytics 4 to understand how visitors use the page. Clarity records page interactions
and heatmaps with text masking enabled; the waitlist email field is additionally masked, so your
email address is never captured in a recording. Cloudflare Web Analytics is cookieless and
aggregate-only. Google Analytics 4 sets first-party analytics cookies (_ga,
_ga_*) used only for analytics, never advertising; you can opt out at
tools.google.com/dlpage/gaoptout. These
tools cover this marketing site alone and are unrelated to the app’s on-device architecture.
What the app monitors
The app watches only the apps you add to your own watch list, on your own device — the speculation and betting apps you want to stay accountable about. It records that a watched app came to the foreground and roughly how long it stayed there. Web browsing is not visible in this version; this limitation is disclosed proactively, and an expanded scope is on the roadmap. On iOS the app uses Apple Screen Time (Family Controls) with individual authorization — you monitoring your own device; on Android it uses the Usage Access permission. In neither case does the app read your screen.
How apps are categorized
Categorization happens entirely on your device, by matching the app in the foreground against the watch list you built and the category you assigned it. No outside classification service is used under default operation.
What our backend receives
Because categorization happens on your device, the backend receives only category-level counts, coarse session-length buckets (e.g. “under 2 minutes,” “over 30 minutes”), and a salted, per-account one-way token. That token is computed from a fixed neutral value — it is not derived from any app name, package, website, hostname, or screen content, none of which ever leaves your device or is ever sent to us.
Your accountability partner (the “Clamp of Record”)
Sharing is entirely optional and off by default. If you designate an accountability partner, we email that person an invitation. No summary or status notice is sent to them until they explicitly accept the role (a double opt-in, with an 18-or-older attestation). If they never accept, nothing is ever sent. If you mistype an address, the wrong person simply never accepts, and no data is shared. You may designate one primary partner and up to two optional backups; each designation requires its own signed authorization from you and its own double opt-in from that partner, and each accepted partner receives the same weekly summary. If you add an optional relationship label to a designation (for example, “sponsor”), we store it to organize your roster; it is shown only back to you and is never included in anything your partner receives.
Once a partner accepts, they receive a short weekly summary — counts by gambling/speculation category, coarse session-length buckets, a rank that reflects your clean-day streak, and a week-over-week trend. There are no real-time usage alerts; the only other message a partner may receive is an occasional content-blind status notice — that your device stopped reporting or your subscription ended, with your name and a date, never usage data. What a partner sees is limited to the gambling/speculation category family; explicit-content categories are never named to a partner, even if the on-device categorization is wrong. A partner never sees an app or venue name, a website, your screen, your messages, or anything you typed.
Either of you can end the relationship at any time — you from the app, and your partner via the link in any message they receive — and sharing stops immediately. We deliver these emails through our email provider, Resend, which acts only as a delivery conduit.
Consumer health data (Washington “My Health My Data” Act and similar laws)
Information about efforts to control gambling or betting may be treated as “consumer health data” under Washington’s My Health My Data Act (RCW 19.373) and comparable laws. We treat it accordingly:
- Collection & consent. We collect the on-device counts described above only after you consent to self-monitoring. That consent is recorded with the exact wording you agreed to and the date.
- Sharing requires a separate authorization. Sharing category counts with an accountability partner is a distinct, optional step with its own authorization that names the specific recipient and is not a condition of using the app. The app works fully for self-monitoring without ever sharing.
- Right to withdraw. You may withdraw your sharing authorization at any time in the app; withdrawal stops future sharing.
- No sale. We do not sell consumer health data, and we do not share it for advertising.
Washington residents with questions about their consumer health data may contact [email protected].
Staff access
Our staff cannot read browsing content or screen contents — we never receive them. Backend access to the limited counts we do hold is gated by an authenticated administrative pathway with an audit trail.
Deletion & your rights
You can delete your data at any time. To request deletion, email [email protected] from, or referencing, the device or account in question. On a verified request we erase your category history, your device’s pseudonymous identifier, your watch-list snapshots, your weekly summaries, and any accountability-partner contact details and relationship labels you entered. We complete deletion promptly and no later than 30 days after a verified request; in practice it is immediate.
One narrow exception, disclosed for honesty: we retain a minimal, immutable consent record — that you authorized self-monitoring and (if applicable) sharing, the exact version of the disclosure you agreed to, and the date — as legal proof that the processing was authorized. This record contains no category counts, no app/site/host, no screen or message content, and no partner email body. It is retained only as long as the law requires and is never used for any other purpose.
Children
Electric Nipple Clamps is intended for adults (18+) and is not directed to children. We do not knowingly collect data from children.
Changes to this policy
If we change this policy we will update the effective date above and, for material changes, surface the change in the app or on this page before it takes effect.
Contact
Questions, requests, or privacy concerns: [email protected].