Privacy Policy

The short version

• Liberway is for people aged 13 and over who want to quit porn. To help you, it stores sensitive things you tell it: your urges, relapses, how you feel, and your answers about porn use.
• We only use that information with your explicit consent, and only to run Liberway for you and to improve the app.
• We never sell your information, never use it for ads, and have no advertising trackers.
• You can withdraw your consent at any time from the Account page. Doing so deletes your account and the information in it.
• Your information is stored in the United States by the companies that host our app and database.

Who we are

Liberway is operated by Okaira Ltd, a company registered in England and Wales (company number 17518781), whose registered office is at 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ. Okaira Ltdis the controller of the personal information described in this policy. “We” and “us” mean that company.

We are based in the United Kingdom and follow UK data protection law (the UK GDPR and the Data Protection Act 2018) for every user, wherever you live. Liberway is available worldwide and is aimed at people in the United Kingdom, the United States, Canada, Australia, New Zealand and Ireland.

For privacy questions or requests, email support@liberwayapp.com.

Information we collect

Your account. Your email address, an account ID, the sign-in session that keeps you logged in, your age group (13 to 17, or 18 and over), and a record of when you gave or withdrew consent.

Sensitive information you give us. We treat all of this as information about your sex life and health:

• urge ratings and what you feel porn gives you when you use the urge tool;
• relapse dates, reasons and any short note you add;
• daily check-ins: how you are feeling and how the day's task went;
• survey answers, such as when you last watched porn, how often, how hard quitting feels, your confidence, and any thoughts you write;
• course feedback and the messages you send us for support.

App activity. Which lessons you watched and how far, when you finished the course, and which tools and tasks you used and when.

Purchases, if you buy access. The email used at checkout, what you bought, the amount, currency, payment status and payment reference numbers. Card details go straight to our payment provider; we never see or store your card number.

Technical information. Your country (worked out from your IP address by our hosting provider) and device type when you start using the app. For visits to our home page, we also record the referring site and your general device, browser and operating system type, with no account link. Our providers see your IP address and browser details when they deliver the service, as any website does.

We do not collect your date of birth, precise location, contacts, photos or advertising IDs, and we do not use session recording.

Your consent to use sensitive information

Because the information above is about your sex life and health, UK law treats it as special category data. We rely on your explicit consent to use it (Article 9(2)(a) UK GDPR). Before you can use Liberway, we show you what we collect and why, and ask you to tick a box to agree. The box is never ticked for you, and it is separate from our Terms.

This consent covers running the course, urge tool, check-ins, progress tracking and support for you, and improving the app. It does not cover advertising, selling your information, publishing anything you write, or training AI.

If you don't agree, you can't use Liberway, because the app is built around this information. You can withdraw your consent at any time on the Accountpage. Withdrawing stops us using your information straight away and deletes your account (see “How long we keep information”). If we change what the consent covers, we will ask you again.

How we use your information and our legal reasons

UK law requires a legal reason (a “lawful basis”) for each use. Whenever a use involves your sensitive information, we also rely on your explicit consent, described above.

• Creating your account and signing you in: necessary to provide the service you asked for (contract).
• Running the course, urge tool, check-ins, relapse tracking and progress page: contract.
• Answering your support messages: contract.
• Checking whether the app helps and improving it, using surveys, feedback and usage: your consent.
• Counting visits, sign-ups and feature use, by country and device type: our legitimate interest in understanding how Liberway is used. We only look at totals.
• Checking you are 13 or over: our legitimate interest in, and legal duties around, protecting children.
• Taking payment, giving you access, handling refunds and sending emails you need, such as sign-in codes and community invitations: contract.
• Keeping payment records, consent records and records of privacy requests: legal obligation.
• Keeping the service secure and fixing problems: our legitimate interest in a working, secure service.

We do not use your information for advertising or to make automated decisions that have legal or similarly significant effects on you. The app picks which lesson, learning or exercise to show you next using simple rules based on your answers; that is part of the service you asked for.

Who we share information with

We use service providers who process information only on our instructions:

• Supabase: our database and sign-in system. It stores all account and app information, in the United States (Ohio).
• Vercel: hosts the app and processes information while pages and requests are served. We are moving hosting to Google Cloud in the United States.
• Bunny.net: delivers course videos. It receives your browser's request for a video, not your account information.
• Resend: sends sign-in codes and invitation emails.
• Our email provider: receives emails you send us.
• Stripe: processes payments when you buy access. Stripe also uses payment information for its own purposes, such as preventing fraud, under its own privacy policy.

If you follow our invitation to the Liberway community on Discord, Discord receives information directly from you under its own privacy policy. We do not send Discord your app information.

Within Okaira Ltd, only people who need to see your information to support you or improve the app can do so. We may also disclose information where the law requires it or to protect someone's safety.

We never sell personal information, share it for advertising, or give it to data brokers.

Where your information is stored

Our database and hosting providers store and process information in the United States, so information about users outside the US is transferred there. When we transfer information from the UK or EU, we rely on the safeguards in each provider's data processing agreement: the UK–US data bridge or EU–US Data Privacy Framework where the provider is certified, or standard contractual clauses with the UK Addendum. Email us for details.

How long we keep information

• Your account and everything in it, including your sensitive information, progress and messages: while you have an account. You can delete single relapse records yourself at any time.
• When you withdraw consent or delete your account, we delete your account and the information linked to it straight away. Copies in our database provider's backups are removed when those backups are overwritten.
• Consent records: 24 months after you withdraw, so we can show we asked and stopped when you told us to. They hold only your former account ID, the consent version and the dates.
• Payment records: as long as UK tax and company law requires, usually six years. They are no longer linked to your account after it is deleted.
• Home page visit records: 30 days. Other usage events: 90 days. After that we keep only daily totals with no account details.
• Emails you send us: as long as needed to deal with your request.

Your rights

Wherever you live, you can ask us to:

• give you a copy of your information, including in a reusable format;
• correct information that is wrong;
• delete your information;
• restrict or stop using your information, or object to how we use it;
• tell you which companies we have shared your information with.

You can download a copy of your information, withdraw your consent and delete your account yourself on the Account page. The download is a JSON file you can keep or take to another service. For anything else, email support@liberwayapp.com. We will reply within one month and may need to check it's really you first. If we refuse a request, we will explain why; you can ask us to reconsider by replying to that email.

You can complain to the UK Information Commissioner's Office at ico.org.uk, or to the data protection regulator or attorney general where you live. We would appreciate the chance to put things right first.

Children and teenagers

Liberway is for people aged 13 and over. Before you can use it, we ask your age group. If you tell us you are under 13, we delete the account straight away and keep nothing about your answer.

If you are 13 to 17, you get the same protections as everyone else: we never use your information for ads, never share it for marketing, and only use it to run Liberway for you and improve the app. If you are a parent or carer and think a child under 13 has signed up, email support@liberwayapp.com and we will delete the account.

Cookies

We only use cookies and browser storage that Liberway needs to work, such as keeping you signed in. We do not use advertising or analytics cookies. Our Cookie Policy lists them.

Security

Information is encrypted while it travels between your device and us. Access to the database is limited to our server and the people who need it. No online service can be perfectly secure; if a breach puts you at risk, we will tell you and the regulators as the law requires.

Changes to this policy

We will update this policy when Liberway or the law changes. The date at the top shows the current version. If a change affects what your consent covers, we will ask for your consent again before it applies to you.