Last updated: 10 October 2026
HeelClick helps you plan nights out, log drinks and spending, and review how the night went. This policy explains what stays on your iPhone, what online features send to service providers, and how to request help with your data.
1. Who Is Responsible for Your Data
HeelClick is provided by FEAR ARMY LTD, trading as Insane Rabbit Labs, registered in England and Wales under company number 13087049. Contact support@insanerabbit.com for privacy enquiries or visit https://heel-click.com/support.html.
2. Information Saved on Your iPhone
The app saves your profile, preferences, goals, plans, session history, drink and spending logs, reflections, achievements and chat history locally. You do not need to create a sign-in account to use local planning. Local storage does not mean every feature operates offline: the online features described below send selected information off your device.
A home location and trusted contact can be saved for journey planning and Safety Mode. Calendar access is optional. Selected next-day commitments can be used to personalise reminders and coaching. Your device backup settings may include local app data in an Apple backup.
3. Online Coaching and AI Providers
In versions that offer GPT with local backup, online coaching sends a request through HeelClick's Cloudflare-hosted backend to OpenAI. The backend can also use Cloudflare Workers AI when OpenAI is not configured. Requests can include your display name, goals, motivation notes, onboarding answers, drinking and spending limits and totals, venue, leaving times, route summary, selected next-day calendar commitments, recent chat messages, language and time zone. Information about drinking habits, wellbeing and personal commitments may be sensitive.
OpenAI conversation records are used to maintain chat context. These are stored by the provider and are not simply discarded when a reply arrives. HeelClick stores the association between the conversation and your online device profile. Clearing a chat on your iPhone does not itself delete those provider records. Contact us to request deletion of online data and associated AI conversation records. Provider retention and any legal retention requirements can affect when data is fully removed.
You can choose on-device chat in the app's Chat and Siri settings on supported versions. That choice uses Apple's on-device model where available, with basic local guidance as a fallback, rather than GPT. It does not change voice dictation processing, mapping, social features or other online requests. Apple Private Cloud Compute chat is disabled in version 1.0.3, build 19.
Do not include another person's private information in chat or notes. AI replies can be inaccurate and are not medical advice, treatment, emergency assistance or a judgement that you are safe to drive.
4. Online Device Profiles, Friends and Leaderboards
Online services create a device-linked profile and invite code, with credentials kept in the iPhone's Keychain. The backend stores credential hashes, identifiers and expiry information to authenticate requests. It also uses request counters and a hashed network address to limit abuse. An anonymous profile identifier can still link records to the same user; it does not make those records unidentifiable in every context.
Social and leaderboard features can send and store your display name, invite code, selected region and country, scores, achievements, streaks, estimated money saved and participation settings. Social updates can include active-session timing and a safe-home status that you confirm. Friends can see information exposed by those features, including encouragement and kudos. Public leaderboard visibility depends on the preferences you select. Avoid using your full name if you do not want it displayed.
5. Location, Calendar, Contacts and Notifications
Location access is when-in-use and optional. It supports route estimates, nearby venue search and area selection. Apple Maps processes mapping requests. A backend venue lookup can send coordinates through Cloudflare to Google Places when that service is configured; Apple MapKit provides a fallback. We do not sell location information or use it for advertising.
Calendar permission lets the app read upcoming commitments. If used in online coaching, selected commitment information can be included in the AI request described above. The trusted-contact picker imports the contact you choose for Safety Mode. Calls, messages and location sharing use the actions you choose; HeelClick does not provide monitored emergency assistance. Local notifications remind you about your plan and do not mean someone is watching your night.
You can withdraw these iOS permissions in iPhone Settings. Denying an optional permission does not prevent local planning, although related features may be unavailable.
6. Dictation, Spoken Replies and Receipt Photos
Microphone and speech-recognition access are requested when you choose dictation. Speech becomes a draft you can review before sending. Apple may process audio on its servers when on-device recognition is unavailable. Sending that draft to online chat then follows the AI processing described above. Spoken replies use Apple's speech features.
Receipt import reads the photo you select on the device to suggest a spending amount. The receipt image is not uploaded by this feature. You confirm the suggested amount before it is logged. A spending total can subsequently be part of online coaching context.
7. Purchases and Support
Apple processes subscriptions through your Apple Account. HeelClick uses purchase and entitlement status to enable or restore Pro features. We do not receive your full payment card or bank details. Deleting app data does not cancel an Apple subscription.
When you email support, we receive your email address and the information you choose to send. We use it to answer the enquiry, investigate the problem and handle privacy or abuse reports. Please leave out passwords, payment details, exact home addresses and unnecessary personal or health information.
8. Why We Process Information
We use information to provide the features you request, personalise coaching, keep your plans and progress available, operate social and leaderboard features, restore purchases, respond to support and protect the service from abuse. We do not sell or rent personal information, and the app does not use advertising tracking.
Where UK or EU data protection law applies, the applicable grounds may include providing requested services, consent for optional processing, legitimate interests in security and support, and legal obligations. Device permission is not blanket consent to every use of personal information. You can withdraw optional permissions and change chat or participation choices. Contact us about restricting processing or exercising your rights.
9. Service Providers and International Processing
Providers involved in these features include Apple, Cloudflare and OpenAI, with Google Places used when backend venue lookup is configured. They process information under their applicable service arrangements and privacy terms. Information may be processed outside your country, including in the United States. Where required, international transfers need appropriate safeguards under applicable data protection law.
Provider information:
- Apple: https://www.apple.com/legal/privacy/
- Cloudflare: https://www.cloudflare.com/privacypolicy/
- OpenAI: https://openai.com/policies/privacy-policy/
- Google: https://policies.google.com/privacy
We may also disclose information where required by law or to deal with security incidents, protect users or manage a business transfer, subject to applicable law.
10. Retention and Deletion
Local records remain until you erase them in the app or remove them through your device controls. Settings, Privacy, Erase local app data clears local profile, plans, session history, achievements, leaderboard settings and local backups held by the app. It does not cancel subscriptions, delete separate Apple backups or automatically erase online service records.
Online device, social, leaderboard and AI conversation records can remain after local erasure or app removal. The current app does not provide a complete online account-deletion control. Email support@insanerabbit.com with the subject "HeelClick privacy request" to ask for access, correction or deletion. If available, keep your invite code or profile reference before erasing local data so we can identify the records without asking for a private chat history. We may need to verify that the records belong to you.
We keep support correspondence and service records for as long as needed to provide the service, resolve the enquiry, address abuse or meet legal obligations. Provider-held data and backups can have separate retention periods. We will explain any lawful limits affecting a deletion request; we do not promise that uninstalling the app erases every copy everywhere.
11. Your Rights and Security
Depending on your location, you may have rights to access, correct, erase or receive a copy of your data, restrict or object to processing, and withdraw consent. Contact support@insanerabbit.com. In the UK, you can complain to the Information Commissioner's Office at https://ico.org.uk.
We use measures including encrypted network connections, device credentials and checks that online requests belong to the relevant profile. No storage or transmission method can be guaranteed completely secure.
12. Age, Safety and Policy Updates
HeelClick is intended for adults who are legally allowed to drink in their country or region. It is not intended for children. If you believe a child has provided personal information, contact us.
HeelClick is a planning and accountability tool, not medical care, addiction treatment, transport booking, professional monitoring or an emergency service. In an emergency, contact local emergency services.
We update this policy when processing or features change. The date above identifies the current version. Material changes may also be communicated in the app or through another appropriate channel. Contact support@insanerabbit.com if anything is unclear.