Privacy Policy

Information we collect

Account information. Your email address, display name, optional username, and profile photo. You can sign in with Apple, with Google, or with an email and password.

Recovery information you enter. Your clean date, daily check-ins (including your mood and whether you’d like support), journal entries, gratitude lists, step work, meeting attendance and 90-in-90 progress, routines, home group and service records, and your sponsorship tree, including the names, phone numbers, and notes you add about your sponsor and sponsees. Some of this, such as your clean date and mood, is health information, and we use it only to provide the app to you.

Content you share with others. Friend connections, feed posts, meeting plans, milestone celebrations, circle questions, quotes, and responses, private replies, poll votes, group chat messages, and recovery stories, including an audio recording if you choose to record one.

Your 10th Step inventory. Your 10th Step answers and notes are stored encrypted on your device and are never uploaded to our servers. Custom question sets you create are saved to your account so you don’t lose them, and anything you choose to share with a 10th Step circle is sent to that circle.

Location (optional). When you search for meetings near you, in the app or with the meeting finder on our website, we use your location to find nearby meetings and don’t save it. If you turn on Nearby Friends, we save the location you choose (your current location or an area you type in) so we can suggest people near you. Other members see only your area name and a distance range, never your exact location. You can turn Nearby Friends off at any time.

Photos and support requests. Your profile photo, and the messages and screenshots you send us in a support request. Photos you choose for share backgrounds stay on your device. When you share your clean time as a video, the app sends the share card (your clean time or clean date, and your name if the card shows it) to our server to make the video. We delete the card as soon as the video is made, and the video automatically a day or two later.

Purchases. Whether you have Premium, and your purchase history. In the app, Apple or Google processes your payment. On our website, Stripe processes it through RevenueCat’s checkout. Either way, we never see your card details. We use RevenueCat to keep track of your subscription status.

Diagnostics and usage. We use Firebase Analytics to understand which features are used and Firebase Crashlytics to fix crashes. This data uses an ID generated by the app, not your account, and includes details such as your device model, operating system, app version, and what happened before a crash.

Notifications. A push notification token, so we can send the notifications you turn on.

Device permissions. The app asks for the camera (to scan friend QR codes and take a profile photo), your photos (to choose a profile photo or share background), the microphone (only if you record a story), your calendar (to add events you choose; we don’t upload your calendar), and location (described above). You can change these in your device settings at any time.

How we use your information

We use your information to run the app and its features; show what you share to the people you choose; keep the community safe, including reviewing reports, blocking, and removing content that breaks our rules; manage Premium; send notifications you’ve turned on; answer support requests; and fix problems and improve the app. We don’t use your information for advertising, and we don’t sell it.

Who can see your information

Other members see only what you share with them, based on your privacy settings. We use these service providers to run the app, and they handle data on our behalf:

• Google Firebase: sign-in, database, file storage, server functions, notifications, analytics, crash reporting, and app integrity checks
• RevenueCat: subscription status, and checkout for purchases on our website
• Stripe: card payments on our website
• Apple and Google: sign-in and in-app payments
• OpenFreeMap, OpenStreetMap and Zippopotam.us: the map and place search in the meeting finder on our website

The meeting map in the app loads its map tiles from OpenFreeMap (OpenStreetMap data). When you open the map, OpenFreeMap receives the map area you are viewing and your device’s IP address, and nothing about your account.

Meeting listings come from public meeting directories. We may also share information if the law requires it or to protect someone’s safety.

Keeping and deleting your information

We keep your information while your account is open. You can delete your account at any time in Settings > Delete Account. This deletes your account and your data from our servers, except for limited records we’re required to keep by law. Analytics and crash data aren’t tied to your account and expire on our providers’ standard schedules.

Security

Your data is encrypted in transit and stored with Google Cloud, which encrypts it at rest. Your 10th Step answers are encrypted on your device. No system is perfectly secure, so use a strong password and keep your device locked.

Age requirement

You must be 18 or older to use Recovery Co-Pilot. The app is about addiction recovery and isn’t meant for children. If we learn that someone under 18 has an account, we will delete it.

Your choices

You can view and edit most of your information in the app, choose what friends see in your privacy settings, turn off notifications and location in your device settings, remove friends, block other members, and delete your account. To ask for a copy of your data or ask any privacy question, email support@recoverycopilot.app. Depending on where you live, you may have other privacy rights, and we’ll honor them.

Changes to this policy

If we make important changes, we’ll update the date at the top and let you know in the app or on our website.

Contact us