Privacy Policy

What We Collect

We collect the information you give us and a limited amount of information generated when you use Relapsd:

• Account details such as your email address and authentication credentials.
• Recovery data you choose to log, including streaks, cravings, check-ins, journal entries, and protocol progress.
• Conversations you have with the in-app coach, so we can provide continuity and improve responses.
• Technical data such as device type, app version, and basic usage events that help us keep the product stable.

How We Use It

We use your data only to run and improve Relapsd. Specifically, we use it to:

• Deliver the core features you signed up for.
• Personalize your protocols and coach guidance based on what you log.
• Send service messages, reminders, and security alerts.
• Diagnose problems, prevent abuse, and make the product safer and more reliable.

We do not sell your data, and we do not use your recovery content to train third-party advertising models.

Sharing and Disclosure

We share data only when it is necessary to operate the service or when the law requires it:

• With trusted service providers who host our infrastructure and power features, under contracts that limit how they may use your data.
• When required by a valid legal request, or to protect the safety of a person.
• In connection with a merger or acquisition, in which case we will notify you before your data becomes subject to a different policy.

We never share your recovery data with advertisers or data brokers.

Cookies and Tracking

We use a small number of cookies and similar technologies to keep you signed in, remember your preferences, and understand how the product is used in aggregate. We do not use third-party advertising trackers. You can control or clear cookies through your browser settings, though some features may not work correctly if they are disabled.

Your Rights

Depending on where you live, you have legal rights over your data. We honor these rights for all users, regardless of location.

If you are in the European Economic Area or the United Kingdom, the GDPR gives you the right to access, correct, delete, restrict, or object to the processing of your personal data, and the right to data portability. You may also withdraw consent at any time and lodge a complaint with your local data protection authority.

If you are a California resident, the CCPA gives you the right to know what personal information we collect, the right to delete it, the right to correct it, and the right to opt out of any sale or sharing of your data. We do not sell your data. We will never discriminate against you for exercising these rights.

To exercise any of these rights, email us at privacy@relapsd.com. We will respond within the timeframes required by law.

Data Retention

We keep your data for as long as your account is active or as needed to provide the service. When you delete your account, we remove your personal data and recovery content within 30 days, except where we are required to retain limited records for legal, security, or fraud-prevention purposes. Aggregated data that can no longer identify you may be kept to improve the product.

Security

We protect your data with encryption in transit and at rest, access controls that limit who on our team can view sensitive information, and regular reviews of our systems. No service can promise perfect security, but we treat your recovery data with the care it demands and will notify you promptly if a breach ever affects your information.

Contact

If you have questions about this policy or how your data is handled, reach us at privacy@relapsd.com. We read every message.