Online Rehab
Privacy Policy
Draft. Fill in the highlighted fields and have this policy reviewed by a US privacy attorney before the app goes live, including for state consumer health data laws.
Online Rehab is an app that helps you quit or cut down on alcohol and other addictions. Your health is personal. That's why we keep as little data online as possible. Below you can read exactly what data is stored where.
Who we are
Online Rehab is provided by [company name], [address]. For privacy questions, email [privacy email address].
What stays only on your phone
This data never leaves your iPhone or Android phone unless you share an export yourself:
- your morning check-ins: sleep, exercise, sleep score, eating and how you feel;
- your entries per addiction, streaks, medals and savings;
- your intake answers, your five reasons, your relapse plan and your letter to yourself;
- your journal, notes, moments of craving and meditations;
- the names, phone numbers and email addresses of your SOS contacts;
- data from Apple Health, if you turn on that connection.
We cannot see this data. It is protected by the standard encryption of iOS and Android. On Android it is included in your encrypted Google account backup if you have that turned on; your sign-in details are not.
What is stored online, and why
| Data | Purpose |
|---|---|
| Email address and password (stored encrypted) | Your account, signing in and resetting your password |
| Subscription status and end date | Access to the app and the peer group |
| Group assignment, start week and nickname | Placing you in a group of people who started the same week |
| Chat messages in your group | The group chat. Because messages can say something about your health, we only process them with your explicit consent. |
| Private messages with group members | Buddies: one-on-one chats within your group |
| Group profile: avatar, optional profile photo, what you share about yourself | So your group gets to know you; only visible to your own group |
| Messages with your counselor | A confidential one-on-one chat; only you and your counselor can read it |
| Video calls: who joins and when (video and audio are never stored) | Video calls with your group or counselor through Daily.co |
| Your device's push token | Notifications about new messages and calls |
| Website orders: name, email address, product and payment status | Your order, confirmation and bookkeeping |
| Reports of messages | Moderation and safety in the group |
| Counselor appointments: time, the name you provide, your note, video link and payment status | Scheduling, confirming and reminding you of sessions |
Accounts and groups run on Supabase, in a data center in the European Union (Paris, France). We have a data processing agreement with Supabase.
In-app payments are handled by Apple (iPhone) or Google Play (Android); payments on the website by Mollie. We never see your card or bank details, only whether your payment went through and whether your subscription is active. Video calls run through Daily.co; nothing is recorded. We send emails through Resend.
Report for your counselor
In the app you can create a PDF report with your numbers and the points you want to discuss. The report is created on your phone. It only goes to your counselor if you share it yourself, for example by email. Your journal and notes are only included if you switch them on.
Counting visits
We count how often each page of this website is viewed per day, and how often the app is opened for the first time. These are only counters: we don't use cookies, don't store IP addresses and don't build visitor profiles. You can't be identified.
Videos
The video library plays videos through YouTube in privacy-enhanced mode (youtube-nocookie.com). YouTube doesn't set cookies until you play a video. When you play a video, Google's privacy policy applies. We load the list of videos without requiring you to sign in.
What we don't do
- No ads and no ad networks.
- We never sell or rent your personal data, and we don't share it for cross-context behavioral advertising.
- No tracking of your behavior outside the app.
- Other group members never see your email address, only your nickname.
How long we keep data
We keep your account and group data for as long as your account exists. If you delete your account, your account, your group membership, your chat messages (including those in the group), your private messages, your profile photo and your conversations with your counselor are deleted. We keep payment records without a link to your account, because Dutch tax law requires us to keep them for 7 years. You delete the data on your iPhone yourself, in the app or by deleting the app.
Your rights
Depending on the state you live in (for example California, Washington, Colorado or Connecticut), you may have the right to know what data we have about you, to get a copy, to correct it, to delete it, and to withdraw your consent. In the app you can:
- export all your data (Settings › Privacy);
- delete all data on your phone;
- delete your account (Settings › Account).
For other requests, email [privacy email address]. We'll respond within 45 days. We won't discriminate against you for exercising your rights.
Age
Online Rehab is intended for people aged 18 and over.
Not medical advice
Online Rehab does not give medical advice or make diagnoses. If you have physical symptoms or have been drinking heavily every day for a long time, contact your doctor. In an emergency, call 911.
Changes
If we update this policy, you'll see it in the date at the top. We'll let you know in the app about important changes.