1. Introduction

SoberBud ("SoberBud," "we," "us," or "our") is committed to respecting and protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you access or use our mobile applications, websites, and associated services (collectively, the "Services"). This Policy applies to all users of the Services worldwide.

2. Information We Collect

We collect information to provide and improve the Services, personalize your experience, and analyze usage patterns.

2.1. Information You Provide

• Name, email address, sobriety date, profile photo (optional)
• Journal entries, check-ins, mood tracking responses, and relapse data
• Messages exchanged in community features or Buddy chat
• Support requests, survey responses, or app feedback

2.2. Automatically Collected Data

• Device type, OS version, unique device identifiers
• Log data (IP address, time stamps, crash reports)
• App usage patterns, interactions, and time of activity
• Location data (with permission)

2.3. Sensitive Information

• Recovery-related data (e.g., substance type, relapse history, mental health reflections)
• Health and wellness metrics (e.g., sleep, stress, cravings, activity levels)

2.4. Cookies and Tracking Technologies

We use cookies, local storage, and similar tools to:

• Remember user settings
• Analyze usage and engagement
• Deliver relevant notifications or tips

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Services
• Personalize the user experience and content
• Deliver AI-powered insights, check-in suggestions, and relapse warnings
• Track recovery milestones, achievements, and progress
• Notify users of updates, features, milestones, or security issues
• Enforce our Terms of Use, prevent fraud, and ensure safety
• Comply with legal obligations

4. AI, Analytics, and Automated Decision Making

SoberBud uses artificial intelligence and natural language processing (NLP) to:

• Analyze journal entries and mood patterns
• Detect behavioral trends and risks
• Deliver tailored support messages, content, or resources
• Trigger personalized notifications and weekly summaries

All AI-driven processes are designed to support user recovery and are not used for marketing or profiling without consent.

Users may request to opt out of AI-based suggestions, though this may limit app functionality.

5. Legal Basis for Processing (GDPR Compliance)

We process personal data based on:

• Your consent (e.g., for journal analysis or location access)
• Contractual necessity (e.g., to deliver the core service)
• Legal obligations (e.g., law enforcement requests)
• Legitimate interests (e.g., app analytics and feature improvement)

6. Disclosure of Your Information

We do not sell or rent your personal data. We may disclose information to:

• Service Providers: Hosting providers, analytics platforms, support vendors, and notification services (e.g., OneSignal)
• Legal Authorities: When required by law, subpoena, or similar legal process
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets
• User-Directed Sharing: If you choose to share your data with sponsors, therapists, or accountability partners

All third parties are contractually required to protect your information and only use it for the purpose provided.

7. Data Retention

• We retain user data as long as your account is active or as necessary to provide the Services
• Users may request deletion of their data at any time via email or in-app settings
• Backups may persist for a short period post-deletion as part of routine infrastructure integrity

8. Data Security

We implement industry-standard security practices to protect your information:

• Data encryption in transit (TLS) and at REST (AES-256)
• Role-based access controls and internal audits
• Anomaly detection and incident response plans

However, no system is 100% secure. We encourage users to use strong passwords and enable any available app security features.

9. User Rights and Controls

Depending on your location, you may have rights under data privacy laws:

GDPR (EU/UK users):

• Right to access, correct, or delete your data
• Right to restrict or object to processing
• Right to data portability
• Right to lodge a complaint with a supervisory authority

CCPA (California Residents):

• Right to know what personal data is collected
• Right to delete personal data
• Right to opt out of data sales (SoberBud does not sell personal data)

To exercise these rights, please contact us at [email protected].

10. Children’s Privacy (COPPA)

SoberBud does not knowingly collect or solicit personal information from anyone under the age of 13. If you believe we may have inadvertently collected such data, please contact us immediately for removal.

11. Third-Party Services

Our app may integrate with services such as:

• Google Fit or Apple Health (with your permission)
• Map providers for meeting locations
• Authentication or analytics platforms

These services are not owned or controlled by SoberBud. We recommend reviewing their privacy policies and terms of service.

12. International Transfers

Your data may be transferred to—and maintained on—servers located outside of your jurisdiction (e.g., in the United States). We ensure appropriate safeguards are in place, such as Standard Contractual Clauses or Privacy Shield certifications.

13. Changes to This Privacy Policy

We may update this Policy periodically. You will be notified of material changes through the app or by email. Continued use of the Services constitutes acceptance of the revised policy.

14. How to Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact:

SoberBud Privacy Team
[email protected]