Your Privacy Matters
At RecoveryBridge, we understand that privacy is essential, especially when you're seeking or providing support for mental health and recovery. This policy explains how we collect, use, and protect your personal information.
Our Promise: Your conversations are private. We never sell your data. Your information is encrypted and protected.
Information We Collect
Account Information: When you create an account, we collect your email address, display name, and any profile information you choose to share (like your bio or role).
Messages: We store your chat messages to provide the service. Your messages are encrypted in transit and at rest. In cases of reported misconduct, session transcripts may be reviewed by RecoveryBridge administrators for moderation purposes. All such reviews are recorded in an audit log.
Usage Data: We collect basic information about how you use RecoveryBridge (like when you log in) to improve our service and keep it secure.
How We Use Your Information
We use your information to:
• Provide the RecoveryBridge platform and connect you with others
• Keep your account secure and prevent abuse
• Improve our service and fix technical issues
• Send you important updates about your account or our service
Who We Share Your Data With
We never sell your personal information to anyone.
We only share your information in these limited circumstances:
• Other users: Your display name and profile information is visible to people you chat with
• Service providers: We use trusted third parties (like hosting providers) who help us run RecoveryBridge. They're required to protect your data
• Legal requirements: If required by law or to prevent serious harm
Your Privacy Rights
You have the right to:
• Access your personal information
• Update or correct your information in your profile settings
• Delete your account and data at any time
• Export your data
How We Protect Your Data
We take security seriously and use industry-standard measures to protect your information:
• Messages encrypted in transit (TLS) and at rest
• Secure data storage with encryption at rest
• Regular security audits and updates
• Limited access to your data by our team
How Long We Keep Your Data
We keep your information only as long as necessary:
• Active accounts: We keep your data while your account is active
• Deleted accounts: We delete your personal information within 30 days of account deletion
• Backups: Some data may remain in encrypted backups for up to 90 days
Consumer Health Data Privacy Notice
This notice applies to residents of states with consumer health data privacy laws, including Washington (My Health My Data Act).
Health Data We Process: RecoveryBridge processes consumer health data as defined under applicable state law, including information you provide about mental health, substance use, addiction recovery status, and related personal experiences. This data is collected only to provide the peer support service.
How We Use Health Data: Your health-related information is used solely to connect you with peer support and to operate RecoveryBridge. We do not use this data for advertising, marketing profiling, or sale to third parties.
Third-Party Processors: We share limited technical data with the following service providers who are contractually required to protect your information:
• Supabase — database and authentication provider that stores all user data and messages
• Vercel — application hosting; may retain server access logs (IP address, timestamp, requested path)
• Sentry — error monitoring; captures application error reports and anonymized session replays (text masked, media blocked) only when enabled via environment configuration
None of these providers are authorized to use your health data for their own purposes beyond providing services to RecoveryBridge LLC.
Your Rights (applicable states): Depending on your state of residence, you may have the right to:
• Confirm whether we process your consumer health data
• Access and obtain a copy of your health data
• Delete your health data (via account deletion in profile settings)
• Withdraw consent for processing
To exercise these rights, contact us at privacy@recoverybridge.app. We will respond within 45 days as required by applicable law.
Children's Privacy
RecoveryBridge is intended for users 18 years and older. We do not knowingly collect information from anyone under 18. If we learn that we have collected information from someone under 18, we will delete it immediately.
Changes to This Policy
We may update this privacy policy from time to time. We'll notify you of any significant changes by email or through the app. Your continued use of RecoveryBridge after changes means you accept the updated policy.
Questions About Privacy?
If you have questions about this privacy policy or how we handle your data, please contact us at privacy@recoverybridge.app