Your Privacy Matters
At RecoveryBridge, we understand that privacy is essential, especially when you're seeking or providing support for mental health and recovery. This policy explains how we collect, use, and protect your personal information.
Our Promise: Your conversations are private. We never sell your data. Your information is encrypted and protected.
Information We Collect
Account Information: When you create an account, we collect your email address, display name, and any profile information you choose to share (like your bio or role).
Messages: We store your chat messages so the service works, encrypted both in transit and at rest. If someone reports misconduct, a RecoveryBridge admin may review that session's transcript to look into it — and every review is logged.
Usage Data: We collect basic information about how you use RecoveryBridge (like when you log in) to improve our service and keep it secure.
How We Use Your Information
We use your information to:
• Provide the RecoveryBridge platform and connect you with others
• Keep your account secure and prevent abuse
• Improve our service and fix technical issues
• Send you important updates about your account or our service
Who We Share Your Data With
We never sell your personal information to anyone.
We share as little as possible — only in these situations:
• The people you chat with: they can see your display name and profile
• Companies that help us run the app: trusted providers like our hosting and database. They're required to protect your data and can't use it for anything else
• The law: if we're legally required to, or to prevent serious harm to someone
Your Privacy Rights
It's your data. You can:
• See the personal information we hold about you
• Update or correct it anytime in your profile settings
• Delete your account and data whenever you want
• Export a copy of your data
How We Protect Your Data
We use strong, industry-standard protections to keep your information safe:
• Messages encrypted in transit (TLS) and at rest
• Secure data storage with encryption at rest
• Regular security audits and updates
• Limited access to your data by our team
How Long We Keep Your Data
We hold onto your information only as long as we need to:
• While your account is active: we keep your data so the service works
• After you delete your account: we remove your personal information within 30 days
• Backups: some data may linger in encrypted backups for up to 90 days, then it's gone
Consumer Health Data Privacy Notice
Because RecoveryBridge is about recovery, some of what you share here counts as “health data” under state privacy laws. Here's what that means for you, in plain terms.
This notice applies to residents of states with consumer health data privacy laws, including Washington (My Health My Data Act).
What counts as health data: The things you share about your mental health, substance use, recovery, and related experiences count as “consumer health data” under these laws. We only collect it to provide peer support.
How we use it: Only to connect you with peer support and to run RecoveryBridge. Never for advertising, marketing profiles, or sale to anyone — full stop.
Who helps us run it: A few trusted service providers handle the technical side. They're contractually required to protect your information and can't use it for their own purposes:
• Supabase — securely stores your account, messages, and profile
• Vercel — runs the app; may keep basic server logs (IP address, timestamp, page requested)
• Sentry — error monitoring; only captures crash reports and privacy-masked session replays (your text is hidden, images blocked), and only when we've turned it on
None of them are allowed to use your health data for their own purposes — only to help run RecoveryBridge.
Your rights: Depending on where you live, you can ask us to:
• Confirm whether we hold your health data
• Get a copy of it
• Delete it — or just delete your account in settings, which does the same thing
• Withdraw your consent anytime
How to ask: Just email admin@recoverybridge.app and we'll get back to you within 45 days (the legal deadline).
Children's Privacy
RecoveryBridge is intended for users 18 years and older. We do not knowingly collect information from anyone under 18. If we learn that we have collected information from someone under 18, we will delete it immediately.
Changes to This Policy
We may update this privacy policy from time to time. We'll notify you of any significant changes by email or through the app. Your continued use of RecoveryBridge after changes means you accept the updated policy.
Questions About Privacy?
If you have questions about this privacy policy or how we handle your data, please contact us at admin@recoverybridge.app