Privacy Policy

Who we are

Recovery Tree is a recovery support tool. We are not a medical provider, therapist, or sponsor. Our purpose is to help the addict who still suffers by complementing — not replacing — human connection, meetings, and professional support.

Contact: support@recoverytree.cc

What we collect and why

Recovery Tree stores information you share so you don't have to repeat yourself every session. This is for your benefit — not for analysis or advertising.

Some of what you share — your substance use, addiction patterns, mental and emotional state, relapses, and recovery progress — is sensitive health information. We treat it with extra care: it is encrypted in transit, stored under a pseudonymous ID, never sold, and never used for advertising. You can also turn on private journaling(Profile → Privacy & Security), which encrypts your journal and step-work entries directly on your device with a key only you control — when enabled, not even we can read them. When you talk with Elder Tree, your conversation is sent to our AI provider (Anthropic) solely to generate a response; it is not used to train their models.

• Your email address, used only for account authentication and essential communications
• Recovery context you choose to share (step progress, zones, patterns) stored under a pseudonymous ID
• Session activity (e.g. urge mining completions, walkabout logs) used to support your tree growth
• Feedback you submit voluntarily

We do not collect your real name, location, or any information beyond what you directly share with the app.

Anonymity and separation of identity

Your billing identity (email, payment information) is kept separate from your recovery content, which is stored under a pseudonymous account ID. In normal operation, your recovery journey is not tied to your billing identity.

We want to be honest about the limit of that: this is a separation we maintain, not a mathematical impossibility. Like any service, our systems include administrative access that could technically join those records — so we don't lean on separation alone. We minimize what we store, we never sell it or advertise against it, and for your most sensitive writing we offer private journaling(Profile → Privacy & Security), which encrypts entries on your device with a key only you hold. When that's on, no one at Recovery Tree can read them — not as a promise, but because we mathematically can't.

What we do not do

• We do not sell your data to third parties
• We do not use your recovery content for advertising or marketing
• We do not hand your data to outside parties for their purposes. To run the app we rely on the service providers listed below, who process data only on our behalf, under contract — we may also disclose data where the law requires it.
• We do not use AI conversation logs to train models without your explicit consent

Third-party services

We use the following services to operate the app:

• Supabase — database and authentication (data stored in US region)
• Vercel — hosting and deployment
• Resend — transactional email (e.g. gift notifications)
• Anthropic — AI responses from Elder Tree (conversation content is sent to Anthropic's API; we follow their data usage policies)
• Firebase / Google — push notifications on Android

Push notifications

If you enable push notifications, we may send you reminders related to your recovery routine. You can disable notifications at any time in your device settings. We do not use notifications for marketing.

Your rights

• Export: You can request a copy of all data associated with your account by emailing support@recoverytree.cc
• Delete: You can delete your account at any time from within the app (Help & Support → Delete Account), or by emailing support@recoverytree.cc. Your private recovery content (journals, step work, inventories) is permanently deleted — and if you enabled encryption, your keys are destroyed so that content can never be recovered. Posts and replies you shared in community spaces remain visible to others but are un-attributed — no longer linked to your account. Full deletion completes within 30 days.
• Correction: If you believe any stored data is incorrect, contact us to correct it.

Data retention

We retain your data while your account is active. When you delete your account, your private recovery content is deleted — immediately for encrypted content (via destruction of your keys), and within 30 days for everything else. Posts you shared in community spaces remain but are un-attributed. Billing records may be retained as required by law.

Children

Recovery Tree is not intended for users under the age of 18. We do not knowingly collect data from minors. If you believe a minor has created an account, contact us and we will delete it.

Changes to this policy

If we make material changes to this policy, we will notify you via email or an in-app notice before the changes take effect.

Contact

Questions about this policy: support@recoverytree.cc