Privacy Policy

SobrietyCounter is a privacy-first sobriety tracker. Your sobriety start date, journals, voice notes, moods, cravings, triggers, commitments, and your “why” live on your device — not on our servers. There’s no account, no login, no leaderboard, and we never sell or share your information.

This policy explains exactly what data the app touches, where it goes, and the controls you have. We keep it short and plain. For the full agreement covering liability, disclaimers, and other legal terms, see our Terms of Service.

Everything you log inside SobrietyCounter is written to the app’s sandboxed storage on your iPhone or iPad. This includes:

• Sobriety start date and your motivation / “why” statement
• Journal entries and voice notes (audio files + on-device transcripts)
• Daily moods, craving intensity, and selected triggers
• Daily commitments and their open / done / missed state
• SOS events (timestamps of when you opened the SOS flow)
• Milestones, achievements, and progress state
• Optional sponsor name and phone number you save for the SOS flow
• Onboarding answers (e.g. substances, frequency, age range, prior attempts)

The widget and Live Activity read a tiny subset (your sober date and daily-amount estimate) from a shared App Group container on your device so the lock screen and Home Screen can render without launching the app. None of that data leaves your device.

If you grant permission, SobrietyCounter reads a few health categories from Apple Health to power the Insights tab:

• Sleep analysis
• Heart-rate variability (HRV-SDNN)
• Resting heart rate
• Respiratory rate

We never writeto Apple Health, never send your health data to a server, and never share it with third parties. Health data is processed entirely on-device to draw the trends you see in the app. You can revoke access at any time in Settings → Health → Data Access & Devices → SobrietyCounter.

Voice notes save the audio file to your device’s Documents folder. Transcription uses Apple’s on-device speech recogniser (SFSpeechRecognizer with requiresOnDeviceRecognition = true). The audio and transcript stay on your device. We do not upload them, and they are never sent to the AI chat backend or any other server.

The optional AI companion is the one feature that talks to a server. You will see a clear consent screen before any message is sent. If you don’t opt in, no chat data ever leaves your device.

When you do opt in, messages are sent to a worker we operate at api.sobriety-counter.com, running on Cloudflare Workers AI. With each request the app sends:

• Your message and up to the last 20 turns of the current conversation
• A short anonymous summary so the model knows your situation: days sober, mood trend (improving / steady / declining), recent triggers, craving count this week, SOS count, today’s commitment status, recent milestone, locale, age bucket, and an estimated savings number
• A random device ID and a random conversation ID
• Client version and consent version

The app explicitly does not send:

• Your name
• Your sponsor’s name or phone number
• Raw journal entries
• Voice-note audio or transcripts
• Apple Health data
• Email, contacts, photos, IDFA, or any Apple advertising ID

Cloudflare Workers AI processes the request to generate a response. Per Cloudflare’s policy, prompts sent to Workers AI are not used to train models. We keep a 7-day rolling log of request metadata (timestamp, device ID, status code) on the worker for abuse prevention; we do not log message content.

You can clear your chat history any time from the chat screen, and you can disable the companion entirely in app settings.

If you choose to subscribe to optional premium features, payment is handled by Apple’s App Store using StoreKit. We use Superwall to render paywall designs and track conversion. Apple processes the transaction; we never see your payment details. Superwall receives a random anonymous device identifier and the paywall outcome (viewed, subscribed, declined) so the right paywall is shown next time. No health, journal, or chat data is shared with Superwall.

SobrietyCounter does not:

• Require a name, email, phone number, or social login
• Read your contacts, photos, calendar, or location
• Use the microphone outside of voice notes you start yourself
• Use cookies, web beacons, fingerprinting, or the IDFA
• Run third-party analytics, advertising, attribution, or crash-reporting SDKs (no PostHog, Mixpanel, Segment, Amplitude, Firebase, Sentry, Crashlytics, OneSignal, AppsFlyer, Adjust, Branch, Meta, TikTok, or similar)
• Build a user profile to sell or share
• Send your data to be used as training data for any AI model

• Apple — iOS, HealthKit, App Store, StoreKit, on-device speech recognition, WidgetKit, Live Activities, and Apple Push Notification service for local reminders
• Cloudflare — hosts the optional chat worker and this marketing site. Processes chat requests only when you opt in
• Superwall — renders paywall designs and reports anonymous conversion events

• Clear chat history from the chat screen at any time
• Disable the AI companion entirely in settings
• Revoke HealthKit, microphone, or notification permissions in iOS Settings
• Delete every byte by uninstalling the app — there’s no server-side copy to delete because we never had one
• Manage or cancel any subscription in Settings → Apple ID → Subscriptions

If you have a question or want us to confirm any of this, email hi@sobriety-counter.com.

On-device data persists as long as the app is installed and you decide to keep it. Chat-request metadata on the worker (timestamp, random device ID, response status) is retained up to 7 days for abuse prevention, then deleted. Apple App Store purchase records are retained by Apple per their policies.

SobrietyCounter is intended for adults. The app is not directed to children under 13, and we do not knowingly collect data from them.

Because almost everything stays on your device, there’s very little personal data for us to access, export, or delete on your behalf. If you’re in the EU/UK (GDPR), California (CCPA/CPRA), or a similar jurisdiction and want to exercise data-subject rights relating to the limited chat-request metadata above, email us and we’ll respond within 30 days.

If we make a material change to how we handle data, we’ll update this page and bump the effective date. If a change widens what we collect, we’ll surface a consent prompt in the app before it takes effect.

Questions? Email hi@sobriety-counter.com. We’re a real human, and we read every message.