Privacy Policy

Effective October 5, 2026

This policy explains how Sober Stride ("Sober Stride," "we," "us") handles information when you use the Sober Stride mobile app and website. Recovery information can be highly sensitive, so we limit collection and give you in-app controls.

Information we process

• Account information: account identifier, email address, authentication status, username, display name, avatar, and profile settings.
• Recovery and app content you choose to provide: recovery focus, goals, tracker dates and progress, check-ins, communities, posts, comments, direct messages, profile biography, and moderation reports.
• Subscription information: product, entitlement, transaction status, renewal status, and an app customer identifier. Apple processes payment-card details; Sober Stride does not receive them.
• Device and notification information: Expo push token, APNs or FCM token, platform, app version, notification preference, and approximate technical request information such as IP address.
• Limited product analytics: only after an explicit opt-in on this device for your account, events such as app opened, onboarding completed, paywall viewed, purchase completed, and notification permission status. We do not send post or message text, recovery dates, tracker details, check-in answers, or profile recovery fields to analytics.

How we use information

We use information to provide and secure accounts; operate trackers, communities, messaging, notifications, and subscriptions; prevent abuse and respond to reports; provide support; understand basic product reliability and conversion; and comply with law.

Service providers and disclosures

We use vendors acting on our behalf, including Clerk for authentication, RevenueCat and Apple for subscriptions, PostHog for limited product analytics, Expo and Apple Push Notification service (and Firebase Cloud Messaging if Android is offered) for notifications, and Replit for application hosting, PostgreSQL database and private image storage, and Resend for moderation alert delivery. Moderation emails contain queue counts and review links, not report text, identities, or recovery information. Uploaded photos are screened automatically on our server without sending them to an additional image service. Ordinary photos are published immediately; flagged photos or photos that cannot be checked remain visible only to their owner until an authorized moderator approves them. Authorized moderators can review reported content and flagged photos in the protected review queue. These providers process information under their own terms and privacy commitments. We may disclose information when required by law, to protect safety and rights, or as part of a business transfer with appropriate safeguards.

Your controls

Sober Stride includes controls for profile visibility, milestones, discovery, messaging, push notifications, and product analytics. Analytics is off until you explicitly enable it, is linked to your account ID, and excludes recovery details and content. Location enrichment and session recording are disabled. You may withdraw consent in settings. Device permissions can also be changed in iOS or Android settings. Sober Stride does not sell personal information, use recovery data for advertising, or track activity across other companies' apps and websites for targeted advertising.

Retention and deletion

We retain account information while your account is active. In-app deletion removes your active profile, recovery records, posts, comments, messages, social relationships, reports and moderation evidence, notification tokens, and uploaded images. Images become inaccessible immediately; storage-object and authentication-provider cleanup retry automatically if a provider is unavailable. A limited account-ID deletion record remains until cleanup succeeds and for 30 days afterward to prevent stale sessions recreating the account. Suspension identifiers may be retained to prevent abuse. Infrastructure backups and legally required security or transaction records follow the providers' retention obligations; they are not restored to an active account. Apple retains its transaction records under its policies. We also queue deletion of your RevenueCat customer record, including purchase history held there; provider outages or merged-account issues may require retry or review. Deleting that record does not cancel your Apple subscription. Deletion also queues removal of account-linked PostHog profiles, events, and any historical recordings. Requests retry until PostHog accepts them; its event removal is asynchronous. Contact us about deletion status.

Security and international processing

We use reasonable administrative and technical safeguards, but no system is completely secure. Information may be processed in the United States and other locations where our providers operate.

Age requirement

Sober Stride is intended for people age 18 and older. On supported iOS versions, Apple shares an age category for a local eligibility check. Sober Stride does not store or send that category or a birth date to its servers. Where a required check cannot confirm eligibility, recovery and social features remain unavailable; existing-account management and deletion remain accessible. We do not knowingly collect personal information from children under 18. Contact us if you believe a child has provided information.

Contact

For privacy questions or requests, email support@soberstride.app.