Privacy Policy

Introduction

RecoverWell ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our recovery support platform and mobile application (collectively, the "Service"). By using RecoverWell, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Personal Information

We collect personal information that you voluntarily provide to us when you register for the Service, including your name, email address, phone number, date of birth, and recovery-related information such as sobriety dates and recovery goals. We may also collect demographic information, emergency contact details, and counselor or sponsor information if you choose to provide it.

Health and Wellness Data

RecoverWell may collect health and wellness data to support your recovery journey, including mood tracking, medication adherence, meeting attendance, and biometric data from integrated wearable devices. This data is considered sensitive personal information and is handled with the highest level of security and confidentiality.

Oura Ring Integration

RecoverWell integrates with Oura Ring to access your health and activity data with your explicit consent. When you connect your Oura account to RecoverWell, we may collect sleep data, activity metrics, readiness scores, heart rate variability, body temperature, and other biometric information provided by Oura. We comply with GDPR Article 32(1) security measures to protect your Oura data and use commercially reasonable administrative, technical, and physical safeguards to maintain the security and integrity of all Oura user personal and activity data.

Your Oura data is used solely for recovery tracking and wellness features within RecoverWell, including correlating sleep quality with recovery progress, identifying patterns that may indicate increased relapse risk, and providing personalized wellness recommendations. We will notify you and Oura within twenty-four (24) hours of discovering any security breach involving your Oura data. You can revoke RecoverWell's access to your Oura data at any time through your Oura account settings or by contacting us directly.

Financial Information

If you use RecoverWell Bank or Marketplace features, we collect financial information necessary to process transactions, including bank account details, payment card information, and transaction history. All financial data is encrypted and processed through secure, PCI-compliant payment processors. We do not store complete payment card numbers on our servers.

Usage Data

We automatically collect certain information when you access and use the Service, including your IP address, device type, operating system, browser type, app version, pages viewed, time spent on pages, navigation paths, and interaction patterns. We use this data to improve the Service, diagnose technical issues, and understand how users engage with our platform.

Location Data

With your permission, we may collect precise location data to provide location-based features such as finding nearby meetings, sober living facilities, and support resources. You can disable location services at any time through your device settings.

Communications

We collect information from your communications with us, including messages sent through the platform, emails, support tickets, and feedback. We may also collect the content of messages you send to other users through our messaging features, but we do not monitor or read private messages except as required for safety, security, or legal compliance purposes.

How We Use Your Information

We use the information we collect for the following purposes: to provide, maintain, and improve the Service; to personalize your experience and deliver content and features tailored to your recovery journey; to process transactions and manage your RecoverWell Bank account; to communicate with you about your account, updates, and support; to send you notifications, reminders, and motivational messages; to connect you with counselors, sponsors, peers, and support resources; to monitor and analyze usage patterns and trends; to detect, prevent, and address technical issues, fraud, and security threats; to comply with legal obligations and enforce our Terms of Service; and to conduct research and development to enhance our recovery support tools.

Data Sharing and Disclosure

With Your Consent

We may share your information with third parties when you explicitly consent to such sharing, including when you connect with counselors, sponsors, or support groups through the platform, or when you authorize us to share data with integrated health services.

Service Providers

We may share your information with trusted third-party service providers who assist us in operating the Service, including cloud hosting providers, payment processors, analytics services, customer support tools, and communication platforms. These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities, including to meet national security or law enforcement requirements. We may also disclose information to protect the rights, property, or safety of RecoverWell, our users, or others, or to prevent imminent harm.

Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on our Service of any change in ownership or use of your personal information.

Aggregated and De-identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you for research, analytics, marketing, or other purposes. This data does not contain personally identifiable information and is used to improve recovery support services broadly.

Data Security

We implement industry-standard security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, secure authentication protocols, regular security audits, access controls and role-based permissions, and employee training on data protection practices. We comply with GDPR Article 32(1) requirements and maintain commercially reasonable administrative, technical, and physical safeguards.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. In the event of a data breach, we will notify affected users and relevant authorities within twenty-four (24) hours of discovery, as required by applicable law and our agreements with third-party data providers such as Oura.

Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information, including the right to access, correct, or delete your personal data; the right to restrict or object to certain processing activities; the right to data portability; the right to withdraw consent at any time; and the right to lodge a complaint with a supervisory authority.

To exercise these rights, please contact us at [email protected]. We will respond to your request within thirty (30) days. You may also access and update certain information directly through your account settings within the Service.

Data Retention

We retain your personal information for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When you delete your account, we will delete or anonymize your personal information within ninety (90) days, except where we are required to retain certain data for legal, regulatory, or security purposes.

Children's Privacy

RecoverWell is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will take steps to delete such information from our systems.

International Data Transfers

Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. By using the Service, you consent to the transfer of your information to Canada and other countries where we operate. We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable law.

Third-Party Links and Services

The Service may contain links to third-party websites, applications, or services that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through RecoverWell.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically. Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: