The short version
Your recovery is personal, and we treat it that way. We collect what the app needs to work, we never sell your personal information, we never use your journals or coach conversations for advertising, and no ad trackers run inside the logged-in app. Marketing pages on our website use an ads pixel (like most sites); your in-app data never touches it. You can export or delete everything. The details are below, and the Consumer Health Data Privacy Policy covers health-related data specifically.
1. Who we are and what this covers
This policy explains how SoberDad Coaching LLC("Stay Dry," "we," "us") handles personal information across the Stay Dry iOS app, staydry.app, and related services (the "Service"). It applies together with our Terms of Service. For health-related data, our standalone Consumer Health Data Privacy Policy also applies. Stay Dry is not a healthcare provider, and HIPAA does not apply to the Service; the protections described here apply instead.
2. What we collect
Information you provide
- Account: email address, password (stored as a secure hash by our auth provider), optional first name.
- Onboarding answers: what you are quitting, your biggest challenge, your goal, an optional weekly spending estimate, and your sobriety start date.
- Progress and content: daily check-ins, streaks and medallions, journal entries, program progress, savings settings, and messages you send to the AI coach (plus short AI-generated summaries that give the coach memory).
- Support messages you send us (for example, by email).
Collected automatically
- Device and usage basics: IP address, device and browser type, app version, timestamps, pages or screens viewed, and error logs used to keep the Service working and secure.
From other sources
- Payments and subscription status from Apple, Stripe, and RevenueCat (our subscription infrastructure). We never see or store your full card number.
- If you sign in with Google or Apple: your email and basic profile name from that provider.
3. Health-related data: our commitments
Information like your substance focus, sobriety dates, check-ins, journal entries, and coach conversations is health-related by nature ("consumer health data" under some state laws). Our commitments:
- We never sell it. Not to anyone, not in any form.
- We never use it for advertising, and we never share it with advertising platforms. No ad trackers or pixels run inside the logged-in app, including your journal and coach.
- Nothing you tell the coach is used to decide whether or how to show you ads.
- We collect and use it only with your consent, to provide the features you asked for, as described in this policy.
The standalone Consumer Health Data Privacy Policy describes this category in the form required by Washington, Nevada, and similar laws, including how to exercise rights over it.
4. How we use information
- To run the Service: count your days, sync across devices, show your medallions, and personalize your plan and coach.
- To process subscriptions and payments and prevent double-billing across Apple and Stripe.
- For safety: automated detection of crisis language so the coach can surface crisis resources (see the Terms, Section 2).
- To provide support and respond to you.
- To secure, debug, and improve the Service, using de-identified or aggregated information where practical.
- To send service emails (verification codes, receipts, important changes), and to email you about Stay Dry itself: features, offers, and updates. Every marketing email includes a one-tap unsubscribe, and opting out never affects your access to the app. We never use your health data (like sobriety dates, journal entries, or coach conversations) to target marketing.
- To comply with law and enforce our Terms.
We do not use your personal information for automated decisions with legal or similarly significant effects.
5. How the AI coach processes your messages
When you message the coach, your message and limited context (like your first name, days sober, and recent conversation) are sent to our AI provider (currently Anthropic) to generate the reply. Our AI providers process this data to provide the service to us and are not permitted to use it to train their models. After a session, the app stores a short summary in your account so the coach remembers context; you can clear the conversation in the app, and deleting your account deletes coach data too. We do not use your conversations to train AI models.
6. Who we share information with
We share personal information only with service providers acting for us, and in the limited situations below. We never sell personal information.
- Supabase: database, authentication, and storage (hosted on AWS, United States).
- Vercel: website and API hosting.
- Stripe: web payments and billing management.
- Apple: App Store purchases and in-app subscriptions.
- RevenueCat: subscription status infrastructure.
- Anthropic: AI responses for the coach, as described in Section 5.
- TikTok: advertising measurement on our public marketing pages only (see Section 7). If you create an account or subscribe from those pages, it also receives a hashed (scrambled, not readable) version of your email address and account id, used only to match your signup to an ad. No app content, journals, coach messages, or health details are shared.
- Whop: advertising measurement on our /join marketing page only (see Section 7). It receives page views, funnel events (for example, that a signup or purchase happened and the plan price), and — if you create an account or subscribe from that page — your email address, used to attribute your signup to the ad that brought you. No app content, journals, coach messages, or health details are shared.
- Authorities or others when required by law, to protect life or safety, or to defend our rights; and a successor in a merger, acquisition, or asset sale (your data stays protected by this policy, and we will notify you of material changes).
7. Cookies, analytics, and the ads pixel
The Service uses cookies needed to keep you signed in and secure. Our public marketing pages (like the homepage and the /join page, before you are in the app) use the TikTok and Meta (Facebook) pixels to measure our ads: each receives page views and funnel events (for example, that a signup or purchase happened and the plan price) along with standard device identifiers and, if you create an account or subscribe, a hashed (not readable) version of your email address and account id for ad matching. The /join page also uses a Whop pixel for the same ad measurement, receiving the same kinds of events plus, if you create an account or subscribe there, your email address for ad attribution. None of these receive your onboarding answers, journals, coach messages, or any health details, and none run inside the logged-in app.
Those same marketing pages also use a product-analytics service provider (PostHog) to understand how visitors move through our signup funnel. It records anonymous interaction events (which step you reached, and whether a signup or purchase happened) and a session recording of the page with all on-screen text and all typed input masked, so your onboarding answers, email, and any health details are never captured or readable. It is not linked to your name or account, and it does not run inside the logged-in app.
To opt out of this measurement: enable Global Privacy Control (GPC) in your browser, and our marketing pages will not load these pixels or our funnel analytics for you; use a content blocker; adjust your TikTok or Meta ad settings; or email us and we will help. California residents: these pixels may count as "sharing" for cross-context behavioral advertising under the CCPA, and these are your opt-out methods; we honor GPC as a valid opt-out signal.
8. How long we keep information
- Account, progress, journals, and coach memory: for as long as your account exists.
- Account deletion: request in the app (where available) or by emailing support@staydry.app. We delete or de-identify your personal information within 30 days, with residual copies clearing from encrypted backups within 90 days.
- Payment and tax records: kept as required by law (typically 7 years), held by our payment processors.
- Security logs: up to 12 months.
9. Security
Your data is encrypted in transit (TLS) and at rest, access is restricted by row-level security so your records are readable only by your account, and we limit internal access. No system is perfectly secure; if a breach affects your personal information, we will notify you and regulators as the law requires.
10. Your rights and choices
Everyone
- Access and export a copy of your data (email support@staydry.app).
- Correct your information (in the app, or by email).
- Delete your account and data (in the app where available, or by email).
- Clear coach conversations in the app.
- Withdraw consent for health-data processing by deleting the related data or your account.
California residents
You have the rights to know, access, correct, delete, and port your personal information; to limit use of sensitive personal information (we already use it only to provide the Service); to opt out of sale or sharing (we do not sell; for pixel "sharing" on marketing pages, see Section 7, including GPC); and to non-discrimination. Submit requests by email; an authorized agent may act for you with proof of authority. We verify requests via your account email and respond within the legal deadlines, and you may appeal a refusal by replying to our decision.
Washington, Nevada, and similar states
Consumer health data rights (access, withdrawal of consent, deletion, and appeal) are described in the Consumer Health Data Privacy Policy.
EEA, UK, and other regions
Where GDPR-style laws apply, we process personal data to perform our contract with you (running the Service), with your consent (health-related data), and for legitimate interests (security, improvement, and emailing our own users about Stay Dry features and offers, with an opt-out in every such email). You have rights of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent, and you may complain to your local supervisory authority. Data is processed in the United States; our processors use recognized transfer safeguards such as standard contractual clauses.
11. Children
Stay Dry is for adults. You must be at least 18 to use it. We do not knowingly collect information from anyone under 18; if we learn we have, we delete it. Parents or guardians: contact support@staydry.app.
12. International users
We are based in the United States and the Service is hosted there. By using the Service you understand your information is processed in the U.S., which may have different data protection rules than your country. Where our service providers process personal information outside your country, we rely on their data processing agreements, including Standard Contractual Clauses where applicable.
If you are in the EEA, UK, or Switzerland
We process your personal information on these legal bases: performing our contract with you (providing the app and your account, Art. 6(1)(b) GDPR); your explicit consent for health-related information you choose to share, such as sobriety dates, journal entries, and coach conversations (Art. 6(1)(a) and 9(2)(a)); and our legitimate interests in securing and improving the Service and in emailing our own users about Stay Dry features and offers, each with an opt-out (Art. 6(1)(f)). You can withdraw consent at any time by deleting your account (Section 10), and withdrawal does not affect processing that happened before it.
You have the rights to access, rectify, erase, and receive a portable copy of your personal information, to restrict or object to certain processing, and to withdraw consent. Use the tools in Section 10 or email support@staydry.app; we respond within a month. You also have the right to complain to your data protection authority (in the UK, the ICO at ico.org.uk).
13. Changes to this policy
If we make material changes, we will notify you in the app or by email before they take effect, and we will not use previously collected health data for materially new purposes without your consent.
