Privacy Policy
Last updated: September 3, 2026
Overview
Rhythm Recovery ("we," "us") helps you track daily activities over a 90-day period. This policy explains what information we collect, how we use it, and the choices you have. We do not sell your personal information, and we do not share it with third parties for their own marketing purposes.
Information We Collect
Account information
- Email address (for sign-in and account recovery)
- Google account identifier, if you sign up with Google
- Password (stored as a salted hash, we never store or can see your plaintext password)
Profile information
- Auto-generated anonymous username (editable by you at any time)
- Your daily activity list and completion history
- Streak history and earned badges
- Sponsor, service position, and homegroup status
Communication preferences
- Reminder settings (in-app and email reminders, each on or off independently)
- Your timezone (used only to send reminders at the right local time)
- Subscriber list status (opted in or out of product-update emails)
Usage analytics
Aggregate, non-identifying usage data (e.g. page views) via Vercel Analytics, used solely to improve the product. We do not use analytics to build advertising profiles.
What We Don't Do
- We do not sell, rent, or trade your personal information.
- We do not share your data with third parties for their own marketing.
- We do not retain data longer than needed to operate the product or as required by law.
- We do not use your activity content (what you're tracking) for anything other than displaying it back to you.
How We Use Information
- To operate your account and the core tracking features
- To send reminders you've opted into (in-app, email, or both)
- To send product-update emails, only if you've opted in (unsubscribe available from account settings, and from a one-click link in every marketing email sent to a signed-in account)
- To improve the product via aggregate, non-identifying analytics
- To respond to support requests
Data Retention & Deletion
- Your data is retained only as long as your account is active.
- You can delete your account at any time from your profile settings; this immediately and permanently removes your profile, activity history, and preferences.
- Backups are purged on a rolling basis and do not persist deleted data indefinitely.
Third-Party Services
We use third-party infrastructure providers to operate the product. These providers process data only on our behalf, under contractual terms that prohibit them from using it for their own purposes:
- Supabase — authentication and the primary database (profiles, daily activity)
- Resend — sends account and reminder emails
- Google — "Continue with Google" sign-in, if you use it
- Vercel — hosting and aggregate analytics
Your Choices
- Change your anonymous display name, sponsor/service position/homegroup status, and sobriety date at any time from your profile
- Turn in-app and email reminders on or off independently
- Opt in/out of product-update emails independently of reminders
- Delete your account at any time from your profile
Children's Privacy
This service is not directed to children under 13, and we do not knowingly collect information from them.
Changes to This Policy
We'll notify users of material changes via email and update the "Last updated" date above.