Privacy Policy

• Account: your email address and password (stored hashed by our authentication provider), a username, and optionally a first name and last initial — to sign you in and let friends find you.
• What you track: what you’re quitting (a label and category), your start date, setbacks and any notes you add, and optionally how much you used to spend — to count your days, show milestones and estimate money saved.
• Social activity: friends and friend requests, cheers, reactions, comments, rooms you join, Community posts, reactions and followed topics, and people you block.
• Settings and consent: your time zone (to count days correctly), theme, privacy choices, and a record of when you agreed to our Terms, confirmed you’re 18+, and consented to health-data processing.
• Safety: reports, and records of automatic filter hits and temporary restrictions — to keep the community safe.

• Your username is visible to your friends, to people who search for it to add you, and in rooms or Community when you choose not to be anonymous there.
• Your first name and last initial are shown to friends only if you turn on “show my name”.
• Friends see each item you mark “Friends”: its name, your current streak, the dates needed to count it (start date and current-streak start) and your time zone. They never see money, setback notes or items marked “Only me”. If you turn on sharing setbacks, friends also see a “fresh start” on the day of a setback (never the note).
• Rooms show members’ milestones on friend-visible items. If you’re anonymous in a room, you appear under a room-only nickname; friends who can already see that item don’t see your room milestones there.
• Community posts appear under a Community-only nickname if you post anonymously, otherwise under your @username. Posts never include your streaks, items, milestones or profile details. What you choose as your “stage” is never shown.
• Nicknames are different in every room and in Community, and are never shown next to your username.

Nobody else sees your email, money figures, setback notes, time zone (except friends, as above), reports or moderation records.

We don’t sell or rent your data, don’t show ads, and don’t use analytics, advertising or tracking tools. We don’t share your data with anyone except the service providers below, who process it only to run Sober Fam.

• Supabase — database and sign-in (United States, Ohio).
• Vercel — hosting; keeps request logs such as IP address and browser type.
• Resend — sends account emails (confirm your email, reset your password).
• Cloudflare — domain name service; the Turnstile check on sign-up, sign-in and password reset, which looks at browser signals to tell people from bots; and forwarding of emails to our support and privacy addresses.

We use one kind of cookie: the one that keeps you signed in (plus a short-lived one during a password reset). No analytics or advertising cookies. The app also saves a few display preferences in your browser only (such as which card view you last chose). Cloudflare Turnstile runs on the sign-up, sign-in and password-reset pages under Cloudflare’s own terms.

We keep your data until you delete it or delete your account. Our database plan has no backups, so deleted data isn’t kept in a backup copy. Our providers keep their own logs (for example request and delivery logs) for their own retention periods.

• Download: Settings → Privacy & your data → Download my data gives you a file with your account, items, setbacks and notes, milestones, comments, reactions, cheers, friends, rooms (with your own nicknames), Community activity, blocks and moderation records. For privacy, people you blocked anonymously appear only by their masked nickname, and reports you filed are not included because they contain other people’s content.
• Delete: Settings → Delete account permanently deletes your account and everything linked to it, straight away: items, setbacks, notes, milestones, comments (and others’ comments on your milestones), reactions, cheers, friendships, blocks, rooms and Community activity.
• Reports: reports are deleted when either the person who reported or the person reported deletes their account.
• You can also delete individual items, setbacks, comments and posts, or make an item “Only me”.

Data is sent over encrypted connections. Our database only lets each person read their own records; anything shown to others goes through checks that return only the fields described above. Passwords are stored hashed by our sign-in provider, and a bot check protects sign-up, sign-in and password reset. No system is perfectly secure.

Sober Fam is for people 18 and older. We don’t knowingly collect data from anyone under 18; if you believe a minor has an account, contact us and we’ll delete it.

If we make material changes, we’ll update the date and version above and ask you to agree again before you continue using the app.

Matchd LLC · privacy@soberfam.org