Privacy Policy
Draft — last reviewed 2026-08-05. Written to accurately describe what this app actually stores, not generic boilerplate.
What we collect
When you join, we store:
- A nickname you choose (defaults to "Anonymous").
- The recovery stage you select.
- What you post and reply, and which room it's in.
- Which rooms you've visited and when, so the site can show you where you left off.
Optional, and only if you choose to provide it:
- A real name or photo, kept in a separate, private table only you can read — never shown to other members.
- A general location, if you volunteer it.
- An email address, only if you opt in after your first post, used solely to notify you of replies. This is stored separately from your public profile and is never shown to other members.
What we don't collect
No real name or ID is required to join. No detailed medical history is collected. We don't track you across other websites, and we don't sell or share your data with advertisers.
Anonymous accounts
Your account is created through Supabase's anonymous authentication — you get a real account with no email or password required. Your posts are linked to that account, not to any real-world identity, unless you separately choose to add one.
AI onboarding (optional feature)
Onboarding can optionally use Anthropic's Claude API to turn a free-form description into a draft profile. This feature is off by default. When it's on, the text you type is sent to Anthropic's API to generate a draft, which you must confirm before anything is saved — nothing is saved automatically. If AI is off, or unavailable, a free keyword-matching fallback is used instead, and no text leaves our own systems.
Analytics
We use privacy-friendly, cookie-free analytics (Vercel Analytics) to understand aggregate usage — page visits, not individual tracking across other sites.
Where data lives
Data is stored in Supabase (a hosted Postgres database) and the app runs on Vercel. Row-level security rules restrict what any given account can read or write — for example, your real name (if you add one) is only ever readable by you, never by other members or by a database query that forgot to filter it out.
Reports
If you report a post or reply, that report is visible only to moderators, never to other members — including the person you reported.
Your choices
You can stop using the site at any time. Because accounts are anonymous by default, there's no persistent real-world identifier tying your activity to you unless you chose to add one. If you'd like your data deleted, see Contact.