Consumer Health Data Privacy Policy
For residents of Washington State. Last updated: September 25, 2026
This policy explains how SOBERSTREAK AI LTD ("SoberStreak", "we") handles consumer health data, as defined by Washington's My Health My Data Act. It is separate from our general Privacy Policy, which also applies.
What we collect
SoberStreak is a recovery tracking app. The information you give us is consumer health data under the Act, and includes:
- What you are recovering from, and when you started
- Your streak, and any slips you record
- Urges you log, and how you rated them
- Journal entries you write
- Your conversations with the AI Companion
- Milestones you reach
- If you use the Community: what you post, who you follow, and your messages
We collect this only from you. We do not buy health data, obtain it from data brokers, or infer it from your activity elsewhere.
Why we collect it
To run the app you asked us to run: to track your recovery, show your progress, let you write and look back on your journal, answer you through the AI Companion, and — if you use it — let you take part in the Community. We also use it to keep the service safe, which includes detecting content that suggests someone is in crisis.
We do not use it for advertising, and we do not profile you for marketing.
Who we share it with
We do not sell your health data. Not for money, and not for anything else of value. We have never done so and have no plans to.
We share it only with service providers who help us run the app, under contract, and only for that purpose:
| Who | What they receive | Where |
|---|---|---|
| Google (Firebase) | All app data, stored and processed | Your recovery data, journal, Companion conversations and Community content are stored in London, United Kingdom. Photos you upload are stored in Turin, Italy. Your sign-in details (email address and password) are held by Google's authentication service in the United States. |
| OpenAI | Your AI Companion messages, to generate replies, and a few details about how you use the app (such as your language, local time and plan). If you turn on Personalise Companion, also some of your recovery information — including your name, streak and start dates, slips, plan answers, recent journal excerpts and urge counts; our privacy policy lists exactly what. Never your email address or account identifier. | United States |
| Resend | Crisis alert emails — a post reference and a timestamp, never your words | United States |
| RevenueCat | Subscription status only — no health data | United States |
If you use the Community, what you post there is visible to other members. That is you sharing it, not us.
One thing worth calling out, because you do not post it and it still appears: if you have set a profile photo, a copy of it is shown next to what you post in the Community. You never have to set one, and members who have not set one are shown their initials instead. Removing your photo removes the community copy with it. Your Community display name is separate and is only ever what you type yourself—we never take it from your account name.
Your rights
If you are a Washington resident, you may:
- See what we hold about you. Email us and we will tell you, including a list of the third parties above.
- Delete it. You can delete your account in Settings, which deletes your data from the systems we run on Google Firebase. You can also email us. We will also notify every service provider above of your deletion request. Here is what that means in practice: OpenAI receives your Companion messages — and, if you turn on Personalise Companion, the recovery information listed above, including your name — but never your email address or account identifier, and deletes them automatically within 30 days of receiving them; we cannot delete them earlier than that. Resend and RevenueCat hold no health data about you. We do not keep backups of your data that would outlive your deletion. One exception is yours to choose: if, when deleting your account, you ask us to leave your Community posts and replies up, we take your name, photo and profile link off them, and the words you wrote stay as you wrote them.
- Withdraw your consent to us collecting and sharing your health data. Because the app cannot work without processing this information, withdrawing means closing your account.
We will not treat you differently for exercising any of these rights.
To make a request, email hello@soberstreak.ai from the email address on your account. We will respond within 45 days, and will tell you if we need longer.
If we refuse a request, we will tell you why, and you can appeal by replying to that email. If we refuse your appeal you may contact the Washington State Attorney General.
Location
We do not use geofencing, and we do not collect or infer your precise location.
Contact
SOBERSTREAK AI LTD
hello@soberstreak.ai