Recovery App Privacy: Core Records and Optional Services

Why privacy matters in recovery apps

Recovery journals contain the most honest words you will write all year. They belong to you, not to an ad network or a data broker.

Public feeds can motivate some people. They harm others through comparison, outing, and employer risk. RecoveryRoad chooses private honesty as the default.

Privacy is not secrecy from your doctor or sponsor. It is control over who sees raw entries before you are ready.

Employers, insurers, and family members are not entitled to your raw recovery journal by default.

Public accountability helps some people. It harms others who need stealth recovery for safety or career reasons.

Privacy enables honesty. Honesty enables recovery. The order matters.

Legal systems vary. On-device defaults reduce vendor-held copies but cannot guarantee immunity from device seizure in every jurisdiction.

Stigma still affects hiring and custody in some cases. Private tools reduce unnecessary exposure.

You can be honest with yourself before you are honest with the world. Privacy supports that sequence.

Library and shelter Wi-Fi are risky places to email exports. Use home networks or wait until safer connectivity.

Subpoenas to cloud vendors are a reason on-device defaults matter for sensitive recovery writing.

Discuss privacy expectations with partners if you share bedrooms but not recovery details yet.

Rotate device passcodes after relationship endings if your ex knew your unlock pattern.

Corporate IT backups on work phones may capture app data. Use personal devices for sensitive journals when possible.

Read private recovery apps and local storage before debating cloud sync with a sponsor.

Annual privacy check-ins with yourself are worth calendar reminders: still comfortable with your export habits?

Privacy plus one trusted human beats perfect secrecy with zero support every time.

What RecoveryRoad does not do

RecoveryRoad does not sell check-in text, mood ratings, or urge logs to third parties.

RecoveryRoad does not show ads based on your worst Tuesday night journal entry.

RecoveryRoad does not train generative models on your recovery writing.

RecoveryRoad does not use your journal or check-ins for cross-app advertising tracking.

RecoveryRoad does not intentionally share your on-device journal with advertisers.

Compare business models in best recovery apps 2026.

No behavioral ad auctions based on your worst night.

No training generative AI on your confessions.

No selling aggregated mood data to brokers.

We do not monetize vulnerability. That principle shapes product decisions even when ad revenue is tempting industry-wide.

Vendor roadmaps can change industry-wide. RecoveryRoad commits to no data selling for core recovery features.

What can leave your phone, and when?

Everyday check-ins, journal entries, plans, and preferences are stored on your phone unless a feature you actively use sends specific information elsewhere. Some sensitive values, such as optional PIN-related material, use your phone's secure storage (iOS Keychain or Android Keystore) where supported.

Purchases are separate from what you write. RecoveryRoad is a free download with optional in-app purchases. Apple and Google process purchases and receipts. When subscriptions use RevenueCat, it receives subscription details and a pseudonymous app user ID, but not your journal text.

Using a share sheet, copying or exporting can move content outside the app. Review the destination service and what the file or message includes before sending.

If a version of the app includes live community or recovery rooms, what you submit to those features goes to that service's operator.

Reminders are scheduled locally on your device, and only for the ones you turn on.

If you email support, send the website request form, or sign up for the free guide, you share the details you type. The request form asks for your name, phone, email, and a note, and you may attach a file. The guide form asks for your email. The app and the recoveryroad.app website are separate. The website uses Google Analytics 4 and Microsoft Clarity on the website only, with inputs masked, and it does not load advertising trackers. Read the privacy policy, last updated October 31, 2026.

Settings includes Delete account. That action permanently erases the locally stored app data listed in the confirmation dialog on that device. Uninstalling also removes app data from the device, although your phone's backups may keep a copy until they rotate. Purchase records kept by Apple, Google, or RevenueCat follow their own policies. Ask about information tied to you from the contact page, and read how deletion works.

See the private recovery app page for how on-device journaling differs from a public feed, and the App Store listing for the store page.

App lock and shared devices

Household phones, family iPads, and work devices deserve extra care. Optional app lock adds a PIN before opening RecoveryRoad.

App lock is not perfect security against a determined intruder with your unlocked phone. It is friction that prevents casual glances.

If you share devices, also consider shorter auto-lock on the phone itself.

Kids and partners may pick up your tablet. App lock is respect for everyone's boundaries.

Combine app lock with short screen timeout at the OS level.

Rotate PINs if you suspect someone guessed them.

Exports, backups, and therapist sharing

You may want a sponsor, therapist, or partner to see some entries. Before sharing, check what the file or screenshot contains and who will receive it. Platform backups and optional services have separate data flows.

Therapists often prefer themed summaries over raw dumps. Share patterns from growth insights when full journals feel too exposed.

Cloud backups of your entire phone may include app data depending on OS settings. Review Apple or Google backup policies if that matters to you.

Therapists may prefer you summarize themes weekly instead of dumping years of entries.

iCloud and Google backups may include app data depending on settings. Review vendor docs if paranoid, reasonably.

You choose every screenshot sent to a sponsor.

Ask therapists how they store SMS or email exports you send. Your privacy choices extend beyond RecoveryRoad.

Redact third-party names in exports if you share documents beyond therapy.

Privacy across features

Stability Score and growth insights use the same on-device check-in history.

Identity workbook answers stay local like journal text.

Crisis support tools do not broadcast when you open them.

Crisis tool opens are not broadcast to contacts automatically.

Workbook and journal share the same local storage model.

Stability Score and insights derive from check-ins you already own locally.

Feature updates should not silently opt you into cloud sync. Watch release notes if that ever changes.

Web tools vs app storage

Browser tools on tools use localStorage on that browser only. They are separate from app data unless you manually connect the habits.

The recovery calculator never uploads your start date to RecoveryRoad servers during normal use.

Read getting started to see how app and web resources fit together.

Clearing browser data wipes web tool inputs. App data is separate unless you manually bridge habits.

Use web calculators on shared computers in private windows when possible.

Read getting started for how web and app fit together.

Incognito windows forget web tool data when closed. Useful on library computers.

When privacy is not enough

Privacy protects data. It does not replace emergency care. If you are in danger, call local emergency services or 988 in the US. Visit crisis resources.

Storing secrets alone can isolate you. Privacy plus one trusted human beats perfect encryption with zero support.

Isolation kills. Privacy from the internet is not the same as isolation from all humans.

Tell one trusted person you are struggling even if the app stays private.

Emergencies bypass privacy concerns. Call for help.

Mandatory reporting laws may require therapists to act on specific disclosures. That is separate from app privacy.

Honest limits

No app can guarantee absolute security against a compromised operating system or physical device theft. Use OS updates, strong device passcodes, and app lock together.

RecoveryRoad is a wellness tool, not a HIPAA-covered medical record system. Treat exports to clinicians according to their office policies.

Definitions for terms like craving and relapse live in the glossary.

Stolen unlocked phones expose any app. Physical security still matters.

RecoveryRoad is not a HIPAA-covered record unless your clinician says otherwise in their workflow.

Legal requests to vendors differ by company. On-device default minimizes vendor-held content.

Law enforcement device searches are a real-world risk category. Know your rights and local law if that applies to you.

Forensic tools on seized devices exist. Extreme threat models need professional security advice.

Corporate MDM-managed phones may restrict apps or inspect storage. Ask IT if that applies before storing sensitive journals.

Two-factor authentication on email matters if you ever email exports to yourself.

Review app permissions yearly. RecoveryRoad should not need unrelated location or contacts access for core features.

Teach teens in the house that private phones deserve privacy. Modeling boundaries protects everyone.

Privacy decisions for exports, backups, and shared devices

Exporting journal text to email or cloud drives moves data outside RecoveryRoad's on-device default. That can be right for therapy; it is also a conscious risk trade.

Phone OS backups may include app data depending on vendor settings. Review Apple iCloud and Google backup docs if your threat model includes device loss or account compromise.

Work phones managed by employers may restrict apps or inspect storage. Use a personal device for sensitive recovery writing when corporate MDM policies apply.

App lock plus short screen timeout protects shared households better than either alone. Rotate PINs after relationship changes if someone knew your unlock pattern.

Read private recovery apps and local storage for a longer technical comparison of local vs cloud recovery tools.

Discuss privacy expectations with partners if you share bedrooms but not recovery details yet. Boundaries are part of safety, not secrecy for its own sake.

Annual privacy check-ins with yourself are worth calendar reminders: still comfortable with export habits, backup settings, and who has device access?