Privacy by Design: Your Recovery Data Stays on Your Device

Why privacy matters in recovery apps

Recovery journals contain the most honest words you will write all year. They belong to you, not to an ad network or a data broker.

Public feeds can motivate some people. They harm others through comparison, outing, and employer risk. RecoveryRoad chooses private honesty as the default.

Privacy is not secrecy from your doctor or sponsor. It is control over who sees raw entries before you are ready.

Employers, insurers, and family members are not entitled to your raw recovery journal by default.

Public accountability helps some people. It harms others who need stealth recovery for safety or career reasons.

Privacy enables honesty. Honesty enables recovery. The order matters.

Legal systems vary. On-device defaults reduce vendor-held copies but cannot guarantee immunity from device seizure in every jurisdiction.

Stigma still affects hiring and custody in some cases. Private tools reduce unnecessary exposure.

You can be honest with yourself before you are honest with the world. Privacy supports that sequence.

Library and shelter Wi-Fi are risky places to email exports. Use home networks or wait until safer connectivity.

Subpoenas to cloud vendors are a reason on-device defaults matter for sensitive recovery writing.

Discuss privacy expectations with partners if you share bedrooms but not recovery details yet.

Rotate device passcodes after relationship endings if your ex knew your unlock pattern.

Corporate IT backups on work phones may capture app data. Use personal devices for sensitive journals when possible.

Read private recovery apps and local storage before debating cloud sync with a sponsor.

Annual privacy check-ins with yourself are worth calendar reminders: still comfortable with your export habits?

Privacy plus one trusted human beats perfect secrecy with zero support every time.

What RecoveryRoad does not do

RecoveryRoad does not sell check-in text, mood ratings, or urge logs to third parties.

RecoveryRoad does not show ads based on your worst Tuesday night journal entry.

RecoveryRoad does not train generative models on your recovery writing.

Compare business models in best recovery apps 2026.

No behavioral ad auctions based on your worst night.

No training generative AI on your confessions.

No selling aggregated mood data to brokers.

We do not monetize vulnerability. That principle shapes product decisions even when ad revenue is tempting industry-wide.

Vendor roadmaps can change industry-wide. RecoveryRoad commits to no data selling for core recovery features.

App lock and shared devices

Household phones, family iPads, and work devices deserve extra care. Optional app lock adds a PIN or biometric gate before opening RecoveryRoad.

App lock is not perfect security against a determined intruder with your unlocked phone. It is friction that prevents casual glances.

If you share devices, also consider shorter auto-lock on the phone itself.

Kids and partners may pick up your tablet. App lock is respect for everyone's boundaries.

Biometrics fail when you are sweaty mid-panic. Know your PIN backup.

Combine app lock with short screen timeout at the OS level.

Rotate PINs if you suspect someone guessed them.

Exports, backups, and therapist sharing

You may want a sponsor, therapist, or partner to see some entries. Export or screenshot what you choose. Nothing uploads automatically.

Therapists often prefer themed summaries over raw dumps. Share patterns from growth insights when full journals feel too exposed.

Cloud backups of your entire phone may include app data depending on OS settings. Review Apple or Google backup policies if that matters to you.

Therapists may prefer you summarize themes weekly instead of dumping years of entries.

iCloud and Google backups may include app data depending on settings. Review vendor docs if paranoid, reasonably.

You choose every screenshot sent to a sponsor.

Ask therapists how they store SMS or email exports you send. Your privacy choices extend beyond RecoveryRoad.

Redact third-party names in exports if you share documents beyond therapy.

Privacy across features

Stability Score and growth insights use the same on-device check-in history.

Identity workbook answers stay local like journal text.

Crisis support tools do not broadcast when you open them.

Crisis tool opens are not broadcast to contacts automatically.

Workbook and journal share the same local storage model.

Stability Score and insights derive from check-ins you already own locally.

Feature updates should not silently opt you into cloud sync. Watch release notes if that ever changes.

Web tools vs app storage

Browser tools on tools use localStorage on that browser only. They are separate from app data unless you manually connect the habits.

The recovery calculator never uploads your start date to RecoveryRoad servers during normal use.

Read getting started to see how app and web resources fit together.

Clearing browser data wipes web tool inputs. App data is separate unless you manually bridge habits.

Use web calculators on shared computers in private windows when possible.

Read getting started for how web and app fit together.

Incognito windows forget web tool data when closed. Useful on library computers.

When privacy is not enough

Privacy protects data. It does not replace emergency care. If you are in danger, call local emergency services or 988 in the US. Visit crisis resources.

Storing secrets alone can isolate you. Privacy plus one trusted human beats perfect encryption with zero support.

Isolation kills. Privacy from the internet is not the same as isolation from all humans.

Tell one trusted person you are struggling even if the app stays private.

Emergencies bypass privacy concerns. Call for help.

Mandatory reporting laws may require therapists to act on specific disclosures. That is separate from app privacy.

Honest limits

No app can guarantee absolute security against a compromised operating system or physical device theft. Use OS updates, strong device passcodes, and app lock together.

RecoveryRoad is a wellness tool, not a HIPAA-covered medical record system. Treat exports to clinicians according to their office policies.

Definitions for terms like craving and relapse live in the glossary.

Stolen unlocked phones expose any app. Physical security still matters.

RecoveryRoad is not a HIPAA-covered record unless your clinician says otherwise in their workflow.

Legal requests to vendors differ by company. On-device default minimizes vendor-held content.

Law enforcement device searches are a real-world risk category. Know your rights and local law if that applies to you.

Forensic tools on seized devices exist. Extreme threat models need professional security advice.

Corporate MDM-managed phones may restrict apps or inspect storage. Ask IT if that applies before storing sensitive journals.

Two-factor authentication on email matters if you ever email exports to yourself.

Review app permissions yearly. RecoveryRoad should not need unrelated location or contacts access for core features.

Teach teens in the house that private phones deserve privacy. Modeling boundaries protects everyone.

Privacy decisions for exports, backups, and shared devices

Exporting journal text to email or cloud drives moves data outside RecoveryRoad's on-device default. That can be right for therapy; it is also a conscious risk trade.

Phone OS backups may include app data depending on vendor settings. Review Apple iCloud and Google backup docs if your threat model includes device loss or account compromise.

Work phones managed by employers may restrict apps or inspect storage. Use a personal device for sensitive recovery writing when corporate MDM policies apply.

App lock plus short screen timeout protects shared households better than either alone. Rotate PINs after relationship changes if someone knew your unlock pattern.

Read private recovery apps and local storage for a longer technical comparison of local vs cloud recovery tools.

Discuss privacy expectations with partners if you share bedrooms but not recovery details yet. Boundaries are part of safety, not secrecy for its own sake.

Annual privacy check-ins with yourself are worth calendar reminders: still comfortable with export habits, backup settings, and who has device access?