Privacy policy

Personal progress

Sober Victory stores your sobriety start date, personal victory history, scripture reading position, favorite scriptures, reflections, and preferences on your device. The app does not upload your start date, full history, favorites, or reflections to its service. You can use the timer, bundled scripture library, breathing exercises, and personal progress features without signing in or connecting to the internet.

On iPhone and Android, the start date, the service’s authentication refresh token, and any token saved to resume an interrupted account deletion use the platform’s SecureStore storage. Other progress uses app storage. Browser use stores progress and authentication information in browser storage. Authentication tokens are excluded from progress exports. Device and operating-system backup settings may affect copies of local data; we do not claim that all local progress is encrypted or excluded from system backups.

On iPhone and iPad, the Home Screen widget uses a protected local copy of only your start date and victory count. Its displayed progress can be visible to someone viewing your unlocked Home Screen. Reflections, region, full history, and authentication information are excluded from the widget. The widget does not send this copy to the community service.

Optional community sharing

Community sharing starts off. If you enable it and record a victory, the app sends your selected region and a request identifier to the community service. The service assigns the sharing timestamp and a post ID. The public Victory Wall shows only the post ID, region, and timestamp. It does not display a name, email address, sobriety start date, reflection, or your full local history. Your shared event may reveal that you recorded a sobriety-related victory.

Posting uses Firebase Anonymous Authentication without a login screen. Firebase assigns an anonymous account identifier. The service verifies its token and stores private hashed identifiers and receipts to enforce cooldowns and avoid duplicate posts. These private records associate shared events with that anonymous account. They are not included in the public wall response.

Public wall results cover the most recent 24 hours. Entries are configured for background deletion after that period, but deletion can occur later. Private duplicate receipts and cooldown records have no automatic expiry; they are removed when you delete the related community account or when the service operator removes them. Global rate-limit records are configured for background deletion after two hours, which can also occur later. Turning sharing off prevents future sharing and does not retract an earlier post.

Optional app-usage analytics

Analytics starts off and is separate from community sharing. In versions with this feature, you can enable it in Settings to help us measure how many app installations are active each day and calendar month. The app reports foreground activity using a securely generated, random installation credential, your app version, and whether you use iPhone/iPad or Android. The service hashes the credential before storing it and assigns the activity date using UTC. It keeps one activity record per installation per day and per calendar month, rather than a precise session history.

Analytics does not send your sobriety date, victory count or history, reflections, region, scripture choices, backup contents, advertising identifier, name, or email address. It is not joined to community accounts or shared with advertisers. Activity records are private and are not shown on the public Victory Wall. This measures opted-in installations, so one person with multiple devices or a new installation can count more than once.

Turn analytics off in Settings to stop activity reports and request deletion of this installation’s retained activity. If you are offline or the service is unavailable, the app keeps the deletion request and retries when it can connect. It does not send activity while deletion is pending. Completed deletion requires an internet connection. Activity records become eligible for automatic deletion after 90 days; background deletion can occur later, and reports exclude expired records immediately.

A private hashed deletion marker prevents activity requests from recreating records while deletion is underway. After successful deletion, this marker becomes eligible for deletion after 90 days. Temporary analytics abuse-prevention counters expire after two hours. Technical hosting logs follow the provider’s configured retention. Analytics is not included in progress exports.

Infrastructure and technical information

Google Cloud Run, Firestore, and Firebase Authentication operate the community service, online scripture delivery, and optional app-usage analytics. Requests can involve IP addresses, user agents, request paths and status, timing, and error information used to run the service and prevent abuse. Firebase Authentication also processes authentication information. Public reading requests can generate technical logs even if you have disabled victory sharing and analytics. Reflection text and progress backup files are not part of these service requests.

These providers process technical and account information according to their service terms and configured retention settings. The app does not use advertising SDKs or sell information to data brokers. It does not combine your activity with other companies’ app or website data for targeted advertising.

Progress backups

Export creates a readable JSON file containing your date, victory history and count, scripture reading position, favorites, and reflections. The file excludes authentication credentials, community sharing consent, analytics consent and installation credentials, and reminder settings. The app opens the system share sheet or starts a browser download so you can choose where to keep it, including Files or iCloud Drive. This is a plaintext backup, so choose a private destination. If you choose a third-party destination or recipient, that provider or person can access the exported contents.

The app does not upload these files to the Sober Victory service. Import reads the file you select, previews its contents, and asks before replacing your local progress. Restore keeps your current community sharing and analytics choices and turns reminders off. Deleting app data does not delete copies you exported elsewhere.

Reminders

Daily reminders are optional notifications scheduled locally on your device. The app asks for notification permission when you enable them. Reminder wording is generic and does not contain your sobriety date or reflections. The app does not register for remote push notifications.

Your choices

You can leave the start date unset, use the app offline, keep community sharing off, disable reminders and analytics, and delete individual reflections. Settings → Reset Victory Count clears your local victory count and history. Settings → Reset All Data turns analytics off, queues deletion of retained analytics for this installation, clears your local progress and preferences, and attempts to cancel reminders. The app shows a message if a reset or cancellation could not be completed.

Local resets do not remove public wall posts, private service receipts and cooldown records, the Firebase anonymous account, or exported backup copies. Settings → Delete Community Account deletes your current Firebase anonymous account, its associated public wall posts, and private posting receipts and cooldown records. It keeps your local progress and turns community sharing off. Deletion requires an internet connection; if it fails, the app asks you to retry.

A minimal hashed deletion marker prevents concurrent requests from posting while deletion is underway. Incomplete deletions keep this marker until they can be completed. After successful account deletion, it is configured for background deletion after 24 hours; background removal can occur later. Technical logs follow the provider’s configured retention. Contact us for questions about service-held information or a deletion request you cannot complete in the app.

Contact

For support, privacy questions, or a deletion request, email info@sobervictory.life. Practical app instructions are available on our support page.