Privacy policy

Recovery Milestones is based in Falmouth, Massachusetts. Questions: contact@recoverymilestones.example. Last updated: October 2026.

The short version

We never sell your data — not to businesses, advertisers, data brokers or anyone else.
Your sobriety date is private by default. It is only shown publicly if you turn that on.
Businesses never see who you are. They see a reward code and which milestone it celebrates.
No ads and no tracking scripts. No analytics pixels, no third-party cookies.
You can download or delete your data any time in Settings, or by emailing us.

What we collect

Sign-in details from Google, Facebook or email: your email address and basic profile name. We do not get your contacts, friends, posts or birthday, and we never post for you.
What you give us: clean/sobriety date, optional display name, time zone, privacy choices, email choices, meeting reminders, daily check-ins, celebration cards, and any supporters you add (their name and email, which you confirm they agreed to share).
Rewards: codes you claim and whether they were used.
Coach requests: the name, contact details and message you send, with your consent, so our team can follow up.
Businesses: business name, contact, address, map location and offers.

How we use it

To count your days, show your milestones and badges, and find rewards you qualify for.
To send emails you opted in to (milestone emails, meeting reminders), and — only if you turn it on for them — short milestone notes to supporters you added. Every email has a one-click unsubscribe link.
To connect you with a recovery coach if you ask.
To report aggregate totals to funders and partners (for example, “214 milestones celebrated”). Counts under 10 are shown as “<10”. We never give funders individual records.

What is public

Nothing about you is public unless you choose it. If you make your badge wall public, anyone with the link can see your badges and the notes you approved. Your name and dates show only if you turn those options on. Celebration cards show only what you ticked when making them. Facebook link previews use a general Recovery Milestones image — never your date.

Who processes data for us

We use Supabase (database and sign-in, hosted in the United States), Resend (sending email), our website host, and OpenStreetMap map tiles. Business address lookups use OpenStreetMap Nominatim. These providers process data only to run the service. If online sponsor payments are switched on, businesses pay through Stripe; we never see card numbers.

Health information

A sobriety date can be sensitive. We treat it as confidential, keep it encrypted in transit, limit who can access it with strict database rules, and never share it. Recovery Milestones is a community celebration tool, not a medical or treatment service, and is not a substitute for professional care.

Deleting your data

Use Settings → Delete my data to permanently remove your profile, badges, codes, cards, supporters, notes, reminders, check-ins and coach requests. Or email contact@recoverymilestones.example and we will delete it within 30 days. Backups roll off within our provider's backup window.

Children

This service is for adults 18 and older.

Changes

If we make meaningful changes we will update this page and, for big changes, email members who opted in to emails.