Privacy Policy

1. Introduction

Welcome to Climr ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the "Service").

Please read this policy carefully. If you disagree with its terms, please discontinue use of our Service. By accessing or using the Service, you agree to this Privacy Policy.

2. Information We Collect

We collect information that you provide directly to us, information collected automatically, and information from third parties.

Information You Provide:

• Account registration data (email address, username, password)
• Profile information (age range, recovery goals)
• Journal entries and daily check-in logs
• Responses to our onboarding quiz and assessments
• Messages sent through the AI Recovery Chat feature
• Communications you send to our support team

Information Collected Automatically:

• Device identifiers and operating system information
• App usage data, feature interactions, and session duration
• Streak data, check-in timestamps, and progress metrics
• Crash reports and diagnostic data
• IP address and approximate geographic location (country/region level)

3. How We Use Your Data

We use the information we collect to operate, improve, and personalize the Service. Specifically, we use your data to:

• Create and manage your account and deliver the core app features
• Power the AI Warrior Coach with personalized motivational content based on your streak and progress
• Track and display your recovery streaks, badges, and milestones
• Analyze usage patterns to improve app performance and features
• Send you optional notifications, reminders, and progress updates
• Respond to customer support inquiries
• Comply with legal obligations and enforce our Terms of Service
• Detect, prevent, and address fraud, abuse, and security issues

We do not sell your personal data to third parties. We do not use your journal entries or chat logs for advertising purposes.

4. Sensitive Health Information

Climr is a recovery support application. Information you provide about your addiction history, mental health, urges, and related topics is treated as sensitive health data. We apply heightened protections to this category of information:

• Sensitive health data is encrypted at rest and in transit using industry-standard AES-256 and TLS 1.3
• Access to this data is strictly limited to authorized personnel on a need-to-know basis
• We will never sell, rent, or share sensitive health data with advertisers or data brokers
• AI chat and journal data is processed to deliver the service and is not used for external model training without explicit opt-in consent

5. Third-Party Services

We use select third-party service providers to help us operate the Service. These providers may have access to certain information solely to perform tasks on our behalf:

• Cloud Infrastructure: Hosting, storage, and database services (e.g., AWS, Google Cloud)
• Analytics: Aggregated, anonymized usage analytics to improve the app
• AI Services: Large language model APIs used to power the AI Warrior Coach and Recovery Chat
• Push Notifications: Apple Push Notification Service (APNs) and Firebase Cloud Messaging (FCM)
• Payment Processing: Stripe or Apple/Google in-app purchase systems for any premium features
• Crash Reporting: Error logging services to diagnose and fix technical issues

All third-party providers are contractually obligated to protect your data and use it only as directed by us.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:

• Account data is retained for the duration of your account plus 30 days after deletion
• Journal entries and chat logs are retained until you delete them or close your account
• Anonymized analytics data may be retained indefinitely for product improvement purposes
• Backup data may persist for up to 90 days after deletion for disaster recovery purposes

You may delete your account and associated data at any time through the app settings or by contacting us at the address below. Upon deletion request, we will remove your personal data within 30 days, subject to legal retention requirements.

7. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your account and personal data
• Portability: Request an export of your data in a machine-readable format
• Opt-out: Opt out of non-essential communications and certain data processing
• Restriction: Request that we restrict processing of your data in certain circumstances

To exercise any of these rights, contact us using the information in the Contact section below.

8. Children's Privacy

Climr is intended for users aged 18 and older. We do not knowingly collect personal information from individuals under the age of 18. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will take steps to delete such information.

9. Security

We implement industry-standard technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These include encryption at rest and in transit, access controls, regular security audits, and secure development practices.

No method of electronic transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy in the app with an updated "Last updated" date, and, where required by law, by seeking your consent. We encourage you to review this policy periodically.

11. Contact

If you have questions about this Privacy Policy or our data practices, please contact us: