Privacy policy

Placeholder — replace with real privacy policy before launch.

Still collects sensitive information about alcohol use and mental health. Users are trusting you with it. Before going live, have an attorney draft a real privacy policy that accurately describes what you collect, how you store it, who you share it with (ideally no one), and how users can delete their data. Note that although most self-directed wellness apps are not HIPAA-covered entities, the FTC Health Breach Notification Rule may still apply, and state privacy laws (particularly in California, Washington, and several others) have specific requirements around health data.

At minimum: do not sell user data. Do not share with advertisers. Do not use third-party analytics that exfiltrate drinking-related behavior to Meta or Google. Use privacy-respecting analytics (Plausible, Fathom) and keep the blast radius small.