JA RECOVERY

A daily check-in, a grounding toolkit, and a coach who sees how the week actually went.

Privacy Policy

Last updated 25 September 2026

This policy explains what the JA Recovery mobile app collects, why, who can see it, and what you can do about it. It is written to match what the app actually does; if you find a difference between this page and the app’s behaviour, tell us and we will fix whichever is wrong.

Data controller: John Adams. For any request about your data, write to john@jarecovery.org.

JA Recovery is not a medical, clinical, or emergency service. It does not diagnose, treat, or give medical advice. Its Emergency Accountability button alerts the one coach you paired with — it does not contact emergency services, and delivery over a push notification is not guaranteed. If you are in danger or thinking about harming yourself, contact your local emergency number or a crisis line right away.

Sensitive data, stated plainly. The daily Pulse Check asks you to rate your anxiety and tension, workload and bandwidth, and physical energy, and The Daily Pause asks how the day went. Those are notes about your wellbeing. We treat them as sensitive personal data: they are never sold, never used for advertising, never fed to an advertising or analytics network, and are visible only to you and to the one coach you choose to pair with.

1. What we collect

Data	Why	Who can see it
Name, email address, and optionally age and country	To create and identify your account	You; your paired coach sees your name and photo
Password	To sign you in. Held and verified by Google Firebase Authentication — we never see or store it	Nobody
Profile photo, if you choose one	To show who you are in the app	You and other signed-in accounts (see section 6)
Daily check-ins: whether the grounding routine was done, your Daily Pause note, your immediate need, and the three Pulse Check ratings	The core of the app — your own record, and what a coach reviews	You and your paired coach
Completed break-timer sessions	So the toolkit’s use appears in your history	You and your paired coach
Boundary phrases you write	So they are there the next time you need one	You
Weekly Kindness and Service Log entries	Part of the weekly routine a coach reviews	You and your paired coach
SOS alerts: when, why, any note you added, and the Pulse Check reading behind an automatic one	To notify your coach and to keep a record of what happened	You and your paired coach
In-app notifications	The feed inside the app	You
Device push tokens	So a coach’s device can receive an SOS alert	Nobody — used only to address a notification
Account timestamps (created, last active, last check-in)	To show a coach who has gone quiet	You and your paired coach
Coach accounts additionally: phone number, professional title, organisation, coach reference, working hours, SOS availability	So a member can identify and reach the right coach	Signed-in accounts looking for a coach to pair with

2. What we do not collect

No advertising, and no advertising identifier. The app contains no ad SDK and does not request the advertising identifier on either platform — neither Apple’s IDFA nor Android’s advertising ID.
No third-party analytics and no crash reporting. There is no Google Analytics, no Firebase Analytics, no Crashlytics, and no comparable SDK in the app. We do not know which screens you open.
No tracking. Nothing is linked with data from other companies’ apps or websites for any purpose.
No location. The app never requests it.
No contacts, calendar, camera, microphone, or health-app data. Photo access is used only when you tap to change your profile picture, and only the image you pick is read.

3. Where it is stored, and who processes it

The app is built on Google Firebase. Your account, check-ins, and related records live in Google Cloud Firestore; your profile photo lives in Google Cloud Storage; sign-in is handled by Firebase Authentication; notifications are delivered by Firebase Cloud Messaging. Google acts as our processor under its own data protection terms, and data may be stored and processed on Google infrastructure outside your country.

All traffic between the app and those services is encrypted in transit.

4. Sign-in providers

You can create an account with an email address and password, with Google, or with Apple (on iPhone and iPad). When you use Google or Apple we receive only what is needed to identify the account: a stable identifier, an email address, and — on the first authorization only — your name. We do not receive your password, and we do not gain access to anything else in those accounts.

If you sign in with Apple and choose to hide your email address, we receive and store Apple’s private relay address. It is a real, deliverable address and is treated exactly like any other.

5. The daily suggestion, and AI

Once a day a server-side job asks Google’s Gemini model for a short list of two-minute sensory-break prompts, and every copy of the app reads the same result. No user data of any kind is sent to that model — not your notes, not your ratings, not your name, not an identifier. The app has no conversational AI feature.

6. Sharing

We do not sell your personal data and we do not share it for advertising. Your data is shared in exactly two ways:

With the coach you pair with. Pairing is an action you take, by entering their email address. From that point they can see your name, photo, submitted check-ins, timer sessions, service log entries, SOS alerts and account activity dates. To stop it, ask us to unpair the account.
With our processors (Google, as described in section 3) and where the law requires it.

One thing worth knowing rather than discovering: profile photos and coach profile details are readable by any signed-in JA Recovery account, not only by a paired coach. Photos are addressed by account identifier, so they are not listed or browsable, but they are not private either. Do not use a profile photo you would not want another user of the app to see. Your check-ins, notes, ratings and service logs are not readable this way — those are restricted to you and your paired coach.

7. Notifications

The app sends two kinds. A local reminder at 08:00 in your own time zone, which never leaves your device and moves to tomorrow once you tick the routine. And a push notification to a coach when one of their members raises an SOS. You can turn either off in your device’s Settings; the app keeps working.

8. How long we keep it

Your records are kept while your account exists, because their point is to show a pattern over time. Delete individual entries yourself from History Logs at any time. You can delete the whole account yourself from Profile → Delete Account, which removes it and everything listed in section 1 immediately. If you ask us by email instead, we do the same within 30 days and confirm when it is done (how to delete your account).

9. Your rights

Whatever your jurisdiction, you can ask us for a copy of your data, a correction, or its deletion, and you can object to how we use it. Write to john@jarecovery.org from the address on the account. We reply within 30 days. Depending on where you live — the EU or UK (GDPR), India (DPDP Act), California (CCPA/CPRA) and others — you may also have the right to complain to your data protection authority, and you are welcome to do so without going through us first.

10. Children

JA Recovery is not directed at children and is not intended for anyone under 13. We do not knowingly collect data from a child under 13; if you believe we have, write to us and we will delete the account.

11. Changes

If this policy changes materially we update the date at the top and, where the change affects how your data is used, tell you in the app before it takes effect.

12. Using the app

If you downloaded JA Recovery from the App Store, your licence to use it is Apple’s Standard End User Licence Agreement ↗. If you downloaded it from Google Play, the Google Play Terms of Service ↗ govern your use of it. We do not add terms of our own. Three things about this app in particular are worth knowing before you rely on it, and none of them is a licence term:

Your role is permanent. An account is created as either a member or a coach, and that choice cannot be changed afterwards — the two hold different records. If you picked wrong, write to us and we will help you start again on the right one.
A coach role is not a credential. We do not verify anyone’s qualifications. It grants the ability to see the records of members who pair with you, and nothing else.
Pairing is an act of sharing. Entering a coach’s email address gives them access to everything listed in section 6 from that moment on. Pair only with someone you intend to share it with; to end it, write to us and we will unpair the accounts.

13. Contact

John Adams — john@jarecovery.org