1. Who is responsible for your data
The data controller for Reclaim is Michał Kolaczek, an individual based in Poland.
You can reach us at [email protected] for any privacy question, to exercise your rights, or to make a complaint.
We are a solo operator. We do not have a Data Protection Officer, which the law does not require of us, but the contact address above reaches the person responsible for your data directly.
2. The short version
- You need to be 18 or older to use Reclaim.
- We collect the account details you give us, the profile you fill in, and the content you create in the app (coach chats, reflections, streaks, forum posts).
- Because Reclaim is a recovery app, some of this is sensitive data about your health and sexual behaviour. We only process it with your explicit consent, which you can withdraw at any time by deleting your account.
- Your account data is stored in the European Union.
- Your messages to the in-app AI coach are sent to OpenAI (in the United States) to generate replies. That is the only place your recovery content leaves the EU. A small amount of technical and account-identifier data also reaches our US-based subscription and app-delivery providers — Section 7 lists every transfer.
- We do not sell your data, show you ads, track you across other apps, or use your recovery data to train AI or to "improve the app".
- You can delete your account and data from inside the app at any time.
The rest of this document is the detail behind those points.
3. What we collect, and why
3.1 Account and sign-in
- Email address — if you sign up with email and password.
- Google or Apple sign-in — if you sign in with Google or Apple, we receive a secure sign-in token and your email address from them. If you use Sign in with Apple, Apple may give us a private relay email instead of your real one.
We use this to create and secure your account and to sign you in. Your password, if you use one, is handled by our authentication provider (Supabase) and is never visible to us in readable form.
3.2 Your profile
- Name, nickname, age, gender, chosen avatar, and time zone.
Your nickname is how other users see you in the community. Your name, age, and gender are never shown to other users; they help the app address you and tailor the experience.
3.3 What you create in the app (sensitive data)
Reclaim is a recovery tool, so the content below reveals information about your health and sexual behaviour. We process it only to provide the app to you:
- Coach conversations — the messages you send to the AI coach, and its replies.
- A private coach summary — to hold a normal conversation over time, the coach keeps a short private summary of what you have told it (the patterns, preferences, and context you share) so it can talk to you with continuity, the way a person remembers past conversations. This is a plain memory aid, not a psychological or clinical assessment of you.
- Reflections — the written diary entries you save.
- Streaks and relapse logs — the dates and progress markers you record.
- Points, task and habit progress — how you move through the program.
- Notification preference — whether you have push notifications turned on (and, if so, a device token so we can send them).
3.4 Community content
If you use the community forum:
- Posts, comments, and likes you create are visible to other Reclaim users under your nickname, not your real name.
- Reports you submit about other people's content (and the reason you give).
3.5 Support
- Bug reports and feedback you choose to send us, including anything you write in them.
3.6 Subscriptions
Reclaim is currently free — there is nothing to buy. The subscription system it will eventually run on (RevenueCat) is already switched on in the app, so that purchases work the moment paid plans launch. That means from the first time you open Reclaim:
- RevenueCat is given an anonymous device identifier and, once you sign in, your Reclaim account ID — a random string, not your name or email — so that a future subscription would follow your account rather than your handset.
- It receives basic device and app information and your IP address, which it uses to work out which country you are in.
- It stores your subscription status, which today is simply "none".
RevenueCat receives no coach chats, reflections, streaks, community content, or any other recovery data. Nothing we send it reveals what the app is for.
We never receive or store your card or bank details. If paid plans launch, payment itself is handled entirely by the App Store and Google Play — see Section 11.
3.7 Technical data
Standard information needed to run a mobile app, such as basic device and app information and, if you enable notifications, a push token.
Each time you open Reclaim, the app also asks Expo's update service whether a newer version of itself is available. That check sends your IP address and the app's version identifier — nothing about you, your account, or anything you have written in the app.
We do not use third-party analytics or advertising SDKs, so we do not build an activity profile of you and we do not track you across other apps or websites. Reclaim is a mobile app and does not use cookies or other web-tracking technologies.
4. Our legal bases for using your data
Under the GDPR we rely on the following legal bases:
- Your explicit consent (Art. 9(2)(a)) — for all the sensitive recovery data in Section 3.3 and any recovery-related content you post in the community. You give this consent when you create your account and agree to this policy, and you can withdraw it at any time by deleting your account.
- Performance of a contract (Art. 6(1)(b)) — to give you the account and features described in our Terms of Service, including running the AI coach and (in future) managing a subscription you buy.
- Our legitimate interests (Art. 6(1)(f)) — to keep the app secure, prevent abuse, moderate the community, handle support requests, and keep a short deletion record for refund and dispute handling (Section 8). We balance these interests against your rights.
- Legal obligation (Art. 6(1)(c)) — where we must keep or disclose data to comply with the law.
You are never required to use the AI coach, the community, or any sensitive feature. Using them is your choice.
5. The AI coach and OpenAI
The in-app coach is powered by a large language model provided by OpenAI. When you send a message to the coach, that message, recent messages in the conversation, and the private coach summary (Section 3.3) are sent to OpenAI's API so a reply can be generated. OpenAI processes this on our behalf as a data processor.
- OpenAI's API terms state that data sent through the API is not used to train their models by default.
- OpenAI is based in the United States, so this is an international transfer — see Section 7.
- The coach does not make automated decisions that produce legal or similarly significant effects about you (GDPR Art. 22).
The coach is a self-help tool. It does not provide medical, psychological, or therapeutic advice, and it is not a crisis service. If you are in danger or in crisis, contact your local emergency services or a crisis line.
7. Where your data is stored and international transfers
Your account and app data are stored in the European Union (our database is hosted in Ireland).
Some data does routinely leave the EU, all of it to the United States:
| Who | What reaches them | When |
|---|---|---|
| OpenAI | Your coach messages and the private coach summary | When you use the AI coach |
| RevenueCat | Your Reclaim account ID, device information, IP address, subscription status | Every time you open the app |
| Expo | Your IP address and the app's version identifier | Every time you open the app |
| Google / Apple | Sign-in data | If you use "Sign in with Google" or "Sign in with Apple" |
OpenAI is the only one of these that receives your sensitive recovery content. The others receive identifiers and technical data that say nothing about your recovery.
Where data goes to the United States, we rely on the European Commission's Standard Contractual Clauses (and any equivalent safeguards the provider offers) to protect it. You can ask us for more information about these safeguards using the contact details in Section 1.
8. How long we keep your data
- We keep your account and app data for as long as your account exists.
- When you delete your account, we delete your account and the associated data from our systems.
- We keep a minimal deletion record for about 90 days after deletion — your email, which sign-in method you used, and (if you ever had one) a snapshot of your subscription and the reason you gave for leaving. We keep this short record to handle refunds, billing disputes, and abuse, on the basis of our legitimate interests. After that period it is removed.
9. Your rights
9.1 If you are in the EU, EEA, or UK
Under the GDPR you have the right to:
- Access the personal data we hold about you.
- Correct data that is wrong or incomplete (you can edit most of it in the app).
- Delete your data ("right to erasure") — you can do this yourself from inside the app (Section 10).
- Restrict or object to certain processing.
- Withdraw consent at any time for the sensitive data we process on the basis of your consent — withdrawing consent means deleting your account, since the app cannot function for you without it.
- Data portability — receive a copy of the data you provided in a portable format.
To exercise any of these, contact us at [email protected]. We will respond within the time the law requires (normally one month).
You also have the right to complain to a supervisory authority. In Poland that is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO) — uodo.gov.pl. You may also complain to the authority in your own EU country.
9.2 If you are in the United States
If you live in California or another U.S. state with a consumer-privacy law (such as Virginia, Colorado, Connecticut, Texas, Oregon, and others), you have rights over your personal information, which may include the right to:
- Know and access the personal information we collect about you.
- Delete it (you can do this in the app — Section 10).
- Correct inaccurate information.
- Opt out of the "sale" or "sharing" of your personal information, or its use for targeted advertising.
- Limit the use of sensitive personal information.
- Not be discriminated against for exercising these rights.
Two things we want to be clear about:
- We do not sell your personal information, and we do not "share" it for cross-context behavioural or targeted advertising — we never have. There is nothing to opt out of on that front.
- Your recovery content is sensitive personal information, and under U.S. "consumer health data" laws — such as Washington's My Health My Data Act and Nevada's SB 370 — it is consumer health data. We use it only to provide the app to you: not to infer characteristics about you, not for advertising, and we never sell or share it.
To exercise any of these rights, email [email protected]. We will verify your request (usually by confirming control of your account email), and you may use an authorised agent to make a request for you. The categories we collect, why, and the service providers we disclose them to are described in Sections 3 and 6.
10. How to delete your account and data
You can delete your account at any time from inside the app, in Profile → Account & Security → Delete account. Deletion removes your account and app data from our systems (subject to the short deletion record in Section 8). Posts and comments you made in the community are detached from your account and stay in place without any author, so other people's conversations are not broken. If you signed in with Apple, we also revoke Reclaim's access to your Apple ID as part of deletion.
If you can no longer sign in — you lost the device, or the account email is gone — email [email protected] and we will delete the account for you after verifying it is yours. Full instructions are also published at reclaim-app.co/delete-account, which you can reach without installing the app.
11. Payments (no paid plans yet)
Reclaim is currently free to use — there is nothing to buy and nothing to cancel. The subscription system itself is already running inside the app, which is why RevenueCat appears in Sections 3.6, 6, and 7 as a provider that receives data today. It just has no purchase to record.
Here is what to expect if paid subscriptions are introduced later:
- Payments would be handled entirely by the App Store and Google Play. We would never see or store your card or bank details.
- RevenueCat would tell us only whether you have an active subscription, which product it is, and when it expires — so the app knows what to unlock.
- Subscription terms (price, renewal, cancellation, refunds) would be governed by the store you bought through and described in our Terms of Service.
If and when this changes, we will update this policy and its "last updated" date.
12. Security
We use industry-standard measures to protect your data, including encryption in transit, access controls, and a database protected by row-level security so users can only reach their own data. No system is perfectly secure, but we take the sensitivity of this app seriously and design for it.
If a data breach happens. If a breach affects your personal data, we will notify the relevant supervisory authority, and — where the law requires it, such as when the breach is likely to put your rights at high risk — we will notify you directly, in line with the GDPR and other applicable law.
13. Children
Reclaim is intended only for adults. You must be 18 or older to use the app. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, contact us and we will remove it.
14. What we do not do
To be explicit:
- We do not sell or rent your personal data.
- We do not show you advertising or share your data with ad networks.
- We do not track you across other apps or websites.
- We do not use your recovery data (coach chats, reflections, logs) to train AI models.
- We do not use your personal data to "improve the app" through analytics profiling — we simply use it to provide the app to you.
15. Changes to this policy
If we change this policy, we will update the "last updated" date at the top and, for significant changes, notify you in the app. Continuing to use Reclaim after an update means you accept the revised policy.
16. Contact
Questions, requests, or complaints: [email protected].