Privacy policy

Last updated September 28, 2026

The short version

Your recovery is private. We store what you put into Steps & Scripture so the app can work for you. We never sell your data, we don't show ads, and we don't track you across other apps or websites.

Your conversations with your AI sponsor are sent to Anthropic, the company that makes the AI, only to write the reply. Anthropic does not use them to train its AI.

You can download everything we have about you, or delete your account and all of it, at any time from Settings.

What we collect

Account: your email address and the name you sign in with (from Apple or Google if you use them).

Profile: your first name, whether you're a man or a woman (so you're paired with the right sponsor), your sobriety date, your time zone, church and home-group details, and your settings.

Recovery activity: your daily plan, check-ins (including hungry, angry, lonely, tired and craving levels), meetings, calls, readings, step work, Fourth Step inventory, amends list, nightly reviews, service, prayers, journal entries, chips, badges, and any slips you record.

Sponsor conversations: what you write to your AI sponsor and its replies, plus a short summary it keeps so it remembers you.

People you add: the names and phone numbers you choose to save or import from your phone. We only store the contacts you pick.

Accountability partners: the name and email of anyone you invite, and a record of the emails we send them.

Purchases: whether you have a Plus subscription and when it renews. Apple or Google handle payment — we never see your card.

Device: a notification token so we can send the reminders you ask for, and crash reports that help us fix bugs. Crash reports never include your journal, chats or step work.

Consumer health data

Your sobriety and recovery information is health data. Some states, including Washington under its My Health My Data Act, give it extra protection. We collect it only with your consent, which you give when you set up the app, and we use it only to provide the app to you.

We don't sell it, and we don't share it except with the service providers listed below, who handle it only on our behalf.

You can withdraw your consent at any time by deleting your account.

How we use it

To run the app: your counter and chips, daily plan, reminders, step work and your AI sponsor's replies.

To send the emails you ask for: sign-in links, and updates to accountability partners you invite.

To keep the service safe and working: preventing abuse, fixing bugs, and keeping AI costs within limits.

We don't use your data for advertising, and we don't build profiles about you for anyone else.

Your AI sponsor

Your sponsor is an AI, not a person. When you send a message, it — together with the context your sponsor needs, like your step and recent check-ins — is sent to Anthropic to write the reply.

Under its commercial terms, Anthropic does not train its models on this data and keeps it only for a limited time for safety and abuse monitoring.

Messages that suggest you may be in danger bring up crisis resources right away. We don't contact anyone on your behalf.

Accountability partners

Partners get emails only after they accept your invitation, and only the ones you turn on: a weekly summary (days sober, meetings, calls, daily plan items done, current step, chips), a note if you haven't opened the app in 3 days, a note if you open the crisis screen, milestone notes, and — only if you turn it on — a note if you record a slip.

Partners never see your conversations, journal, inventory, amends, prayers, readings or check-in answers. You can pause or remove a partner at any time, and they can unsubscribe from any email.

Who we share it with

Only the companies that run parts of the service for us, under contracts that limit what they can do with it: Netlify (hosting), Neon (database), Anthropic (AI replies), Resend (email), RevenueCat, Apple and Google (subscriptions), Expo (notifications) and Sentry (crash reports).

We may disclose information if the law requires it, and we'll tell you unless we're not allowed to.

We never sell your data or share it for advertising.

How we protect it

Data is encrypted when it travels between your phone and our servers, and our providers encrypt it where it's stored. Only you can reach your data through the app — every request is checked against your sign-in.

You can lock the app with Face ID, your fingerprint or your phone's passcode, and hide its preview in the app switcher.

If something goes wrong

If there's ever a breach of your health information, we'll tell you, and we'll notify the Federal Trade Commission and anyone else the law requires, within 60 days of finding out, as the FTC's Health Breach Notification Rule requires.

How long we keep it

As long as your account is open. When you delete your account, your data is deleted from our database immediately, and from backups within 30 days.

Your rights

See your data: Settings → Export my data downloads everything we have about you.

Correct it: edit it in the app, or email us.

Delete it: Settings → Delete my account deletes everything right away.

Questions, or to appeal a decision we made about your request: use the contact form at https://stepsandscripture.com/contact/. We'll answer within 45 days.

Age

Steps & Scripture is for adults 18 and over. We don't knowingly collect data from anyone younger. If you believe we have, email us and we'll delete it.

Changes

If we change this policy in a way that matters, we'll tell you in the app before it takes effect.

Contact

Use the contact form at https://stepsandscripture.com/contact/.