Private by intention. Clear by design.
Privacy Policy
This policy explains the information RehabCounter handles, why it is needed, and the choices available to you. Recovery-related activity can be sensitive, so it is never offered for sale or used by RehabCounter to target personalized advertising.
Account and profile information
Registration may collect your username, email address, full name, date of birth, gender selection, biography, password hash, profile image, preferences, and acceptance of the Terms. Passwords are stored as one-way hashes rather than readable passwords.
Your tracking information deserves care
The service stores counters, selected labels, start and relapse dates, addiction-history entries, achievements, posts, comments, reactions, follows, notifications, reports, and private messages needed to provide the features you choose.
Premium journal entries are private to the account owner and do not appear in profiles or the community feed. Authorized operational access may still occur when reasonably necessary for security, maintenance, legal compliance, or support.
Stripe processes payments
For Premium memberships, RehabCounter stores payment-provider identifiers, subscription plan, status, renewal period, cancellation state, and webhook receipts. Stripe processes payment details under its own privacy terms. RehabCounter does not receive or store complete card numbers or security codes.
Profile and post images are checked before publication
When you upload a profile picture or post image, RehabCounter validates and re-encodes the file, then may securely send the image to an automated safety-screening provider. We store the screening decision, category results, technical metadata, and any moderator decision needed to operate and audit this safeguard.
An image that is flagged, uncertain, or cannot be screened remains private in restricted review storage until a staff moderator approves or rejects it. Rejected and replaced pending files are removed from active review storage; approved images become public profile content. Safety screening is not identity verification. Screening providers may process or retain content as needed to provide the service, prevent abuse, and meet their legal obligations under their own policies.
Verification and service messages
We use your email for account activation, password recovery, important security or billing notices, and optional Premium weekly reflections. Verification and reset tokens are random, time-limited, single-use, and stored in hashed form. Optional summaries can be disabled in Premium preferences.
Keeping the service reliable
Servers may process IP address, browser and device information, timestamps, requested pages, session identifiers, rate-limit records, error logs, and upload metadata. This information supports authentication, abuse prevention, troubleshooting, performance, and security.
Providing the features you request
- operate accounts, counters, community, messaging, moderation, and Premium tools;
- verify identity, secure sessions, prevent abuse, and investigate reports;
- process subscriptions and maintain accurate access status;
- send requested or essential communications;
- understand aggregate service performance and improve reliability; and
- comply with lawful obligations and enforce the Terms.
Your recovery activity is not the product
RehabCounter does not sell personal information. It does not use addiction labels, relapse events, journal entries, messages, or recovery activity to create personalized advertising audiences. If contextual sponsorship is introduced later, it will be clearly labeled and kept outside private or high-sensitivity surfaces.
Limited service providers and lawful needs
Information may be processed by infrastructure, email-delivery, security, storage, and payment providers only as needed to operate the service. It may also be preserved or disclosed with your direction, to protect users and service security, during a business transfer, or when required by valid legal process. Public profile and community information is visible according to the privacy choices and feature behavior shown to you.
Only as long as reasonably necessary
Information is retained while your account is active and afterward when reasonably needed for security, dispute resolution, payment records, backups, or legal obligations. Expired authentication tokens and old rate-limit records may be deleted automatically. No system is perfectly secure, but RehabCounter uses access controls, hashed credentials and tokens, prepared database operations, HTTPS requirements, and signed payment webhooks to reduce risk.
Access, correction, export and deletion
You may update profile and privacy settings, mute notifications, disable optional Premium summaries, manage or cancel billing, download the available personal-data archive, and request account deletion. Some records may be retained where legally required or necessary to protect security and resolve payment disputes.
Adults only
RehabCounter is intended only for people aged 18 or older. If we learn that an ineligible minor created an account, we may remove it and associated information.
Questions about your information
This policy may change as the service and its providers evolve. Material changes may be presented for renewed review. For privacy questions, access requests, or deletion concerns, use the RehabCounter contact page.