I Am DrugFree Privacy Policy

Last updated: September 29, 2026

Overview

This notice covers the I Am DrugFree app and the website at drugfree.app. The core tracker is designed around local storage. It does not require an account, does not include ads or behavioral analytics, and does not use cloud sync for recovery data. Purchase handling and reporting use Apple and RevenueCat as described below. The optional Sober Coach uses Google Gemini online, as explained below; it is not an on-device or Apple Private Cloud Compute service.

Controller and contact

The controller is Damian Witkowski, Rüttenscheider Str. 323, 45131 Essen, Germany. Email: d.witko@icloud.com.

Data stored on your device

The app may store recovery data locally on your device, including your recovery focus, quit date and time, personal reasons, daily cost and time estimates, reminder settings, optional privacy lock setting, optional profile image, daily check-ins, mood, craving level, trigger tags, urge logs, journal entries, relapse or reset history, rewards, saved money, and saved time.

Local storage

Recovery data is stored locally using Apple platform storage such as SwiftData and AppStorage. It is not automatically uploaded by the core tracker. Information you choose to write in Sober Coach is processed online as described below.

Optional Sober Coach: Google Gemini

Sober Coach is an optional AI conversation feature for adults aged 18 and over. In version 1.9 and later, cloud processing is off until you explicitly agree in the Cloud AI privacy dialog. Agreeing does not itself send a message: you must then tap Send. You may decline and continue using the rest of the app and its human-support links.

When you send a message, it travels over HTTPS to drugfree.app/api/sober-coach, operated for us on Cloudflare infrastructure. The service forwards your message and up to 12 recent chat messages (including previous AI replies) to Google's Gemini API to generate a relevant response. The request also includes your response-language setting. Chat content can include sensitive recovery or health information if you write it. Do not include information about other people without their permission.

Version 1.9 and later do not automatically send your journal, recovery profile, reasons, quit date, contacts, or photos to the coach service. Older coach versions may also send selected recovery context to our endpoint; please update before using the coach. Our current Gemini handler does not use that extra context in its model request.

The recipients are the app operator, Cloudflare as the hosting and delivery provider, and Google as the AI provider. Technical request information, such as IP address, request time, app version and response status, may be processed to deliver and secure the service. The coach handler does not intentionally write chat contents to an application database or application logs; this does not mean that hosting or AI providers never retain data.

To prevent abuse and uncontrolled AI costs, the service stores request counters and a daily-changing, secret-keyed pseudonym derived from the network IP address. Raw IP addresses and chat content are not stored in these quota counters. The per-network counters expire after at most two days and are removed during subsequent accepted requests; global aggregate counters contain no chat content or network identifier. These necessary security measures may limit access even after consent.

The basis for optional chat processing is your consent under Article 6(1)(a) GDPR and, where your chat includes health or other special-category information, your explicit consent under Article 9(2)(a) GDPR. Technical processing necessary for service security may also rely on Article 6(1)(f) GDPR. The providers may process information outside the EEA under their applicable data-processing terms and transfer safeguards.

Google's Gemini API terms explain its processing rules. Under its paid-service terms, Google does not use prompts and replies to improve its products, but may retain them for a limited period for abuse prevention and required legal disclosures. This is not a promise of zero retention or immediate deletion. See also Google's privacy policy, Google's linked data-processing addendum, and Cloudflare's privacy policy.

You can withdraw permission at any time using the cloud/privacy button in Sober Coach and choosing Withdraw consent. This stops new coach requests and cancels any request still running in the app where possible. It cannot undo information already transmitted or automatically delete provider-held records. Withdrawal does not affect the lawfulness of processing before withdrawal. Contact us using the details above for access or deletion requests relating to online processing; we will assist according to applicable law and the providers' capabilities.

Your consent version, time of consent, and adult confirmation are stored on the device; we do not ask for your birth date. Chat history is also stored on the device and can be cleared with the coach's trash button. Clearing local history is separate from withdrawing consent and does not erase records already held by a provider.

AI replies can be wrong. Sober Coach provides general recovery support, not medical advice, diagnosis, treatment, therapy, or emergency monitoring. Do not rely on it for medical or safety-critical decisions.

No account, ads, or cross-app tracking

The app does not create user accounts, does not use third-party advertising, does not use behavioral analytics SDKs, and does not track you across apps or websites. RevenueCat processes purchase information for purchase management and aggregate sales reporting; it does not receive your recovery content. The separate website analytics described below only runs after website consent and does not receive app recovery data.

Purchases and RevenueCat

Starting with version 1.10, the app uses RevenueCat, Inc. to validate and report Apple in-app purchases, restore purchase records, and understand subscription and sales totals. Apple continues to process payments. RevenueCat receives purchase and subscription information, such as product and transaction identifiers, purchase and expiry dates, renewal or refund status, price, currency and storefront, together with an automatically generated anonymous app identifier and technical information needed to provide the service. We do not give RevenueCat your name, email address, recovery focus, quit date, journal, check-ins, coach messages, contacts or photos.

Apple may also send purchase and subscription status notifications directly to RevenueCat. When an existing customer opens an updated app or restores purchases, verified Apple purchase records may be synchronized. A reporting failure does not remove access granted by a verified Apple transaction.

This processing supports purchase delivery and restoration, fraud prevention, and aggregate purchase reporting. The legal bases are performance of the purchase contract under Article 6(1)(b) GDPR and our legitimate interest in reliable purchase administration and sales reporting under Article 6(1)(f) GDPR. RevenueCat may process data outside the EEA under its applicable data-processing terms and transfer safeguards. See RevenueCat’s privacy policy. Purchase records are retained as needed to administer purchases and subscriptions, prevent fraud and comply with applicable obligations; deleting local recovery data does not cancel an Apple subscription or automatically delete purchase records held by Apple or RevenueCat. Contact us for requests concerning purchase-related personal data.

Website delivery and security

When you visit drugfree.app, hosting and content-delivery providers process technical request data needed to deliver and secure the website. This can include IP address, requested URL, date and time, browser and device information, and security signals. The legal basis is our legitimate interest in reliable and secure delivery under Article 6(1)(f) GDPR.

Optional website analytics

With your explicit permission, drugfree.app uses Google Analytics 4, provided in Europe by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The Google Analytics script is not loaded before permission.

Website analytics can process page title and URL, site language, approximate location derived by Google, browser and device information, and interactions such as opening an App Store link. Journal entries, cravings, recovery dates, health details, support searches, precise location, and any content stored in the app are not sent to Google Analytics. Google Signals, advertising storage, ad personalization, and ad-user-data signals are disabled.

The legal basis is consent under Article 6(1)(a) GDPR and the applicable rules for storage or access on a device. You can refuse without losing access to the website and can withdraw through the small “Analytics settings” control at any time.

Your choice, the policy revision, and the date are stored locally in your browser for up to 180 days. This record is strictly necessary to remember your choice. If Global Privacy Control or Do Not Track is enabled, optional analytics stays off. Google may process data outside the European Economic Area subject to its applicable safeguards. See Google’s privacy policy.

Reminders and privacy lock

If you enable reminders, iOS stores and presents local notifications on your device. Daily messages can be selected locally according to your recovery focus; neither the focus nor the notification text is sent to RevenueCat or a notification server. You can turn these messages off and change their time in settings. If you enable Face ID or passcode protection, authentication is handled by the system. The app does not receive or store your biometric data.

Export and sharing

If you choose to export or share your recovery data, the exported text is passed to the iOS share sheet at your request. The destination app, service, or person you choose may process that information according to its own privacy practices.

Support resource links

The app includes links to external support resources such as 988 Lifeline, SAMHSA, FindTreatment.gov, Alcoholics Anonymous, Narcotics Anonymous, Al-Anon Family Groups, Gamblers Anonymous, the National Council on Problem Gambling, Smokefree.gov, and CDC quit smoking resources. Opening those links may send your browser to a third-party website. Those websites are operated by their own providers and have their own privacy practices.

Data deletion

You can delete local recovery data from inside the app where the deletion option is provided, or by deleting the app from your device. Deleting the app removes the app's local data from that device according to iOS behavior.

Children

The app is not directed to children under 13. The Google Gemini Sober Coach is available only to adults aged 18 and over and requires an adult confirmation before consent can be given. The other features do not require enabling the coach. Contact us if you believe a child has submitted information through the coach.

Retention and your rights

On-device recovery data remains until you delete it in the app or remove the app, subject to iOS behavior. The coach consent record remains until withdrawal, removal of the app's data, or replacement by a new consent revision. Online coach processing and provider retention are described above. Website consent records expire after 180 days or are replaced when you change your choice. Website analytics data is retained according to the configured Google Analytics retention controls.

Depending on applicable law, you may request access, correction, deletion, restriction, portability, or objection and may withdraw consent at any time. You can also complain to a competent supervisory authority. In North Rhine-Westphalia, this is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia.

Medical and emergency disclaimer

I Am DrugFree is a self-tracking and support tool. It is not medical care, detox support, therapy, crisis care, or emergency help. If you are in danger, in withdrawal, or at risk of harming yourself, contact local emergency services or a qualified professional immediately.

Changes

This policy may be updated when the app changes or when legal requirements change. The updated version will be posted on this page with a new "Last updated" date.

Contact

For privacy questions, contact: d.witko@icloud.com

Terms · Legal notice · Support