Last Updated: August 31, 2026
Recovo ("Recovo," "the App," "we," "us") is committed to protecting your privacy. We do not collect, store, or share your personal information except as described below. This policy covers both the Recovo iOS app and our website at recovoapp.com.
We do not use advertising networks, and we never track you across other apps or sell your data. We do use two analytics services, both tied to your account ID: Superwall, which powers our in-app subscription paywall and measures paywall impressions and conversions, and HeyCatch, which records which screens you open and which buttons you tap inside Recovo so we can see where the app is confusing and fix it. HeyCatch receives your account ID, email address, the first name you entered in the app, the date you created your account, and whether you are on the free or the paid plan, along with screen names such as "journal" or "relapse" and the names of the buttons you tap, such as "home-urge-resisted".
Our server reports your subscription events to HeyCatch as they happen — a subscription started, renewed, had its cancellation undone, changed plan, was cancelled, hit a billing problem, or expired — each with the product you bought, its price and currency, the store it came from, and whether you were in a trial or introductory period.
HeyCatch also receives a record of the key actions you take, so we can tell whether the app is actually helping rather than just being opened: that you saved a journal entry (the mood colour you picked, and whether it replaced an earlier entry that day), that you logged a relapse (and the streak length it ended), that you resisted an urge, that you started or ended a block (its length, whether a partner could unlock it, and whether it ran out or was unlocked early), that you added, confirmed, or removed an accountability partner, which steps of the setup wizard you reached, where you heard about Recovo if you answer that question, when the subscription paywall was requested or shown, the answers you give to the two short in-app surveys described under Data Storage — the reason you pick on the way to the App Store subscription screen, and the score and reason you give when we ask how Recovo is working for you — and that you sent us a gambling site to add to the block list, recorded only as whether it was one we already block. Where a survey offers a free-text box, HeyCatch is told only whether you typed something in it, never what you typed, and it is never told the address of a site you send us.
HeyCatch does not receive the text you write in your journal, the note you write on a relapse, anything you type into a survey's free-text box, the address of a website you send us for the block list, or your accountability partner's name or phone number. See Third-Party Services below.
We also use Sentry for crash and error reporting, so that we find out when the app breaks instead of waiting for you to report it. When the app crashes or hits an error, Sentry receives the error message and its technical stack trace, the app version, your iOS version and device model, the screens you visited beforehand, and the app's own diagnostic log lines leading up to the failure — tied to your account ID, so we can tell how many people a given bug affects. Sentry does not receive your IP address, your email address, your name, the text you write in your journal, the note you write on a relapse, or your accountability partner's contact details; email addresses, phone numbers and access tokens are stripped out of those diagnostic lines before anything is sent.
The data you enter in the app (streak, journal entries, relapse history, accountability partner info, settings) is stored on your device and, where noted below, synced to our secure cloud database so your progress is preserved across devices and reinstalls.
Our website runs the same analytics service as the app, HeyCatch, but nothing there is tied to your account. Website visitors are anonymous: HeyCatch records which pages you view and which links you click, the page you arrived from, and a country worked out from your IP address, and it stores a random visitor ID in a first-party cookie that expires after one year. It does not receive your name or email address on the website, and we do not connect website visits to your Recovo account.
Links we post on social media use a short path such as recovoapp.com/g, which redirects to the homepage and tells us which channel the visit came from. Nothing about you personally travels in that link.
The site is hosted by Cloudflare, which also collects a cookieless measurement of page performance, and it loads fonts from Google Fonts and the analytics library from esm.sh. Those providers receive your IP address as part of delivering those files. You can clear or block the analytics cookie in your browser at any time — the site works without it.
Stored locally on your device only:
Stored locally and synced to Supabase (cloud):
Cloud sync ensures this data is not lost if you reinstall the app or switch devices. It is stored securely in Supabase and is associated with your account.
We also record which steps of the first-run setup wizard were reached, so we can see where people get stuck. Those rows carry a random session ID generated on the device and the name of the step — nothing else, and no link to your account.
We record your answers to the two short surveys the app can show you: the reason you pick on the way to the App Store subscription screen, and the 1-to-5 score and reason you give when we ask how Recovo is working for you. Both are saved to Supabase against your account rather than to your device, and both include the free text you write if you pick the “something else” option. Skipping a survey records nothing at all, and no answer you give changes what the app does or where it lets you go.
Near the end of the first-run setup we ask where you heard about Recovo, and offer a short list to choose from — the App Store, YouTube, Instagram, Facebook, TikTok, X, Reddit, an AI assistant, or somewhere else. If you pick one, we save that single choice to Supabase against your account once the account exists, so we can tell which channels reach people who are trying to stop. There is no free-text box on that question, we record one answer per account and never change it afterwards, and you can skip it — skipping records nothing at all.
If you use “Add a Website to Our Block List” in Settings, we save the address you typed to Supabase against your account, so we can review it and add the site in a future update. We save nothing when the address is one we already block, or when what you typed is not a web address at all.
Recovo uses Supabase to securely store your account credentials (email and password) for login purposes. This allows your account to be accessible across devices. Supabase stores your credentials securely and does not share them with third parties. See supabase.com/privacy.
Aside from the account emails you ask for — confirming your address, resetting your password — there is one sequence we send without you asking. If your paid subscription ends, we email the address on your account up to three times over the following two weeks to let you know your streak history, journal, and blocking setup are all still saved. That is the whole of our marketing email.
Every one of those emails carries an unsubscribe link, and one tap on it stops them for good — not just the rest of that sequence, but any future one, including if you resubscribe and your subscription ends again. They are delivered by Resend, which receives your email address in order to send them. We queue the three messages when your subscription expires, holding your email address with them until they are sent or cancelled. Deleting your account removes anything still queued.
We never sell or share your email address, and we do not email you about anything else.
Recovo is operated from the United States, and every provider listed under Third-Party Services stores and processes data there. If you use Recovo from the UK, the EEA or Switzerland, your data is transferred out of your country to the United States.
We rely on the safeguards in each provider's data processing terms for those transfers: the European Commission's Standard Contractual Clauses, and, where a provider is certified under it, the EU-US Data Privacy Framework. You can ask us for details of the safeguards that apply to a particular provider at [email protected].
If you are in the UK, the EEA or Switzerland, data protection law gives you the following rights. They are free to use, and we will respond within one month.
Write to [email protected] to use any of these. If you think we have handled your data badly, you can complain to your local data protection authority: in the UK the Information Commissioner's Office (ico.org.uk), and in the EEA the supervisory authority in the country where you live, work, or where the problem happened. You do not have to come to us first, though we would rather you did so we can fix it.
SMS messages are sent only to your designated accountability partner — a third party whose phone number you voluntarily provide within the app. The app user themselves does not receive SMS messages from Recovo.
Before entering your partner's phone number, you must first verbally obtain their consent. The opt-in process works as follows:
Your accountability partner may receive:
Message frequency varies. Your accountability partner will receive no more than 2 messages per blocking session — one invite code and one optional unlock notification. No messages are sent until the partner confirms by replying YES.
Your accountability partner can reply STOP to any message to opt out of future messages. After opting out, they will receive a one-time confirmation and no further messages will be sent. They can reply HELP for assistance. You can also remove the accountability partner at any time in the app under Settings → Clear Accountability Partner.
Msg & Data rates may apply for messages received by your accountability partner depending on their mobile carrier and plan.
SMS messages are delivered via Twilio. Your partner's phone number and the first name you entered for them are transmitted to our backend server solely for the purpose of sending the SMS. We keep it only as long as the feature needs it: up to 7 days so we can match your partner's "YES" reply back to your account, and up to 48 hours in an abuse-prevention log that limits how many messages any one number can be sent. Both are deleted automatically, every day. We never use your partner's number for anything else. See Twilio's privacy policy at twilio.com/legal/privacy.
We do not use advertising networks, and none of these services are used to track you across other apps or to sell your data.
This app is intended for users 18 years and older. We do not knowingly collect information from anyone under 18.
We may update this privacy policy from time to time. Changes will be reflected in the "Last Updated" date at the top.
Questions about this privacy policy? Contact us at [email protected]