Privacy Policy

1. No account, no server-side profile

Rebuild has no sign-up, no login, and no user accounts. We do not ask for your name, email address, or phone number, and we do not create a profile for you on any server. There is no password to manage because there is nothing to log in to.

Because we hold no account, we hold nothing about you that could be requested, leaked, sold, or handed to a third party.

2. Your recovery data stays on your device

Everything you track is stored in a private database (SQLite) on your phone and never leaves it. This includes:

• Drink sessions you log (count, drink type, time, optional notes)
• Sober days and streaks
• Recovery milestones unlocked
• Daily commitments ("morning pledge")
• Evening check-ins ("stayed strong" / "had a drink")
• Journal entries you write (date, text, and an optional mood tag)
• Craving SOS sessions (which technique you used, an optional trigger tag, and how the craving intensity changed)
• Your settings (goal, baseline drinking pattern, your "why", savings targets, notification preferences)

We never receive this data, so we cannot sell it, share it, use it for advertising, or lose it. If you delete the App or use "Erase all data," it is gone from your device.

3. When Rebuild does contact a server

Rebuild works fully offline. The only times the App communicates with a server are:

• Purchases (RevenueCat + Apple/Google) — to sell and restore a Rebuild Pro subscription. Payment is handled entirely by the Apple App Store or Google Play; we never see your card details. RevenueCat manages your entitlement using an anonymous, randomly generated app user ID — not your name or email — together with your purchase status.
• Anonymous analytics and crash reports (Firebase) — anonymous, aggregate usage and stability data (for example, which screens are opened, or a crash stack trace). This is never linked to your identity and never includes the recovery content you log. Because it is anonymous and not tied to any account, there is no in-app profile to sign out of; if you would rather not share it, you can limit analytics and tracking at the operating-system level (see section 6) or uninstall the App.
• Promo-code redemption (optional) — only if you choose to redeem a promo code. In that one case the App sends the code you entered plus the same anonymous purchase ID to our redemption service so we can unlock Pro. It never sends any of your recovery data.

For the anonymous Firebase analytics above (and the website analytics in section 7), our legal basis is our legitimate interest (GDPR Article 6(1)(f)) in keeping the App and site stable and improving them. The data is anonymized and aggregated, is retained for no longer than 14 months, is never used for advertising, and is never sold.

4. Health-related data — kept private by design

The recovery data you log (drinks, cravings, sober days, milestones) is sensitive health-related information. Rebuild protects it in the simplest way possible: by never collecting it. It stays on your device, so:

• It is never uploaded to us, sold, rented, or traded.
• It is never used for advertising or marketing.
• It is never shared with insurers, employers, or data brokers.
• It is protected by your device's own security (screen lock, device encryption).

5. Notifications

All of Rebuild's reminders are local notifications scheduled on your device (for example, an evening check-in or a milestone getting close). They are generated on the phone and never leave it. There is no server-sent push. You can disable notifications from your system settings, or turn off specific categories inside the App.

6. Analytics and your choices

The anonymous analytics and crash reporting described above are on by default and are not tied to your identity, so there is no in-app account to disable. If you prefer not to share this anonymous data, you can limit or turn off analytics and tracking through your device's operating-system settings — on iOS via Settings → Privacy & Security → Analytics & Improvements and → Tracking; on Android via your Google usage & diagnostics and ads settings — or you can uninstall the App. The App continues to function normally either way.

7. This website (getrebuild.app)

Separately from the App, this website uses Google Analytics to understand in aggregate how visitors find and use these pages — for example, which articles are read or which links are followed — so we can improve the site. This applies only to the website. It is anonymized (your IP address is truncated), it is not linked to your identity, and we do not run advertising or ad-tracking here. The recovery data you log in the App never leaves your phone and is never sent to this website or to any analytics service.

The tools, and their one event. Each tool page sends an event named tool_used the first time you touch the tool itself, and it carries one thing: the name of the tool, such as "sobriety-counter". A click through to the App Store or Google Play is counted the same way, as a store click. The event carries no figure, date or answer from the page. Where a tool puts a reading in the web address so you can bookmark or share it — the sobriety counter's quit date, for example — that address is part of the page view like any other.

The embeddable counter. The sobriety counter can be dropped into somebody else's blog or forum post as an iframe pointing at /embed/sobriety-counter. That document is served on its own, outside the site's layout: it carries no Analytics tag, no fonts and no bundle, it sets no cookie of ours, and the day count is printed by our server before any script runs. Whoever embeds it needs that to write their own cookie notice, which is why it is written down here.

What the tools keep in your browser. Several tools save what you type to your own browser's local storage so a page reopens where you left it — the thirty-day grid on the Dry January tracker, the craving timer's count of urges outlasted, the sobriety counter's date. That is local to that browser and to that device; clearing your browser data clears it. It is not part of any event described above.

8. Exporting and erasing your data

Because your data lives on your device, you are always in control of it:

• Export — you can export your data to a backup file (JSON) from within the App and save or share it wherever you like.
• Erase — "Erase all data" in the Profile screen permanently wipes your recovery data from the device.

We cannot access, export, or delete your data on your behalf, because we never hold a copy of it.

9. Children's privacy

Rebuild is not intended for anyone under 18. We do not knowingly collect data from children, and in the ordinary use of the App we do not collect identifiable data from anyone.

10. Your privacy rights

Rebuild is account-less and holds no personal profile about you on any server, so in almost all cases we have no personal data to give you access to, correct, or delete. Where data-protection laws such as the EU/UK GDPR or the California Consumer Privacy Act (CCPA/CPRA) apply, you nonetheless have the right to:

• Access — ask what personal data, if any, we hold about you.
• Rectification — ask us to correct inaccurate personal data.
• Erasure — ask us to delete personal data we hold.
• Portability — receive a copy of your data in a portable format (the in-App JSON export already provides this for everything you track).
• Objection / restriction — object to or restrict the limited anonymous analytics processing described in sections 3 and 7.

We do not sell or share your personal information, and we do not use it for cross-context behavioural advertising, so there is nothing to opt out of in that respect. To exercise any right, contact us using the details below. Because your recovery data lives only on your device, you are already in full control of it — you can export or erase it yourself at any time.

11. Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be announced inside the App or on this page. The effective date at the top reflects the current version.

12. Data controller and contact

The data controller responsible for this policy is Must Have Apps SIA, registered at Valguma iela 18-16, Rīga, LV-1048, Latvia.

Questions and privacy concerns: hello@musthaveappscorp.com.