Privacy Policy

1. Who We Are

OCD Recovery App ("we", "us", "our") is a mental health support tool that helps users manage OCD symptoms through cognitive behavioral therapy (CBT) techniques, mood tracking, journaling, and AI-assisted conversations. This policy explains how we collect, use, and protect your information.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address — for authentication and account recovery
• Phone number (optional) — if you choose SMS-based sign-in
• Password — securely hashed; we never store or see your plain-text password

Account data is managed through Firebase Authentication (Google LLC). You can also use the app without creating an account, in which case no account information is collected.

2.2 Health & Wellness Data (Stored Locally)

The app allows you to record sensitive health-related data, including:

• OCD symptom descriptions (obsessions, compulsions, triggers)
• Mood and emotion logs with intensity ratings
• CBT thought records and exposure/response prevention logs
• Journal entries
• Medication names, dosages, and schedules
• Emergency contact names and phone numbers

2.3 AI Chat Conversations

If you use the AI chat feature, your conversation messages are sent to a third-party AI provider of your choice. You must provide your own API key for these services. Supported providers include:

• OpenAI (GPT-4o)
• Anthropic (Claude)
• Google Gemini
• Alibaba Qwen

VIP subscribers may use our cloud-hosted AI service (Azure OpenAI via Firebase Cloud Functions), in which case messages are processed through our secure server. Chat history is stored locally on your device and is not retained on our servers.

2.4 Subscription & Purchase Data

If you subscribe to our VIP plan, we store your subscription status (active/expired) in our database. Payment processing is handled entirely by Google Play and RevenueCat. We do not collect or store your payment card details.

2.5 Device Permissions

Permission	Purpose
Notifications	Daily check-in reminders (opt-in)
Microphone	Voice input in chat (opt-in)
Photo Library	Custom profile avatar (opt-in)

All permissions are optional and requested only when you use the relevant feature.

3. How We Use Your Information

• Account data: To authenticate you and provide account recovery
• Subscription status: To grant access to VIP features
• Health data: Processed entirely on your device to provide app functionality; never transmitted to us

4. Data Sharing & Third-Party Services

We do not sell, rent, or share your personal data with third parties for marketing purposes. We use the following third-party services:

Service	Provider	Data Shared	Purpose
Firebase Auth	Google LLC	Email, phone number	User authentication
Firebase Firestore	Google LLC	User ID, VIP status	Subscription management
RevenueCat	RevenueCat Inc.	User ID, purchase data	Subscription processing
AI Providers*	Various	Chat messages	AI-assisted conversations

*Only when you actively use the AI chat feature with your own API key or VIP subscription.

5. Data Storage & Security

• Local data is stored using your device's encrypted storage (iOS Keychain / Android Keystore-backed encryption)
• Cloud data (authentication, VIP status) is protected by Firebase security rules and encrypted in transit (TLS) and at rest
• API keys you provide are stored locally on your device only
• We do not use analytics, crash reporting, or behavioral tracking tools

6. Data Retention & Deletion

• Local data: Remains on your device until you clear app data or uninstall the app. You can delete individual entries (journal, tracker, medications) within the app at any time.
• Account data: You can delete your account from the Profile screen, which removes your authentication data and cloud-stored subscription records.
• AI conversations: Chat history is stored locally and can be deleted within the app. Messages sent to AI providers are subject to those providers' respective retention policies.

7. Children's Privacy

This app is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us so we can delete it.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access and receive a copy of your personal data
• Correct inaccurate personal data
• Request deletion of your personal data
• Withdraw consent for data processing
• Data portability

Since most data is stored locally on your device, you have direct control over it. For cloud-stored data (account and subscription info), contact us using the details below.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the updated policy within the app. Continued use of the app after changes constitutes acceptance of the updated policy.

10. Contact Us