Privacy Policy
Last updated: July 11, 2026
Who controls your data
Greatlife Psychology Centre Inc. ("we") is the controller of personal information collected through Recovery Command.
What we collect
- Account: email, display name, role (client, clinician, organization).
- Recovery data: check-ins, assessments (PHQ-9, GAD-7, PCL-5), missions, pain and trigger logs, notes.
- Clinical relationships: therapist-client links you create.
- Billing: handled by Stripe. We store your Stripe customer ID and subscription status, not card details.
- Analytics: aggregate, cookieless page views via Plausible. No personal identifiers.
How we use it
- To provide the Service — showing your history, computing your Recovery Score, sharing data with a clinician you've connected.
- To send transactional email (receipts, password resets, weekly digests if enabled).
- To detect abuse and secure the Service.
- To comply with legal obligations.
We do not sell your data. We do not use your recovery content to train AI models.
Who sees what
Row-level security in our database enforces that:
- You can see and edit your own data.
- A clinician can see check-ins, assessments, and logs only for clients who have connected to them via an invite code.
- Support staff access is logged and only used to resolve reported issues.
Where data lives
Data is stored on managed infrastructure (Supabase / AWS) in North American regions. Payment processing runs through Stripe.
Retention and deletion
You can delete your account at any time from account settings. All personal data is removed within 30 days, except records we must keep for legal or accounting purposes (e.g. invoices, up to 7 years).
Your rights
Depending on your jurisdiction (PIPEDA, GDPR, CCPA), you may request access, correction, export, or deletion of your data. Email privacy@recoverycommand.app.
Contact
Privacy questions: privacy@recoverycommand.app.