Your Privacy Matters

The Sober Legion ("we", "us") is a free recovery-support community operated by Sober Soldiers Outreach. This policy explains what information we collect, how we use it, and the choices you have.

When you use The Sober Legion, we may collect:

• Account information — your email address and name when you register.
• Profile information — display name, bio, photo, city/country, sobriety date, and birthday (all optional except display name).
• Content you share — posts, comments, reactions, journal entries, prayer requests, and direct messages.
• Recovery data — daily check-ins, mood, streaks, and any relapse-prevention plan you create.
• Usage data — basic analytics about how the app is used to keep it running and improve it.

• To provide the community feed, profiles, messaging, and recovery tools.
• To celebrate your milestones and send notifications you opt into.
• To keep the community safe through content moderation.
• To improve the app and respond to your support requests.

We do not sell your personal information.

Recovery is deeply personal. Information you share about your sobriety, cravings, mood, or recovery journey is treated as sensitive. Journal entries, check-ins, and relapse-prevention plans are private to your account. Anything you post publicly to the community feed is, by nature, visible to other members — please share thoughtfully.

We are not a HIPAA-covered entity, and information you share here is not protected health information under HIPAA. For full detail on how we handle recovery and health-related information — including your rights to access, delete, and withdraw consent — see our Consumer Health Data Privacy Notice.

Public posts, comments, your display name, and public profile details are visible to other members and visitors. Direct messages are visible only to you and the recipient. Your email address is never shown publicly.

We protect your data with HTTPS encryption, row-level access controls so members can only see their own private data, and bot/abuse protection. No system is perfectly secure, but we work hard to safeguard your information.

To keep the community safe, we may retain limited data about accounts that have been suspended or removed for abuse, ban evasion, or policy violations — including the associated email address, related or backup email addresses, and the reason for the action. This safety data may be retained after account deletion, to the extent permitted by law, solely to prevent re-registration by banned members and to protect other users. This is based on our legitimate interest in keeping the community safe.

We use trusted third-party services to operate the Platform, each with their own privacy policies:

• Payment processor — GiveButter processes memberships and donations. We do not store your full card numbers.
• Email services — Gmail sends transactional and notification emails on our behalf.
• AI providers — When you interact with our AI assistant ("LAI") or AI-powered features, your messages may be processed by third-party language model providers to generate responses. Do not share information you would not want processed by an AI service.

We retain your account data for as long as your account is active. If you delete your account, we remove your profile, posts, comments, and private content within 30 days. Some aggregated or anonymized data may be retained longer for analytics and safety purposes. Payment records are retained as required by tax and financial regulations.

• You can edit or delete your profile, posts, and content at any time.
• You can request deletion of your account and associated data by contacting us.
• You can control notification permissions in your device and app settings.
• GDPR (EU/EEA/UK residents): You have the right to access, rectify, erase, restrict processing, object to processing, and receive your data in a portable format. You may also have the right to withdraw consent at any time. To exercise these rights, contact us using the details below.
• CCPA (California residents): You have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell your personal information. To exercise these rights, contact us using the details below.

If you are in the EU/EEA/UK, we process your personal data under the following lawful bases: (a) contract — to provide the community features you requested; (b) legitimate interest — to keep the community safe through moderation and abuse prevention; (c)consent — for optional features like marketing notifications and AI processing of sensitive recovery content (see "AI & Automated Processing" below). You can withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

The Sober Legion is an adults-only platform intended solely for users aged 21 and older. It is not directed at children, teens, or young adults under 21, and we do not knowingly collect personal information from anyone under 21. At registration we require a date of birth and an affirmative confirmation of age; the date of birth is used only to verify eligibility at sign-up.

If we become aware that we have collected information from someone under 21, we will close the account and delete the associated data. If you believe an underage person has created an account, contact us at sobersoldiersoutreach@gmail.com and we will act promptly.

We use essential cookies to keep you logged in and the app functioning. We do not use analytics, advertising, or cross-site tracking cookies. You can control cookies through your browser settings; because our cookies are essential, disabling them may affect core features like staying logged in.

Our Platform uses AI assistants (such as "Lainy") and automated bots. When you send a message to an AI assistant, or post content that triggers an AI response, the content of your message — which may include sensitive recovery-related information such as your sobriety status, mood, cravings, or personal experiences — is sent to a third-party language model provider to generate a reply. For users in the EU/EEA/UK, processing of this sensitive health data by AI providers relies on your explicit consent, which you give by choosing to use AI features; you may withdraw that consent at any time simply by not interacting with the AI assistant. AI-generated responses may be inaccurate and should not replace professional advice. We do not use your private journal entries, check-ins, or relapse-prevention plans to train external AI models.

Some features let you speak instead of typing. If you use voice chat or record a voice message, your device will ask for microphone permission — recording only happens while you are actively using that feature, and never in the background.

• Speech-to-text — audio you record is sent to a third-party transcription provider to convert it into text. The text is then handled like any other message you send.
• Text-to-speech — AI replies may be converted into spoken audio so you can listen instead of read.
• Retention — we do not keep your raw voice recordings as part of your profile; audio is used to produce the transcript or spoken reply and is not used to train external AI models.
• Your control — you can deny or revoke microphone access in your device settings at any time and keep using the app by typing.

Because voice input in this app often contains sensitive recovery information, please treat it with the same care as anything you write.

The app asks for permissions only when a feature needs them, and each one is optional: microphone (voice chat and voice messages), camera and photos (attaching an image to a post, comment, or profile), and notifications (milestone, message, and check-in alerts). You can decline or revoke any of these in your device settings; core features will continue to work.

You can permanently delete your account and its data yourself from Settings inside the app — no email required. Deletion removes your profile, posts, comments, messages, journal entries, check-ins, and recovery plans. Limited safety records (see "Safety & Anti-Abuse Data") and payment records required by law may be retained. If you prefer, you can also request deletion by emailing sobersoldiersoutreach@gmail.com.

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.

Questions about your privacy or a request to delete your data? Reach us at sobersoldiersoutreach@gmail.com or through our contact page.