Privacy Policy
Last updated: October 21, 2026
Soveni keeps your recovery private by design: your tracking, journal and urges stay on your phone unless you choose to back them up, and we don't sell data, show ads or use analytics. This policy explains what we collect, why, and the choices you have. Soveni is run by Nathan Bonaventure ("we", "us").
What stays on your phone
These are saved on your device and not sent to us unless you turn on backup (below): your days kept, urges, slips, journal entries, commitments, goals, reasons, letter to yourself, achievements and settings. Reminders are created on your phone too.
Optional backup. If you sign in to back up, these records are encrypted on your phone before they're uploaded. So that signing in on a new or replacement phone brings everything back, we also keep the key that opens your backup, stored encrypted in Supabase's secure key vault and tied to your account. Only your signed-in account can fetch it. Because we hold the key, we could technically open your backup; we never do, except where the law requires it. If you prefer, you can keep your journal out of the backup, or delete the backup at any time.
What we collect when you create an account
- Email address, to sign you in with a one-time code.
- Google account details if you sign in with Google: your email, name and profile picture, as Google shares them.
- Apple account details if you sign in with Apple on iPhone: an account identifier and, if you choose to share it, your email (which may be an Apple private relay address).
- Your age answer (whether you're 18 or older), to keep Community adults-only.
What we collect if you use Community (18+)
- Your public profile: username, display name, avatar or photo, bio and interests. Other members can see these.
- What you post: posts, replies, reactions and the communities you join.
- Messages you send to friends. The two people in a conversation can read it. Moderators only see a message if someone reports it, along with up to 5 messages before and after it.
- Friend requests, friends and blocks.
- Reports you file or that others file about you, including a copy of the reported content kept as evidence, and any moderation decisions.
Apple Health (iPhone, optional)
If you connect Apple Health, Soveni reads your daily steps, walking distance, active energy and exercise minutes to show them in the app and suggest a walk during an urge. It only reads; it never writes to Apple Health. These numbers stay on your phone: they're not saved by Soveni, not backed up and never sent to us. You can turn this off at any time in the iPhone Settings app under Health.
Subscriptions
Soveni is a paid subscription with a free trial. Payments are handled by Apple or Google; we never see your card details. RevenueCat helps us check whether your subscription is active. It receives a random app identifier, your Soveni account identifier if you're signed in, and your purchase history from the store, never your recovery data.
Notifications
If you allow alerts, we store your phone's push address, its language and your alert choices, so we can tell you about new messages, replies and friend requests. Alerts are discreet: they say "New message on Soveni", never who it's from or what it says.
Technical and safety data
- Counts of how often you use backup and search, to stop abuse. Search records are deleted after a day.
- Old usernames, held for 30 days so nobody can take over a name you just gave up.
- If an account is banned and then deleted, we keep a scrambled (hashed) version of its email so the same person can't simply sign up again. It can't be turned back into the email address.
What we don't do
- We don't sell or rent your information.
- We don't show ads or use advertising or analytics trackers.
- We don't use your recovery data or your messages to profile you.
Who helps us run Soveni
These companies process data for us only to provide the service:
| Service | What it does | Data involved |
|---|---|---|
| Supabase (servers in the United States) | Database, sign-in, photo storage, server functions, key vault | Account, Community content, messages, push addresses, encrypted backups and their keys |
| Resend | Sends sign-in emails | Your email address |
| Expo, Apple and Google push services | Deliver alerts to your phone | Push address and the alert text |
| Google sign-in, if you use it | Sign-in details | |
| Apple | Sign in with Apple, if you use it | Sign-in details |
| RevenueCat | Checks your subscription | App and account identifiers, purchase history |
| Cloudflare | Runs the soveni.app domain | Standard web traffic data |
| Apple App Store and Google Play | Downloads and subscriptions | Handled by them; we never see card details |
How long we keep it
We keep your account and Community content until you delete it or your account. Report evidence is kept for up to one year after a report is closed, then removed. The hashed email of a banned account is kept while the ban lasts.
Deleting your data
- Delete your account in the app at any time. This removes your account, profile, photos, posts, replies, messages, friends, backup and its key. Reports others filed about you may keep their evidence copy for safety, without your account attached.
- Delete your backup only in the app's backup settings. This also deletes its key.
- Everything on your phone is removed when you delete the app or erase your data in Settings.
Your rights
Depending on where you live, you may have the right to see, correct, export or delete your data, and to object to how we use it. Most of this you can do in the app. For anything else, email support@soveni.app and we'll reply within 30 days.
Age
Community, friends and messages are for adults 18 and older. Soveni isn't meant for children under 13, and we don't knowingly collect their information. If you think a child has given us information, email support@soveni.app and we'll delete it.
Security
Data is encrypted in transit. Each person can reach only their own private data on our servers. Backups are encrypted on your phone before upload, and their keys are kept encrypted in a separate key vault. No system is perfectly secure, but we work to protect your information.
Changes
If we change this policy, we'll update the date above and tell you in the app before important changes take effect.
Contact
Questions or requests: support@soveni.app.