Privacy Policy

We only collect information necessary to provide you with a personalized, effective recovery experience. The categories below describe what we collect and why.

• •

  Account Information: Your name, email address, and authentication credentials when you register or sign in. This is required to create and access your account.

• •

  Sensitive Personal Data (Mental Health Information): Any intrusive thought records, anxiety ratings, mood logs, ERP exercise entries, journal entries (including text and optional audio recordings), and reflections you choose to record. This data is the core of your recovery tracking and is treated as sensitive health information.

• •

  Support Network Contacts: If you choose to add emergency contacts, therapists, doctors, or trusted supporters, we store the names, phone numbers, email addresses, and notes you enter for those contacts. This information is used only to display your support network within the app and for crisis support features.

• •

  Feedback Information: When you submit feedback, a bug report, or a feature request, we collect your email address and the message content you provide. This is used to respond to you and improve the app.

• •

  App Activity and Analytics: We collect information about how you interact with the app, such as login events, feature usage patterns, and progress statistics (streaks, exercise counts, completion rates). This is used to personalize your dashboard and improve app functionality.

• •

  Crash and Diagnostic Data: We use a third-party error reporting service (Sentry) that automatically collects crash reports, error logs, and device diagnostic information (such as app version, operating system, and device type) when the app encounters a problem. This data does not include your journal entries, thoughts, or personal mental health content — it is limited to technical information needed to fix bugs and improve stability.

We strictly limit the use of your sensitive mental health data.

• •

  To operate, maintain, and improve the features of FreedOCD.

• •

  To personalize your user dashboard, progress charts, and tracking tools.

• •

  To generate AI-powered insights and reflections based on your logged data (see Section 7 for details on AI processing).

• •

  To provide customer support and respond to your feedback and requests.

• •

  To detect, diagnose, and fix technical problems using crash and diagnostic reports.

• •

  We NEVER sell your personal data or mental health inputs to third parties, advertisers, or data brokers.

We treat your mental health data with the highest industry standards of security.

• •

  Encryption: All data is encrypted in transit (using TLS) and at rest (using AES-256).

• •

  Access Control: Only you can access your personal therapy logs. Our team cannot read your private clinical inputs.

• •

  Compliance Alignment: Our architecture utilizes secure cloud servers aligned with health-data privacy frameworks to ensure your Protected Health Information (PHI) remains secure.

We do not share your data except in the following limited circumstances:

• •

  Share Links (With Your Consent): You can generate secure, time-limited share links to share specific progress data — such as a thought record, ERP exercise, journal entry, or progress summary — with a trusted contact like your therapist or doctor. Each share link uses a unique token, can be set to expire, can be revoked at any time, and tracks how many times it has been viewed. You are in full control of what is shared and with whom.

• •

  AI Processing Partners: To generate AI insights and reflections, your logged data is sent to a third-party AI language model service for processing. This data is used solely to generate your personalized insights and is not used by the AI provider to train their models or for any other purpose. See Section 7 for full details.

• •

  Error Reporting Provider: Crash and diagnostic data is sent to Sentry, our third-party error monitoring service, solely for the purpose of identifying and fixing technical issues. Sentry receives only technical diagnostic information — never your journal entries, thoughts, or personal mental health content.

• •

  Service Providers: Trusted cloud hosting, database, and infrastructure partners who are legally bound to protect your data and cannot use it for their own purposes.

• •

  Legal Requirements: If required by law to protect user safety or comply with a valid legal process.

You retain complete ownership over your data.

• •

  Access and Export: You can view your data at any time within the app, and you can export your progress data from the Share Manager in Settings.

• •

  Correction: You can update your account information and edit or delete individual entries (thoughts, journal entries, mood logs, ERP exercises, and contacts) directly in the app at any time.

• •

  Deletion (Right to be Forgotten): You can delete individual records at any time by using the delete option on each entry. To delete your entire account and all associated data, go to Settings and select 'Delete Account,' or contact our support team at the email listed in the app. Account deletion permanently erases all of your clinical logs, tracking data, contacts, and account information from our active systems. Residual copies may persist in encrypted backups for up to 90 days, after which they are permanently destroyed.

• •

  Revoke Share Links: You can deactivate or delete any active share link at any time from the Share Manager in Settings. Once revoked, the link immediately stops working.

We retain your data only as long as necessary to provide our services.

• •

  Active Data: Your account data, logs, and entries are retained for as long as your account is active. You can delete individual records or your entire account at any time.

• •

  Deleted Records: When you delete individual records or your account, the data is removed from active systems immediately. Encrypted backup copies may be retained for up to 90 days for disaster recovery purposes, after which they are permanently destroyed.

• •

  Share Links: Share links remain active until their expiration date, until you revoke them, or until the linked account is deleted — whichever comes first.

• •

  Crash Data: Crash and diagnostic reports are retained by our error reporting provider for up to 90 days, after which they are automatically deleted.

FreedOCD uses artificial intelligence to generate personalized reflections and insights based on your logged data. This section explains how that works.

• •

  What Is Sent: When you use the AI Insights feature, relevant summaries of your logged data (such as thought patterns, anxiety trends, and exercise history) are sent to a third-party AI language model for processing.

• •

  How It Is Used: The AI provider processes your data solely to generate your personalized insights. The provider is contractually prohibited from using your data to train their models or for any other purpose.

• •

  What Is Not Sent: Raw journal text, audio recordings, and contact information are not sent to the AI provider unless you explicitly trigger a feature that requires them.

• •

  Opting Out: AI insights are an optional feature. If you prefer not to have your data processed by AI, simply avoid using the AI Insights section of the app.

FreedOCD is not directed at children and is not intended for use by anyone under the age of 18.

• •

  We do not knowingly collect personal or mental health information from children under 18. If you believe a child has provided us with personal information, please contact our support team so we can promptly delete it.

• •

  Because FreedOCD addresses mental health topics including OCD, anxiety, and crisis support, it is intended for adult users and should be used under the guidance of a qualified mental health professional when appropriate.

We may update this Privacy Policy from time to time. If we make material changes regarding how we handle your sensitive mental health data, we will notify you via a prominent notice on the main dashboard screen or via email.