SobriumSobrium Privacy Policy
Last updated: 6 October 2026
Sobrium is a place to stay sober: a counter of your sober days, a private diary, and a feed of people who track the same addiction as you. This policy explains what we keep, why, who else handles it, and what you can ask us to do with it.
Who we are
Sobrium. For anything about your data, write to info@sobrium.cloud.
What we keep, and why
Your account
- Your email address. It is how you sign in: we send a six-digit code to it. It is used to tell accounts apart and to send those codes — nothing else. Other people never see it: it never becomes your name in the app and never appears on anything you write. You see it only in your own settings, partly hidden.
- If you sign in with Google, Google shares your email address and the basic profile details of your Google account with us. We use only the email address.
-
Your name in the app. You start with a random one (
user_and twelve characters) and can change it. Choose anything; it does not need to be your real name. - A profile picture and a short bio, if you add them, and the language of the app.
What you track
For each counter: what it is for (the addiction, in your own words), the day you started, your time zone, whether to show it on your profile, and — only if you enter them — what it used to cost you and how much. If you record a relapse, we keep the day count it ended and anything you wrote about it.
Other people see a counter of yours only if they keep a counter for the same addiction, and only if you have not hidden it.
Your diary
What you write in your diary is visible to you only. Nobody else in the app can open it — not the people you follow, not the people who follow you, not volunteers.
What you publish
Your posts and comments are shown in the feed to people who track the same addiction. They are not private: any signed-in member of Sobrium may be able to see them, along with hearts and «me too» reactions. Your posts carry your app name, your picture if you have one, your day count on the day you wrote them, and your longest stretch.
We also keep who you follow, who you have blocked, and private thanks you send or receive. Nobody can see the list of people who follow you.
If you volunteer to answer newcomers, we keep that you volunteered and which unanswered posts were shown to you.
Photos
Photos in posts and profile pictures are stored privately. They are shown through links that stop working after one hour.
Every photo is checked automatically for alcohol and drug imagery by Amazon Rekognition, which processes it in Ireland. A post photo with such imagery is covered for people who chose not to see it; a profile picture with such imagery is refused. Amazon may keep these images to improve its own services, and may store them outside Ireland while doing so.
Safety and moderation
If you report something, we keep the report and the reason. Moderators review reports; their decisions and any appeal are kept. If an account is deleted, reports about that person are deleted with it.
Sign-in emails
Sign-in codes are sent through Resend, from Ireland.
Why we are allowed to
- To run the service you asked for — your account, sign-in, what you publish: performance of our agreement with you (GDPR Art. 6(1)(b)).
- Information about your health — your addiction, counters, relapses, diary and posts: your explicit consent (GDPR Art. 9(2)(a)), which the app asks for before anything else. You can withdraw it at any time: write to info@sobrium.cloud and we delete your account.
- Keeping the community safe — photo checks, reports, blocks, moderation: our legitimate interest in a safe service, and our obligations under the EU Digital Services Act.
What we never do
- We do not sell your data, and we do not show ads.
- There is no analytics or tracking software in the app.
- Nothing you write is used for advertising.
Who else handles your data
These companies process data on our behalf, only to run Sobrium:
| Company | What for | Where |
|---|---|---|
| Supabase | Database, sign-in, photo storage | United States (Oregon) |
| Amazon Web Services | Automatic photo check (Rekognition) | Ireland |
| Resend | Sending sign-in emails | Ireland |
| Cloudflare | Hosting this website | Worldwide (Cloudflare's network) |
| Only if you sign in with Google | Google's own terms apply |
Data that leaves the European Union for Supabase in the United States is covered by the European Commission's Standard Contractual Clauses (Decision (EU) 2021/914), which are part of Supabase's data processing agreement.
Supabase keeps technical logs of requests to the service, including the IP address a request came from, for one day.
On your phone, the app keeps your sign-in session so you do not have to sign in every time.
How long we keep it
As long as your account exists. You cannot delete your account from inside the app yet. Until you can, write to info@sobrium.cloud and we will delete it — your profile, counters, diary, posts, photos and everything else tied to it — within one month.
Your rights
You can ask us to show you your data, correct it, delete it, give it to you in a portable form, restrict or object to how we use it, and you can withdraw your consent. Write to info@sobrium.cloud; we answer within one month.
If you think we have handled your data wrongly, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (aepd.es).
Age
Sobrium is for adults. Do not use it if you are under 18.
This website
sobrium.cloud has no analytics and sets no cookies of its own.
Changes
If we change this policy, we will update the date at the top. If a change affects how we use your data, we will tell you in the app before it takes effect.