Privacy Policy

Last updated: 8 November 2026

ORIZN Sober is run by ORIZN LTD (formerly SoberStreak AI Ltd).

This policy explains what ORIZN Sober collects, why, who else handles it, and the choices you have. It covers the iPhone app, the Android app and the web app in your browser at oriznsober.com/app (also reachable at soberstreak.ai/app), and our websites oriznsober.com and soberstreak.ai. Recovery data is personal, so we've tried to be specific rather than vague.

1. Who we are

ORIZN Sober is run by ORIZN LTD (formerly SoberStreak AI Ltd), a company registered in England and Wales, company number 17252221. Our registered office is 167-169 Great Portland Street, 5th Floor, London, W1W 5PF, United Kingdom.

We are the data controller for the personal data described in this policy, and we're registered with the UK Information Commissioner's Office (registration number ZC245013). For anything about your privacy, email hello@soberstreak.ai.

2. What we collect

We collect only what you give us and what we need to run the app. We don't buy data about you, and we don't collect it from other apps or websites.

Your account

Your email address, or your Apple or Google sign-in if you use one. Your password is held by Google Firebase's sign-in service, and we never see it. If you add them, your name and a profile photo. We also keep your confirmation that you're 18 or over, and a record of the consents you give: what you agreed to, which version, and when.

Your recovery

What you're recovering from and when you started, your streaks, pledges and check-ins, any slips you record, the urges and triggers you log, your milestones, your spending figures, and your answers about your plan and your "why".

Your journal

Your entries and their mood. If you record a voice note, the recording is stored with that entry in your private account. Any transcript is made on your device.

AI Companion conversations

The messages you send, the Companion's replies, and any folders you organise them into, so you can come back to them. Ghost chats are never saved. Section 4 explains how the AI features work.

Premium features

If you use them: guided programme progress (the first 3 days are free), plans for your triggers and for tough days, morning intentions, journal reflections you keep, weekly notes and Companion memory. Section 4 lists exactly what each one stores. If you add someone's name and phone number to a plan as a person to contact, we store those details only so that you can contact them from your own phone. We rely on you to have their permission, and we never contact them.

Savings goals

If you set them. Savings goals are free for everyone. Section 4 lists exactly what they store.

Community, if you use it

Your handle, and anything you choose to add: a display name, a bio and how long you've been going. Also your posts, replies, reactions, follows, direct messages, and any reports you make. Section 5 explains what other members can see.

Purchases

Which plan you have, when it started and renews, and whether a trial is active. On iPhone, Apple takes the payment. On Android, Google Play does. On the web, Stripe does. We never see your card details.

Messages you send us

Emails to us, and feedback you send from inside the app. In-app feedback includes your message, the category you chose, your app version, your platform and your account ID, so we can follow up.

Technical and usage information

Your device type, operating-system version and app version, and an installation identifier that Firebase assigns to your copy of the app. If you allow notifications, a push token that lets us send notifications to your device; Apple and Google deliver them and never see their content. Unless you turn it off, we also collect how you use the app and crash reports. Section 3 explains what that covers.

Downloaded content. Rae's voice in your language, and the art for some Premium worlds, are downloaded from our storage provider (Google Firebase) the first time you need them. The request only identifies the file and that you are signed in. Nothing you have written is sent.

Our website

If you use our contact form or sign up for ORIZN updates, we receive what you submit.

3. How we use it, and our legal basis

We use your data to provide ORIZN Sober, keep it safe and make it better. Data protection law (UK GDPR, and EU GDPR where it applies) requires a legal basis for each use. Here they are:

Health data and your consent

What you're recovering from, and most of what you record in the app, is health data. Under data protection law that's "special category" data, and we process it only with your explicit consent, which you give when you create your account. You can withdraw that consent at any time by deleting your account. Recording your recovery is what the app does, so we can't keep providing the app once consent is withdrawn.

Usage analytics and crash reports

Unless you turn it off, the app records how it's used so we can see what helps and what breaks. This covers which features you use and when, for example opening a reminder, completing the day's check-ins or confirming your daily pledge. It also covers how you move through sign-up and the Premium screens, and which days you open the app (the last day you opened it, and which of your first 30 days you opened it on). Most of this is sent to Google Analytics for Firebase. The days you open the app are kept in your own account on Firebase.

Crisis support is handled differently. When the crisis screen is opened or a helpline is tapped, we add one to a daily total kept in our own Firebase database, with nothing that identifies you. Nothing about it is sent to Google Analytics. (Versions of the app before 1.1.3 sent those moments, and your pledge streak, to Google Analytics. Updating the app stops this.)

If the app crashes, a crash report with the technical details of the error and your device model and operating-system version is sent to Firebase Crashlytics. Google Analytics for Firebase keeps event data for no more than 14 months and Crashlytics keeps crash reports for 90 days, after which they are deleted or aggregated.

None of this includes your journal entries, urge notes, AI Companion messages or Community posts. You can switch all of it off at any time in Profile › Privacy & Security › Analytics.

We never sell your data, for money or anything else. We don't use it for advertising, we don't share it for targeted advertising, and we don't build marketing profiles.

You can object. Where the table says we rely on our legitimate interests (usage analytics and crash reports, welcome emails and emails to say we miss you, answering your messages, and keeping the service secure), you have the right to object at any time. Switch analytics off in Profile › Privacy & Security › Analytics, use the unsubscribe link in any email, or email hello@soberstreak.ai and we will stop unless we have a compelling reason that overrides your interests, which for analytics and emails we never will.

4. The AI Companion and other AI features

Our AI features use third-party AI providers in the United States. Until the move described below, OpenAI provides all of them. OpenAI doesn't use what we send to train its models. It keeps it for up to 30 days to monitor for abuse, then deletes it, unless the law requires it to keep it longer. That applies to everything in this section that is sent to OpenAI. We don't use your data to train AI models either, and we never send OpenAI your email address or account ID.

Features marked Premium are in ORIZN Sober 1.1.5 and later, except What your money became, which is in ORIZN Sober 1.1.8 and later. They are all optional.

Companion replies are written by Anthropic

Since 8 November 2026 the AI Companion's replies are written by Anthropic, a company in the United States. Before that date OpenAI wrote them.

Your Companion messages, your set-up chat and answers if you chat during set-up, and what Personalise Companion shares, if it is on, go to Anthropic to write replies, along with the app details and any Companion memory summary described below. Crisis checks and photo moderation remain with OpenAI, so your messages can still go to OpenAI to be checked for signs of crisis. The other AI features in this section stay with OpenAI unless this policy says otherwise.

What we send Anthropic is covered by its published terms for API customers like us. It deletes what we send and what it writes back from its backend within 30 days of receiving or generating it, with exceptions that its retention page lists. It does not use them to train its models unless the customer (that is us) explicitly reports material to it or opts in, and we do neither. We don't control what its systems flag. If Anthropic's automated trust and safety systems flag content as violating its Usage Policy, it keeps those messages and replies for up to 2 years, and the classification scores for up to 7 years. That can continue after you delete your account (section 8).

The AI Companion

The AI Companion generates its replies using a third-party AI provider, Anthropic (OpenAI before 8 November 2026). To produce a response, the content of your messages is sent securely to that provider. Your messages are also processed to detect signs of crisis, so we can show you support resources when they may help, and the AI part of that check remains with OpenAI. We do not use your conversations to train AI models, and we do not sell your conversations to anyone. If you speak to the Companion instead of typing (Premium), your words are turned into text on your device, and only the text you choose to send is sent. This processing applies to all chats, including ghost chats (the message is sent to generate a reply)—the difference with ghost chats is only that nothing is saved on our side.

Personalise Companion

If you turn on Personalise Companion (Profile › Privacy & Security, or "Personalise with my data" in the Companion's menu), some of your recovery information is sent to the provider that writes the Companion's replies along with your messages, so the Companion's replies can fit your situation: your name, what you're recovering from, your streak and start dates, your next milestone, how many slips you've logged and the date and "what happened" tags of the most recent one (never your private slip notes), your plan answers, your "why", a short excerpt of your most recent journal entries and their mood, a count of recent urges and the most common trigger, today's pledge, and today's morning intention if you wrote one (Premium; in ORIZN Sober 1.1.5 and later). It is off by default and you can turn it off at any time. A chat you start from a milestone or a weekly note includes that milestone's day count or that note whether or not it is on, and a saved chat you continue sends its earlier messages again, including anything they mention from when it was on. Whether or not it is on, the Companion also receives a few details about how you use the app—your language, your local time, your device's region setting, whether you use the iPhone, Android or web app, how many recoveries you track, whether Community and notifications are available to you, and whether the current chat is a ghost chat—so it can explain the app accurately. With Personalise Companion on, it is also told which of a few features (journal, pledge, your "why", app lock) you've used. We do not use any of this to train AI models, and we do not sell it.

If you chat with Rae during set-up, that one message goes to the same provider with what you are recovering from, your start date and streak, your daily spend and currency, your hard moments and what you want back, whether or not Personalise Companion is on. These are your set-up answers, sent once so the reply can fit them.

Journal reflections Premium

If you tap "Reflect on this" on a journal entry, that one entry and its mood are sent to our server. Before anything else, the text is checked for signs that you may need support: first by an automated word check, then where needed by an AI classifier from our third-party AI provider (currently OpenAI). If a sign of risk is found, no reflection is written and you are shown support resources instead. Otherwise an AI model from the same provider writes a short reflection and one question. The entry is used only for that request and is not stored on our servers. We do not use it to train AI models. The reflection is saved only if you tap Keep, on that journal entry in your private account, and you can remove it at any time. It is deleted when you delete the entry or your account. To limit repeat requests, a count of that day's reflections (no text) is kept for two days. If you don't have Premium, tapping the button sends nothing: the entry stays on your phone.

Weekly notes Premium

If you turn on weekly notes, once a week our server reads that week's journal entries, the notes on your urges and slips, and the triggers you logged. Before any note is written, this text is checked for signs that you may need support: first by an automated word check on our servers and then, where needed, by an AI classifier from our third-party AI provider (currently OpenAI), which means the text is sent to that provider for this purpose. If a sign of risk is found, no note is written and you are shown support resources instead. Otherwise, an AI model from the same provider writes a short note using only figures about your week (your average mood and how it changed, the number of urges you logged and rode out, when they tended to come, your most common triggers and any milestones reached). Your journal entries and your urge and slip notes are never given to the model that writes the note. We do not use this data to train AI models. Each note, or the support card shown in its place, is stored in your private account so you can read it again, until you delete your notes or your account. If you ask for a note on demand, a count of that day's requests is kept for two days to limit repeat requests. No notes are written while you don't have Premium. Weekly notes are off unless you turn them on, and you can turn them off at any time in Insights › Weekly notes; when you turn them off, you can also choose to delete the notes you already have.

Companion memory Premium

If you turn on Companion memory, then after each conversation with the Companion your own messages from that conversation are sent to our AI provider (currently OpenAI) to write a short summary: a few sentences about what you are working on, what tends to be hard and what has helped. Only the summary is kept, at most about 600 characters, stored with your account on our servers in London. It is given to the Companion at the start of later conversations, which means it is sent to the provider that writes the Companion's replies as part of those conversations. A conversation in which you shared anything that looked like a crisis is not remembered at all, and ghost chats are never remembered. If we ever learn that an account belongs to someone under 18 we close it (section 14); as a safeguard, Companion memory is switched off on any such account before it is closed. We do not use this data to train AI models. It is off unless you turn it on. You can read or clear the summary at any time in Profile › Privacy & Security, and turning memory off deletes it. If your Premium ends, the Companion stops using and updating the summary, and it is deleted 90 days after your Premium ended unless you renew before then. It is also deleted when you delete your account.

Plans for your triggers Premium

If you tap "Help me write this" while writing a plan for one of your triggers, the trigger and any steps you have written so far are sent to our server. They are first checked for signs that you may need support, in the same way as your Companion messages, and if a sign of risk is found no draft is written and you are shown support resources instead. Otherwise an AI model from our third-party AI provider (currently OpenAI) suggests up to three short steps. The name and phone number of anyone you add to text are never sent to the provider. We do not use this data to train AI models. Nothing you send for a draft is stored on our servers; the plan is saved only when you save it, in your private account. To limit repeat requests, we keep a count of the drafts you have asked for that day (no text).

Plan for a tough day Premium

If you mark a hard day ahead, we store it in your private account: what kind of day it is (such as a wedding or a family visit) or your own short title for it, its date and, if you add one, a time; up to three steps you plan to take; if you choose, the name and phone number of someone to text; and, if you answer it afterwards, how the day went. The app also sets two reminders on your phone, the evening before and on the day; these are local notifications that never say what they are about, and are cancelled if you delete the day or your Premium ends. If you tap "Help me write this", the kind of day or your title for it, and any steps you have written so far, are sent to our server and handled exactly as for plans for your triggers above: they are checked first for signs that you may need support, then an AI model from our third-party AI provider (currently OpenAI) suggests up to three short steps. The name and phone number of the person to text are never sent to the provider, and the date and time are not sent either. We do not use this data to train AI models. Nothing you send for a draft is stored on our servers; the same daily count of drafts (no text) applies.

Savings goals

If you set a savings goal, we store its name, the target amount and, if you set one, the date you'd like to reach it by, an emoji if you pick one, which of your recoveries it follows (or all of them), the currency and whether it is still active or done, in your private account. Progress towards it is worked out on your device from the money you have reclaimed since you started. Nothing about your savings goals is sent to an AI provider.

What your money became Premium

If you choose up to three things for your savings to stand for, we store each one's name and the price you type, in your private account. How many of each your savings cover is worked out on your device. Nothing about them is sent to an AI provider.

Morning intention Premium

If you turn on the morning intention, the app reminds you each morning, at a time you choose, to write one line for the day (up to 140 characters). Each line is stored in your private account under that day's date, and you can delete any of them. The reminders are local notifications on your phone that never say what they are about, and the time you choose is kept on your phone. If Personalise Companion is on, today's line is sent to the provider that writes the Companion's replies along with your messages, as part of the information described under Personalise Companion; an earlier day's line is never sent, and nothing is sent once your Premium ends. We do not use this data to train AI models.

Guided programmes (the first 3 days are free) and other Premium tools

If you follow a guided programme (the first 30 days, Days 31 to 90, Sleep, Social events or Cravings), we store in your private account when you started it and which days you have completed. If you pick a journal prompt from the prompt library, its theme is saved as a tag on that journal entry. Some Premium features keep nothing on our servers and send nothing to anyone: having the Companion's replies read aloud uses your phone's own voices, on the phone; the weekly supporter summary keeps your supporter's name or label and the day you chose only on your phone, and is sent only by you, through your phone's share sheet (any note you add is not stored); and Your year in recovery is made on your phone from information already in your account, with a share card that shows numbers only, unless you choose to name what you are recovering from. Their settings are kept on your phone.

5. Community

Community is optional. If you never open it, nothing in this section applies to you and nothing about you is shown to anyone.

If you do use Community, the following are visible to other members:

• Your posts, replies and reactions. Anything you post is visible to other members in your cohort, and remains visible until you delete it or your account is deleted.
• Your handle. A short name like @example, generated for you. It is not your email address.
• Your display name, if you choose to set one. This is optional, it is never taken from your account name, and it is blank unless you set it yourself.
• Your profile photo. If you have set an account photo, a copy of it is shown next to what you post. If you have not set one, other members see your initials. You can remove your photo at any time, and the community copy is removed with it.
• Your bio, if you write one.
• How long you have been going, if you choose to show it.
• A Premium ring, if you have Premium: a thin gold ring around your picture. It is on unless you turn it off with Show my Premium ring in your Community profile settings.

What is never shown in Community: your email address, your journal entries, your urge logs, your AI Companion conversations, your real name (unless you put it in your display name or bio yourself), and anything else from the rest of the app.

Direct messages between members are private to the two people in the conversation. We do not read them routinely; they are accessible to us only where we need to act on a report or a safety concern.

Safety processing. Posts, replies and direct messages, including a post or reply you edit, are screened for signs of crisis when you send them, so we can show you support resources and, where it's needed, follow up. The text is checked first by an automated word check on our servers. If that finds nothing, it is sent to an AI classifier from our AI provider (currently OpenAI, in the United States). This screening is part of keeping Community safe, so it applies to everyone who posts or sends messages, whether or not you use the app's other AI features. Photos, including your profile photo, are checked for harmful images by the same provider. OpenAI does not use this content to train its models; it may keep it for up to 30 days to detect abuse, then deletes it. Reports you make, and moderation decisions about your content, are recorded so we can act on them and show our working if you appeal.

Leaving. Deleting your account removes your Community profile, posts, replies, reactions, photos and direct messages. At the point of deletion you choose whether your posts are deleted outright or kept with your name removed. Reports and moderation records are kept but your identity in them is replaced with an irreversible code, because a record of a safety decision has to survive the account it was about.

6. Who we share it with

We share data only with the service providers that help us run ORIZN Sober, and only what each one needs. They act on our instructions under written agreements, except where the table says they act for themselves.

We may also share information if the law requires it, or where it's needed to protect someone's life or safety. If ORIZN LTD were ever sold or merged, your data would move to the new owner and stay protected by this policy, and we'd let you know.

7. Where your data is stored

Most of your app data is stored in London, with photos and voice notes in Turin, Italy. Some providers in the table above are based in, or process data in, the United States or other countries. When your data leaves the UK or the European Economic Area, we rely on recognised safeguards: an adequacy decision for that country (such as the UK–US data bridge, for providers certified under it), or the standard contractual clauses and UK addendum in our agreements with the provider.

8. How long we keep it

We keep your data for as long as your account is active. You can permanently delete your account at any time from within the app—this removes your recovery data, journal entries, and profile photo from our systems. Journal voice notes are deleted with their entry, or when you delete your account. After deletion, three things remain for a short time. Backup copies of our database are kept for up to 14 days and then expire; a backup is never restored in a way that brings back a deleted account. Deleted photos and voice notes can sit in our storage provider's recovery area for up to 7 days before they are gone for good. And we keep a record that an account was deleted and when, under an irreversible code that cannot be linked back to you, so that a restore can never resurrect it. Anything we must keep for legal reasons is listed below.

AI Companion conversations. Saved chats are kept in your account until you delete them. When you delete a chat, it moves to a "Deleted" area and is held for around 30 days, after which it is permanently removed automatically. You can restore a deleted chat during that period, or delete it permanently straight away. Ghost chats are never saved and so are never retained. Deleting your account removes all your AI Companion conversations and folders.

Premium AI features (in ORIZN Sober 1.1.5 and later). A journal reflection you keep is stored on the journal entry it belongs to, and is deleted when you remove it, delete the entry or delete your account. To limit repeat requests, a count of each day's journal reflections and a count of each day's on-demand weekly-note requests (numbers only, no text) are each kept for two days and then deleted automatically. Weekly notes, and any support card shown in place of a note, are kept in your account until you delete them (you can choose this when you turn weekly notes off) or delete your account. Plans for your triggers are kept until you delete them or your account; the count of that day's drafting requests is replaced each day. Tough-day plans, savings goals and morning intentions are kept until you delete them or your account, and are deleted with your account. Guided programme progress is kept until you delete your account. Companion memory (a summary of at most about 600 characters) is kept until you clear it, turn memory off or delete your account; if your Premium ends, it is deleted automatically 90 days after your Premium ended, unless you renew before then.

Some things are kept after your account is deleted, for a good reason. Community reports and moderation records are kept with your identity replaced by an irreversible code (see section 5). Daily totals of crisis-screen opens contain nothing that identifies you. Purchase records held by Apple, Stripe and RevenueCat are kept by them as tax and accounting law requires. Anything Anthropic's automated safety systems flag can stay with Anthropic after you delete your account, for the periods in section 4. We cannot delete it earlier. Welcome-email records are deleted with your account.

9. Emails and notifications

When you sign up, we send a welcome email, and a short follow-up the next day to help you get started. These are about using the app, not offers, and every one has a one-click unsubscribe link. If you don't opt out when you create your account, we may also send occasional ORIZN news and tips. You can turn these off at any time in Settings or with the unsubscribe link in any email. Emails about your account, such as password resets, are always sent.

If you haven't opened the app for a week, we may send you a short email to say we miss you, on the same day of the week you were last in the app. We send at most four in a row, and stop as soon as you come back or unsubscribe. To know when you were last in the app, we use the time your sign-in was last refreshed, which happens when you open it. Each one has the same one-click unsubscribe link.

Reminders in the app, such as your daily check-in or morning intention, are notifications set on your own phone. You choose which ones you get, and you can turn them off in the app or in your phone's settings.

If you sign up for ORIZN updates on our website, we use your email address only to send those updates, and every one has an unsubscribe link.

10. Cookies and local storage

ORIZN Sober uses a small amount of browser storage. Most of it is essential to how the app works, and the rest is analytics you can switch off. We use no advertising cookies and do not track you across other websites. Our website stores no preferences or cookies of its own; if you send us a message or sign up for updates, Netlify Forms (our website host) stores what you submit, along with the technical details Netlify records with each submission, such as your IP address, to filter spam. When you use the web app in your browser at oriznsober.com/app, we and Google Firebase store information on your device that is needed to keep you securely signed in and to remember your settings—for example your authentication session and app preferences. This information stays on your device, is used only to run the app, and you can clear it at any time through your browser settings (which will sign you out). The web app also uses Google reCAPTCHA to check that requests come from a real browser. reCAPTCHA sets a Google cookie and collects information about your browser and device, under Google's privacy policy; we use it only to protect the app from abuse. If analytics is on, the web app also uses Google Analytics for Firebase, which sets first-party analytics cookies to count visits and see how the app is used. You can switch this off at any time in Profile › Privacy & Security › Analytics, which stops these cookies being used. We do not track you across other websites, so there is nothing for a "Do Not Track" or Global Privacy Control browser signal to switch off, and we treat visitors who send one exactly the same as everyone else.

11. Security

Your data is encrypted in transit and at rest. Our database rules let each account read and write only its own data. You can also turn on App Lock in the app for extra protection on your phone. Access to production data is limited to the people who run ORIZN Sober, and is used only to keep the service running, to act on a report or safety concern, or when you ask us to.

12. Automated safety checks

Some safety checks are automatic. Messages, posts and journal content sent for AI features are screened for signs of crisis, and if one is found you're shown support resources. Community posts and photos are checked when you post them, and content that breaks the Community rules can be hidden automatically. If your content is hidden, we tell you which rule it broke, and you can appeal to a person. None of these checks makes decisions with legal or similarly significant effects about you. These checks are automated and best-effort. They can miss things, they are not watched by a person around the clock, and we do not contact emergency services or anyone else on your behalf. If you are in danger, contact your local emergency services.

13. Your rights

Under UK GDPR (and EU GDPR where it applies) you have the right to:

• Access your data, and take it with you. Export my data, in the app's Privacy & Security settings, gives you a copy of your recovery data, journal, urges and slips, plans and Premium features, and, if you choose, your Companion conversations and memory, free. Email us for anything it does not include, such as your Community posts and messages.
• Correct anything that's wrong. Most of it you can edit in the app.
• Delete your data. The Delete Account button in your account settings removes it, as described in section 8.
• Withdraw your consent at any time, and switch off optional features such as analytics, Personalise Companion, weekly notes and Companion memory.
• Object to, or ask us to restrict, how we use your data.
• Complain to the UK Information Commissioner's Office at ico.org.uk, or to the data protection authority where you live. We'd appreciate the chance to sort it out first.

For anything you can't do in the app, email hello@soberstreak.ai. We'll reply within one month. If you live in Washington State, Nevada or Connecticut, our Consumer Health Data Privacy Policy sets out your extra rights.

14. Children

ORIZN Sober is for adults only. You must be 18 or over to create an account, and we ask your age when you sign up. If we find that an account belongs to someone under 18, we'll close it and delete its data.

15. Changes to this policy

We update this policy when the app changes, and the date at the top always shows the latest version. If a change significantly affects how we use your data, we'll tell you in the app before it takes effect.

16. Contact us

Questions about your privacy, or how we handle your data? Email hello@soberstreak.ai, or write to ORIZN LTD, 167-169 Great Portland Street, 5th Floor, London, W1W 5PF, United Kingdom.