Code 4
Privacy Policy
Plain language. No legal fog.
What We Collect
- Account info: phone number, first name, last name, role category, callsign, and interests.
- Session data: debrief conversation transcripts, screening responses, thought records (Hot Wash), and vault items (photos, notes, quotes, audio).
- Usage data: session timestamps, shield progress, and which features you use.
- Emergency contact: name and phone number you provide — stored only to support the contact feature described below.
Where It Lives
- All data is stored in Supabase, a cloud database hosted in the United States.
- Data is encrypted in transit (HTTPS/TLS) and encrypted at rest.
- Only you can access your own session data. Your employer, department, or anyone else cannot.
What We Do Not Do
- We do not sell your data. Ever.
- We do not share your data with employers, insurers, or law enforcement.
- We do not use your session content to train AI models.
This app is not HIPAA-covered. It is peer support software, not a healthcare service. Your data is handled with care, but HIPAA protections do not legally apply.
The Emergency Contact Feature
- If a crisis signal is detected during a session, the app shows you a button that opens a pre-written text to your emergency contact.
- Nothing is sent automatically. You open the SMS app, you review the message, you send it — or you don't.
- This feature opens your phone's messaging app. It will not work on desktop computers or browsers that don't support SMS links.
- Your emergency contact's number is never visible to other users.
Deleting Your Data
- You can delete your account from Settings at any time.
- Deletion removes your profile, all session data, screening responses, vault items, and emergency contact info from our database permanently.
- Deletion cannot be undone.