1. Introduction
Sobriety Journey ("we", "us", "our") provides a digital aftercare platform connecting patients in recovery with their therapists and rehabilitation centres. This Privacy Policy explains how we collect, use, store, and protect your personal information.
2. Information We Collect
- Account information: name, email, phone number, and role (patient, therapist, or admin).
- Health-related data: daily mood and craving check-ins, journal entries, assessment scores, session attendance, and craving/win logs.
- Communications: messages exchanged between patients and therapists within the platform.
- Usage data: pages visited, features used, and timestamps for platform activity.
3. How We Use Your Information
- To provide and maintain the aftercare support platform.
- To enable communication between patients and their assigned therapists.
- To generate personalised insights and AI-assisted clinical summaries (visible only to therapists).
- To send notifications such as check-in reminders and account activation links.
- To produce aggregated, anonymised outcomes reports for rehabilitation centres.
4. Data Storage and Security
All data is stored on secure, encrypted infrastructure. Patient data is logically separated by rehabilitation centre. Access is restricted by role — patients can only see their own data, therapists can only access their assigned patients, and administrators can only access data within their centre.
5. Data Sharing
We do not sell, rent, or share your personal information with third parties for marketing purposes. Data may be shared only:
- With your assigned therapist and centre administrators as part of your care.
- With service providers who help us operate the platform (hosting, email delivery), under strict data processing agreements.
- When required by law or to protect the safety of users.
6. Your Rights
You have the right to:
- Access the personal information we hold about you.
- Request correction of inaccurate information.
- Request deletion of your account and associated data.
- Withdraw consent at any time.
To exercise any of these rights, contact us at info@sobrietyjourney.org.
7. POPIA Compliance
Sobriety Journey is committed to compliance with the Protection of Personal Information Act (POPIA) of South Africa. We process personal information lawfully, for a specific purpose, and with appropriate safeguards. Key measures include:
- Explicit consent obtained before collecting health-related data.
- Data minimisation — we only collect what is necessary for aftercare support.
- Role-based access controls ensuring therapists only see their own patients.
- Secure storage with encryption at rest and in transit.
- The right to request access, correction, or deletion of personal information.
Our Information Officer can be reached at info@sobrietyjourney.org.