Privacy Policy

Last updated: February 23, 2026

At Defog ("we," "our," or "us"), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services (collectively, the "Service").

Please read this privacy policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Information You Provide

When you use Defog, you may provide us with:

• Account Information: Email address and authentication credentials when you create an account.
• Profile Data: Information about your goals, preferences, and recovery journey that you choose to share.
• Journal Entries: Personal reflections, thoughts, and notes you record in the app.
• Progress Data: Information about your sobriety streaks, milestones, and tracking data.
• Chat Interactions: Messages and conversations with our AI coach.

Automatically Collected Information

We automatically collect certain information when you use the Service:

• Usage Data: Information about how you use the app, including features accessed, time spent, and interaction patterns.
• Device Information: Device type, operating system, unique device identifiers, and mobile network information.
• Analytics Data: Aggregated and anonymized data about app performance and user behavior.

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Personalize your experience and provide tailored content
• Power our AI coach with context about your journey
• Track your progress and calculate milestones
• Send you important updates about the Service
• Respond to your comments, questions, and support requests
• Monitor and analyze usage patterns to improve the Service
• Detect, prevent, and address technical issues

Data Storage and Security

Your data is stored securely using industry-standard encryption. We use Firebase, a Google Cloud Platform service, to store and process your data. All data is encrypted in transit (TLS) and at rest.

Journal entries are stored with end-to-end encryption where possible, meaning only you can access the unencrypted content. We implement appropriate technical and organizational measures to protect your personal information.

AI Coach & Data Processing

Our AI Coach feature uses Anthropic's Claude API to provide personalized coaching. When you use the AI Coach, the following data is sent to Anthropic for processing:

• Your Messages: The text of your conversations with the AI Coach, including recent chat history for context.
• Profile Information: Your first name, goals, known triggers, motivations, and mood data to personalize responses.
• Recent Activity: Sobriety streak, craving logs, check-in data, and mood scores from the last 7 days.
• Technical Data: Your timezone and locale for appropriate responses.

Important protections:

• Anthropic states that customer prompts and outputs from its commercial API are not used to train its generative models unless you explicitly opt in.
• Data is transmitted securely via encrypted connections (TLS).
• Anthropic may retain API data for a limited period for trust and safety monitoring unless a stricter retention setting applies to your workspace.
• You must provide explicit consent before using the AI Coach for the first time.

For more details, see Anthropic's model training policy and their API data retention guidance.

Third-Party Services

We use the following third-party services to provide and improve our Service:

• Anthropic: Powers our AI coach (see "AI Coach & Data Processing" above).
• Firebase (Google): Provides authentication, database, and analytics services. See Firebase Privacy Policy.
• RevenueCat: Manages subscriptions and in-app purchases. See RevenueCat Privacy Policy.
• Firebase Analytics: Helps us understand how users interact with our app. This data is aggregated and anonymized.
• Amplitude: Provides product analytics and session replay to help us understand user journeys and improve the app experience. Data collected includes anonymized usage events, device metadata, and visual recordings of app sessions (screen layout and interactions, with sensitive text automatically masked). See Amplitude's Privacy Policy.
• Tenjin: Used as our mobile measurement partner (MMP) for advertising attribution. Collects anonymized app event data and device identifiers to measure advertising performance. See Tenjin's Privacy Policy.

Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: With third-party vendors who help us provide and maintain the Service
• Legal Requirements: When required by law or to respond to legal process
• Safety: To protect the rights, property, or safety of Defog, our users, or others
• Business Transfers: In connection with a merger, acquisition, or sale of assets

Your Rights and Choices

Access and Portability

You can access your data at any time through the app. You can also request a copy of your data by contacting us at the email below.

Correction

You can update or correct your information directly in the app settings.

Deletion

You can delete your account and all associated data at any time through Settings > Account > Delete Account. Your data will be permanently removed from our servers within 30 days.

Data Export

You can export your journal entries and progress data from the app at any time.

GDPR Compliance (European Users)

If you are located in the European Economic Area (EEA), you have certain rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing

To exercise these rights, please contact us at the email address below.

CCPA Compliance (California Users)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know whether personal information is sold or disclosed
• Right to say no to the sale of personal information (we do not sell your data)
• Right to access your personal information
• Right to equal service and price

Children's Privacy

Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

Users must be at least 13 years old to use Defog. Users between 13 and 18 should review this policy with a parent or guardian.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Service. If you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal or regulatory purposes.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we will also notify you through the app or via email.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: