Effective date: 8 July 2026
This Privacy Policy explains how Reset and Recover Halton CIC (“we”, “us”, or “our”) collects, uses, and protects your information when you use the Reset and Recover mobile application (the “App”). The App is provided free of charge to members of our recovery programme. It is not a paid or “freemium” service, and it contains no advertising and no in-app purchases.
By using the App, you agree to the collection and use of information as described in this Privacy Policy.
Who we are
Reset and Recover Halton CIC is the data controller for the personal information collected through the App. We are a Community Interest Company registered in England and Wales (company number 17293701). Our contact details are at the end of this policy.
Information we collect
Information you provide
- Account information: your email address and authentication credentials when you create an account (through Firebase Authentication, using email and password or Google sign-in).
- Enquiry / intake information: the details you give when you first reach out or sign up – what you are seeking support for, how best to contact you, and (optionally) information about your situation and your spending on drugs, alcohol, or gambling.
- Recovery content you create in the App: your check-ins, mood logs, and your use of the recovery tools.
Information your support team records
As part of supporting you, authorised staff may record information relevant to your recovery, such as attendance at meetings and walks, relapse records, contact/call logs, and support notes.
Information collected automatically
- Device and log data: device type, operating system version, and app performance information.
- Crash reports: collected through Firebase Crashlytics, so we can diagnose and fix stability problems.
- Usage analytics: collected through Firebase Analytics, so we can understand how the App is used and improve it.
We do not use advertising networks, we do not sell your data, and we do not use your information for marketing.
Health and recovery data (special category data)
Because the App supports addiction recovery, some of the information above – such as details of your substance use, spending, relapses, mood, and recovery progress – is special category data under the UK GDPR. We treat it with particular care. We process this data on the basis of your explicit consent and in order to provide you with recovery support. You can withdraw your consent, or ask us to delete this data, at any time.
How we use your information
- To provide and maintain the App and your account
- To sync your data securely across your devices while you are signed in
- To authenticate your account and keep it secure
- To enable your assigned support team to provide you with recovery support
- To respond to you and provide support when you contact us
- To send you push notifications, such as updates about a support request you have raised, or reminders if you enable them
- To diagnose crashes and understand how the App is used, so we can improve its stability and features
Who can see your data
Your data is visible to you, and to the authorised Reset and Recover staff and support workers assigned to you within your local branch, who use it to support your recovery. Staff can only access members within their own branch, and access is controlled by strict security rules. We do not make your recovery data visible to other members or to the public.
Data storage and security
- Where it is stored: your data is stored securely in Google Cloud Firestore, and your account is managed through Firebase Authentication.
- Syncing: your content syncs across your devices when you are signed in.
- Security: we apply access controls and industry-standard safeguards. No method of transmission or storage is ever 100% secure, but we take protecting your data seriously.
- Local storage: some data may be cached on your device so the App works smoothly.
Third-party services
The App relies on the following Google / Firebase services to function:
- Firebase Authentication – to manage your account and sign-in
- Cloud Firestore – to store and sync your data
- Firebase Cloud Functions – to process sign-up and support functions securely
- Firebase Cloud Messaging – to deliver push notifications
- Firebase Crashlytics – crash and stability reporting
- Firebase Analytics – usage analytics to improve the App
These are provided by Google. You can read the Firebase Privacy and Security information and the Google Privacy Policy for details of how Google processes data as our infrastructure provider.
Data sharing
We do not sell, rent, or trade your personal information, and we never share your recovery or health data for advertising or marketing. We only share information:
- With our infrastructure provider (Google / Firebase) strictly to store and run the App;
- Where we are required to by law, or to protect someone’s safety;
- In the unlikely event of a reorganisation of the CIC, in which case your data would remain protected under this policy.
Permissions
The App may ask for the following permissions on your device:
- Internet access: required to sign in and sync your data.
- Notifications: to send push notifications, such as updates about a support request or reminders. You can turn these off at any time in your device settings.
Your rights
Under the UK GDPR you have the right to:
- Access a copy of your personal data
- Correct or update your information
- Delete your account and associated data
- Withdraw consent to our processing of your health/recovery data
- Object to or restrict certain processing, and request data portability
To exercise any of these rights, please contact us using the button below. You can manage and delete much of your content directly in the App. If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.
Data retention
- Account and recovery data: kept while your account is active.
- On deletion: permanently removed within 30 days of your account being closed or a deletion request, except where we must keep limited records to meet a legal or safeguarding obligation.
Children’s privacy
The App is intended for adults aged 18 and over taking part in our recovery programme. We do not knowingly collect data from anyone under 18. If we learn that we have, we will delete it.
International data transfers
Your data is stored in Google/Firebase data centres in the europe-west2 (London) region. Where any data is processed outside the UK, we rely on appropriate safeguards in line with UK data protection law.
Changes to this policy
We may update this Privacy Policy from time to time. We will update the “Effective date” above and, where changes are significant, let you know in the App. Continued use of the App after an update means you accept the revised policy.
Contact us
If you have any questions about this Privacy Policy or your data, please contact:
Reset and Recover Halton CIC
Company number 17293701 (registered in England and Wales)
Website: resetandrecovercic.com
This Privacy Policy was last updated on 8 July 2026.