Privacy Policy

This policy covers the Texas Sober Home Guide by White Owl Rising website and installed app at soberhomeguide.com and related addresses, including the former whiteowlrising.app address. It does not cover other organizations we link to — treatment centers, meeting groups, employers, clinics, government sites, maps, or phone services all have their own practices.

You can browse the current public navigation — Emergency Help, recovery housing, Recovery Meetings, Everyday Support & Basic Needs, Employment & Career Support, and Awaken with Wisdom daily readings — with no account or submission required. Some other resource pages remain available through retained direct links even when they are not shown in public navigation. Private Toolkit content requires your Toolkit PIN.

We do not call this “anonymous.” Like any website, requests reach our hosting and database provider, and routine technical data such as your IP address, browser type, and the pages requested may be processed and appear in their operational server logs. We do not use that data to build a profile of you, and we do not run advertising or profiling trackers.

Three things matter: whether something stays on your device, whether it reaches our database, and whether it is ever sent to an AI service. Here is the honest breakdown.

On your device only — encrypted, and we cannot read it

These are the private Toolkit features behind your 6-digit Toolkit PIN. Their contents are encrypted in your browser with AES-256-GCM and stored on that device. The app does not automatically upload or sync them to White Owl Rising, include their contents in error reports, or send them to AI. Voluntary sharing, exports, and backups are described below.

• Morning routine and nighttime check-in entries.
• Weekly reflection answers.
• Gratitude entries written inside the Toolkit.
• Past journal entries and journal history.
• Your private Prayer List.
• Habit tracker, habit notes, and completion history.
• Your To-Do List items — there is one To-Do List and it lives inside the encrypted Toolkit.
• Private recovery details you keep in the Toolkit, such as sponsor, home group, meetings, and chip dates.

On your device only — stored without encryption

• A limited display-only copy of your recovery start date and time, which may support the optional recovery counter while the Toolkit is locked; the home-screen counter is no longer displayed.
• Reminder and notification preferences, and app display preferences.
• Your Toolkit agreement record: only the Terms version and the time you agreed, saved without encryption on this device. It contains no Toolkit content, PIN, name, or IP address and is not uploaded. Clearing site data removes it. When we materially change the Terms, we will ask you to agree again before opening private tools.
• Near Me coordinates, kept in session storage and cleared when you close the tab.
• If you are signed in, your sign-in session token, kept in browser storage rather than a cookie.

Anyone with access to your unlocked device may be able to read the unencrypted items. Clearing browser, site, or app data can permanently remove locally stored Toolkit information, and so can private browsing or switching devices. What an uninstall or app removal leaves behind varies by browser, device, and operating system, so do not rely on uninstalling alone as a secure way to delete your data. Once local content is gone, we cannot recover it without a user-held valid backup and its password; restoration from that backup is performed by you on your device, not by us.

In our cloud database

• Account email address and a password hash held by our authentication provider. We never see your password.
• Profile details for existing accounts: display name and, if entered there, a sobriety date.
• Saved favorites, if you are signed in and tap the heart on a listing.
• Anything you type into a public submission form (see below).
• Aggregate directory usage counters: how many searches ran on a page and how long they took. These contain no user identifier, no IP address, and no search text.
• Email delivery logs for messages the app sends, and a mailing list of addresses collected earlier or given to us directly.

Publicly submitted for review

• Employer experience submissions: the employer name, city, your interview experience, tips, and three yes/no/not-sure answers. No name, email, or account is required. These are saved for admin review and, with the permission you give in the form, may be published in the directory. Ordinary technical logs still exist, so do not include your name or anything you would not want shown publicly.
• Organization interest enquiries, where that form is available: organization name, contact name, email, phone, location, and message.
• Resource, event, and correction submissions from Help Grow the Guide: the resource or event name, category, location, address, website, phone, your notes, and your name and email. These are stored for admin review and emailed to us. Nothing is published automatically, and we may email you to confirm details. Your name and email are used for review and follow-up only and are not published by default. Please do not include private health information.
• Form agreement receipt: each Help Grow the Guide or employer experience submission requires fresh checkboxes for the Terms, reading this Privacy Policy, and publication permission. The server saves only the Terms, Privacy, and form-notice versions, those three yes answers, and a server time with that submission. It saves no IP address, device identifier, or new identity details, is visible only to staff, and is a record of what the form received — not a signature or proof of identity or age. It is separate from the device-only Toolkit agreement record and is not marketing consent.

Built but not active

• Public account registration is turned off. Existing accounts can still sign in.
• Stripe card support, subscriptions, merchandise checkout, paid provider profiles, and other in-app payment features are inactive. Help Grow the Guide currently offers external Venmo and Cash App links, not active card checkout.
• The AI assistant, AI coach, and the older cloud-synced journals and member tools are not reachable by the public.
• There is no file or screenshot upload anywhere in the public app.

• To show and search the resource directories.
• To sign existing users in and keep them signed in.
• To store the small amount of account and favorite data those users choose to save.
• To review submissions and corrections so directory listings stay accurate.
• To answer emails you send us.
• To understand overall directory load and speed, using counters that identify no one.
• To fix crashes, using automatic JavaScript error reports containing the error message, stack trace, and page path.
• To meet legal obligations, protect the safety and integrity of the service, and respond to valid legal process.

We do not use your information for advertising, profiling, scoring, or automated decisions about you.

The app does not send private Toolkit content to AI. Journals, gratitude, weekly reflection, habits, prayer list, to-dos, and recovery details are handled locally, without automatic upload or sync. If you deliberately share or export content to another app or service, that destination follows its own privacy practices; this app cannot control its processing of the copy you chose to send.

AI assistant and planning features exist in the code but are not available to the public today. If they are switched on later, they would run only when you deliberately start a request, the text you choose to send would be transmitted to a third-party AI provider to generate a reply, and this policy would be updated before that happens. Encrypted Toolkit content would remain excluded.

Some published reading content in the app is drafted with AI assistance by an administrator. That process uses no member data.

AI output can be wrong or out of date and is never medical, clinical, legal, or treatment advice.

We ask for your location only when you tap a “Near Me” control. It is a single one-time reading — no background tracking, no continuous monitoring. The coordinates stay in your browser for that session and are used only to sort listings by distance. They are not sent to our servers and are not stored by us. You can decline and still search by ZIP, city, or county.

New public account creation is currently turned off. People who already have an account can sign in with email and password through our authentication provider; the password is stored by that provider in hashed form and we never see it. Your sign-in session is kept in your browser’s local storage. Access to account records is restricted by database rules to the account that created them.

Your 6-digit Toolkit PIN is separate from any account password. It is used on your device to derive the key that encrypts your private Toolkit. The PIN itself is never stored in readable form, never transmitted, and never known to us. Only the encrypted data is written to your device.

We cannot recover your PIN or private Toolkit content. If you forget the PIN, you can reset the local Toolkit; you can then restore a previously created valid backup if you have its separate backup password. Without your backup and password, lost content cannot be recovered by us. This is on-device privacy protection. It is not a certification, not a HIPAA or 42 CFR Part 2 compliance claim, and no system is perfectly secure.

After unlocking, you can deliberately preview selected content and share or copy it as plaintext, or export it using the available controls. Nothing is shared automatically. Anyone receiving a plaintext copy can read it. Recipient apps, services, and people may retain or further share it under their own privacy rules.

You can also create a password-encrypted local backup and choose where to save it. The backup password is separate from your Toolkit PIN. If you choose a cloud drive or another backup destination, that service handles the file under its own privacy rules; White Owl Rising does not upload or keep a backup for you. Keep your backup and password if you want to restore the backed-up data later.

Deleting entries or resetting the Toolkit removes local data but does not delete prior shared, copied, exported, or backed-up copies. An existing valid backup and its password can restore the data it contains, including entries deleted locally after that backup.

Reminders are off until you turn them on. Turning them on only enables reminders inside the app while it is open. Notifications from your device are a separate, explicit choice: permission is requested only when you tap “Allow device notifications” yourself — never on page load — and if you decline or your browser blocks them, we do not ask again and in-app reminders keep working. Everything is per browser installation: your reminders do not follow you to another phone, tablet, or computer.

Full reminder details — what a reminder is about, and the task, prayer, journal entry, or resource it points at — stay encrypted in your Toolkit on your device. Your delivery preferences themselves (whether reminders are on, which features, times, days, quiet hours, and this installation’s anonymous code) are stored unencrypted in ordinary browser storage on this device. They contain no reminder content.

If you allow device notifications, our server receives only the minimum needed to deliver one: an anonymous code generated by your browser for this installation, a private management credential stored only as a one-way hash, the push address and keys your browser issues, your time zone, a send time, an opaque reminder code, and an internal screen to open. It never receives task text, journal text, prayer text, provider or treatment names, or any encrypted Toolkit content. Every notification reads the same generic line: “You have a White Owl Rising reminder.”

So the same reminder never reaches you twice, this device keeps a small private record of which reminders have already been shown. It holds only an anonymous code for each shown reminder and the time it appeared — never any reminder content, feature name, or screen. It is stored on your device, shared between the app and the notification helper, cleaned up automatically after a week, and erased by a Toolkit reset.

Turning device notifications off, turning reminders off, or resetting the Toolkit deletes that record and unsubscribes this device. A full Toolkit reset also erases your reminder preferences, this record of shown reminders, and this installation’s code; simply turning reminders off keeps your times and days on this device so you do not have to set them up again. A notification-only service worker is used for delivery; it never caches pages and is registered only after you allow device notifications.

While your Toolkit is locked, we never rewrite your scheduled reminders. Locked, the app cannot read your private reminders, and rewriting the schedule from what it could see would quietly cancel them. Your existing schedule is left untouched until the next time you unlock.

Limits we will not overstate: your device and operating system control sound, Focus / Do Not Disturb, battery behavior, exact timing, and whether a notification is delivered at all. iPhone and iPad only allow notifications once the app is added to the Home Screen. Delivery while the app is closed also requires the delivery service to be configured for this deployment; that setup is not complete and has not been tested, so today reminders appear in the app while it is open and nothing is sent while it is closed. The Settings screen always states which of these is true for you.

We do not run Google Analytics, Meta Pixel, or any advertising, retargeting, or profiling tracker, and we do not use advertising cookies. We do not sell or rent your information, and we do not share it with advertisers or data brokers.

What is used instead: browser local storage and IndexedDB for on-device features and the sign-in session, session storage for Near Me, aggregate directory counters that identify no one, and automatic JavaScript error reports through our hosting platform. Our hosting provider may set cookies or similar identifiers necessary to deliver and protect the site. Device Reminders use a notification-only service worker; it never caches pages and is registered only after you allow device notifications.

Our hosting platform also provides limited operational analytics about the site: visitor and pageview counts, which pages were viewed, general traffic source or referrer, device category, country or approximate region, aggregate session and engagement metrics, and technical or error information. In providing these, the platform may process routine technical data such as IP addresses in its operational logs. We use this information to understand how the service is running and how the public pages are used — not to build advertising profiles, target ads, or track you across other sites.

We share information only with the providers needed to run the app:

• Our hosting, database, and authentication provider, which stores accounts, favorites, submissions, and operational logs.
• Our email infrastructure, which sends account and update emails and keeps a delivery log.
• An error-monitoring integration built into our hosting platform, which receives JavaScript error reports.
• Map, phone, and email apps you open from a listing, which are operated by others.

Help Grow the Guide currently links to external Venmo and Cash App support options. Those services handle the information you provide under their own privacy policies. Stripe card support is currently disabled. If separately enabled and configured later, Stripe would receive card and billing details directly; the app would receive limited contribution information such as amount, currency, payment identifiers, and status, not your full card number. Subscriptions and merchandise checkout remain inactive. We make no claim that support payments are tax-deductible.

Tapping Call, Directions, Website, or Email hands off to your phone, map, browser, or mail app and to the organization you are contacting. We do not see or record those calls, messages, or the pages you visit afterwards, and we are not responsible for those organizations’ privacy practices.

Recovery, mental-health, and spiritual information is sensitive. White Owl Rising is designed as a consumer recovery-resource and personal self-help tool. It is not a healthcare provider, treatment program, clinic, electronic medical or health record, clinical chart, or clinical documentation system, and we do not claim HIPAA or 42 CFR Part 2 compliance or certification.

The private Toolkit is intended for an individual’s own personal use. Counselors, treatment providers, sober-living operators, and organizations should not use White Owl Rising to create, store, transmit, or manage identifiable patient or client treatment records, clinical notes, or protected treatment information on behalf of a healthcare or substance-use treatment provider.

Privacy-law obligations can depend on how a service is used, what information is involved, and the relationship between the parties, so nothing here is a guarantee about the legal status of what you write. The strongest protection we offer is architectural: the private Toolkit is encrypted on your device, with no automatic upload to us; deliberate sharing and exports create separate copies as described above. Please do not store anything in this app that would seriously harm you if it were disclosed.

Public resources are general-audience information anyone can read without an age check. The private Toolkit, accounts, and public submission forms are for people 13 or older, and ask you to confirm “I am 13 or older.” We do not ask for your date of birth. For submissions, we store that yes answer with the agreement receipt; for the Toolkit it stays on your device. A checkbox is not age verification.

We do not knowingly collect personal information from children under 13. If you believe a child under 13 has submitted personal information to us, email us and we will review it and delete it as required by applicable children’s privacy law.

On-device content is retained until you delete it or clear your browser or app data. That deletion removes that device's local entries, not prior shared, exported, or backed-up copies. You can restore backed-up data with an existing valid backup and its password; we cannot recover it for you.

Cloud records are kept while they are needed for the purpose they were collected for. There is no self-service delete-my-account or export button, so both are handled by hand. Email whiteowlrisingofficial@gmail.com from the address on the account to request deletion, a correction, or a copy of what we hold. We aim to respond within 45 days.

Deletion is not instant everywhere. Backups, email delivery logs, and operational server logs held by our providers roll off on their own schedules, and we may keep limited records where the law, accounting, or security requires it.

Cloud records are protected by database access rules that restrict user data to the account that created it, and traffic is encrypted in transit. Private Toolkit content is additionally encrypted on your device with a key we never receive. No system is perfectly secure, and we cannot promise that any transmission or storage is impenetrable. If we learn of a breach affecting personal information, we will notify affected people and any regulator as required by Texas and other applicable law, without unreasonable delay.

If you are a Texas resident, state law may give you the right to confirm whether we process your personal data, obtain a copy, correct it, delete it, and opt out of targeted advertising, sale, or profiling. We do not conduct targeted advertising, sale of personal data, or profiling, so there is nothing to opt out of. To exercise any other right, email whiteowlrisingofficial@gmail.com with “Privacy request” in the subject. If we decline a request, you may reply to appeal, and we will respond in writing with our reasoning. We may need to verify that the request comes from you. We cannot fulfil a request for encrypted Toolkit content because we have no access to it.

White Owl Rising is operated from Texas for a mainly Texas audience. Our hosting, database, email, and error-reporting providers operate in the United States and may use infrastructure in other regions to deliver the service.

We update the Last Updated date when this policy changes. The original Effective Date remains shown unless a new effective date is expressly stated. For any privacy question or request, email whiteowlrisingofficial@gmail.com. See also our Terms of Use and Legal & Safety page.