Privacy Policy & Terms of Service

1. Your Privacy Matters

At Sobriety.zone ("we," "our," or "the Platform"), we are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our website and services.

2. Information We Collect

We may collect the following information:

• Personal Information: Name, email address, sobriety dates, and any other details you provide voluntarily in your profile.
• Usage Data: IP addresses, browser type, device information, and pages visited (for analytics and security purposes).

Sensitive Data: Some information you choose to share with us — such as sobriety dates or milestones in your profile — may be considered sensitive personal data (including data relating to health or substance use recovery) under applicable data protection laws such as the GDPR. By voluntarily providing this information, you give your explicit consent for us to process it for the purposes described in this Policy. Providing this information is always optional: you are never required to share it to use the Platform's core features, and you may edit or delete it at any time through your account settings.

3. How We Use Your Data

Your data is used solely to:

• Provide and improve our services (e.g., tracking sobriety progress)
• Communicate with you (e.g., sending encouragement messages or service updates)
• Ensure security and prevent abuse
• Comply with legal obligations

We do not sell, rent, or share your personal data with third parties, except as required by law (e.g., court orders) or to protect the rights, safety, or security of our users or Platform.

4. Data Protection & Security

We implement industry-standard security practices to protect your data, including:

• Encryption for data in transit (HTTPS/SSL)
• Secure password hashing (bcrypt)
• Access controls to limit who can view or process your information
• Regular security monitoring and updates

5. Data Breach Notification

If we become aware of a security incident that compromises your personal data, we will:

• Take reasonable steps to promptly investigate, contain, and remediate the incident
• Notify the relevant supervisory authority (e.g., the Icelandic Data Protection Authority, Persónuvernd) without undue delay, and within 72 hours where feasible, as required under the GDPR and applicable Icelandic data protection law
• Notify affected users without undue delay where the breach is likely to result in a high risk to their rights and freedoms, describing the nature of the breach, its likely consequences, and the steps taken or planned in response

Notifications to users will be sent to the email address associated with your account, or posted as a prominent notice on the Platform if contact information is unavailable. This notification commitment reflects our legal obligations and does not expand our liability beyond the limitations set out in Section 13 (Disclaimer of Liability & Limitation of Liability).

6. Sharing Your Information

• We do not sell or trade your data to third parties for marketing purposes.
• Trusted Service Providers: We may use third-party tools (e.g., hosting, email delivery, analytics) that comply with strict confidentiality agreements. These providers only access data necessary to perform their specific functions.
• Legal Compliance: We may disclose data if required by law, court order, or to protect our rights, safety, or those of others.

7. User Responsibilities & Risks

8. Age Requirement & Eligibility

Sobriety.zone is intended for use only by individuals who are at least 18 years old. By creating an account or otherwise using the Platform, you represent and warrant that you are 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If we become aware that a user is under 18, we will terminate the associated account and delete their personal data. If you are a parent or guardian and believe a minor has provided us with personal data, please contact us immediately so we can remove it.

9. Your Rights

Depending on your location, you may have the right to:

• Access, correct, or delete your personal data
• Opt out of email communications
• Request a copy of your data
• Request restriction or object to processing of your data
• Data portability (receive your data in a structured format)

To exercise these rights, please contact us at [email protected]

10. Data Retention

We retain your data only as long as necessary to provide services or comply with legal obligations. You can delete your account at any time through your profile settings, which will remove your personal data (except where retention is required by law for legal, accounting, or security purposes).

11. Cookies & Tracking

We use cookies and similar technologies to improve your experience, analyze usage, and maintain security. You can control cookie preferences through your browser settings. Disabling cookies may limit some functionality of the Platform.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or a prominent notice on our website. Your continued use of the Platform after changes constitutes acceptance of the updated policy.

13. Disclaimer of Liability & Limitation of Liability

14. Crisis Resources

15. Governing Law & Dispute Resolution

This Privacy Policy and Terms of Service shall be governed by and construed in accordance with the laws of Iceland, without regard to conflict of law principles.

Arbitration Agreement: Any dispute, claim, or controversy arising out of or relating to this Privacy Policy, the Terms of Service, or your use of the Platform shall be resolved through binding, individual arbitration or, where arbitration is unavailable or unenforceable under applicable law, exclusively in the competent courts of Iceland. You and Sobriety.zone each consent to the personal jurisdiction of that forum.

Class Action Waiver: To the fullest extent permitted by applicable law, you and Sobriety.zone agree that any dispute resolution proceedings will be conducted only on an individual basis and not as a class, consolidated, or representative action. YOU AND SOBRIETY.ZONE EACH WAIVE ANY RIGHT TO PARTICIPATE IN A CLASS ACTION LAWSUIT OR CLASS-WIDE ARBITRATION. If a court or arbitrator determines this class action waiver is unenforceable as to a particular claim, that claim will proceed in a court of competent jurisdiction and all other claims will remain subject to individual arbitration or litigation.

Nothing in this section limits any non-waivable statutory rights you may have as a consumer or data subject under the mandatory laws of your country of residence, including applicable EU/EEA data protection and consumer protection law.

16. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or your data: