Privacy Policy for DBT Pal

1. Introduction

DBT Pal ("the App", "we", "us", or "our") is developed and operated by Benjamin Fox in the United States. We respect your privacy and are committed to handling your data responsibly. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using DBT Pal, you agree to this Policy. If you do not agree, please discontinue use of the App.

2. Information We Collect

2.1 User-provided information

DBT Pal does not require an account or login. Any information you enter (e.g., diary entries, emotions/urges, skills usage, notes) remains private to your device and, if you turn on backup, your own Apple iCloud account (iOS) or Google Drive account (Android), except what you choose to send to the AI features described in section 2.4.

2.2 Automatically collected information

We collect limited, non-identifying technical information to improve stability and usability:

• Analytics events (e.g., feature usage, session data) to understand how the App is used.
• Crash & performance logs via Sentry to diagnose and fix issues.

We do not collect your diary content or personally identifying data via analytics or crash logging.

2.3 No sensitive health data processing

The App does not collect or process medical records or sensitive health data beyond the personal notes you choose to enter for your own use. DBT Pal is not a medical device and does not provide medical advice.

2.4 AI features

Some optional features send content to our AI service, which uses OpenAI to generate responses:

• AI Coach sends the messages in your current conversation each time you send one.
• Diary card context for the AI Coach is optional and off until you agree to it. If you allow it, each Coach message also includes the ratings you gave today and the skills you marked as used, so the Coach can take your day into account. It never includes your notes or your Suicidal Ideation rating. You can turn it off at any time in Settings under Share Diary With Coach.
• Check the Facts feedback sends the text you enter in that exercise.
• AI Weekly Insights sends summary statistics only (such as streak, skill counts and top emotions), not your diary text.

These requests are tied to an anonymous device identifier, not your name or an account. Apart from the optional diary card context above, your diary card entries are not sent unless you type them into one of these features. Your AI Coach history is stored on your device. Our AI service passes your text to OpenAI and does not keep a copy of it. It keeps only counters tied to the device identifier (how many requests it made today and how many free Coach messages it has used) and, for subscribers, a short-lived record that the subscription is active.

3. How We Use Information

• Operate, maintain, and improve App features and performance.
• Monitor usage trends to prioritize fixes and enhancements.
• Ensure reliability and debug crashes/performance issues.

We do not use your data for advertising, profiling, or tracking across other apps or websites.

4. Local, iCloud & Google Drive Data

Your diaries and notes are stored on your device. If you enable the optional backup, a copy of the App's database is stored in your own Apple iCloud account through iCloud Drive (iOS) or in your own Google Drive account (Android). We cannot access, read, or share your iCloud or Google Drive content. Backup to Google Drive is described in detail in section 5.

You may export entries as a PDF using your device's native share sheet and choose how and with whom to share that file.

5. Google User Data

On Android, the optional backup feature lets you sign in with your Google Account so DBT Pal can store and restore a backup of your diary in your own Google Drive. This section explains exactly what Google user data DBT Pal accesses and how it is handled. Using this feature is optional; the App works without signing in to Google.

5.1 Data we access

• Basic Google sign-in information (your email address and basic profile), used only to complete sign-in and show which account is connected. We use the standard openid, email and profile scopes.
• Google Drive application data, through the single Drive scope https://www.googleapis.com/auth/drive.appdata. This gives DBT Pal access to a hidden application-data folder that only DBT Pal can read and write. DBT Pal cannot see, list, open, or modify any of your other Google Drive files.

5.2 How we use it

We use this access for one purpose: to save a backup copy of your DBT Pal database (and a small index file listing your backups) to that hidden folder when you choose Backup, and to read the most recent backup back onto your device when you choose Restore. We do not use Google user data for advertising, analytics, profiling, or any other purpose, and we do not use it to train AI or machine-learning models.

5.3 Storage and protection

Google sign-in and Drive requests are made directly between your device and Google. The short-lived access token used to call Google Drive is requested from Google each time you back up or restore and is used only on your device. We do not send your Google account information, access tokens, or backup files to our servers, and we do not store them. Your backups are stored in your own Google Drive account and are protected by Google's security and your Google Account settings.

5.4 Sharing

We do not sell Google user data and we do not share, transfer, or disclose it to anyone. Because backups travel only between your device and your Google Drive, no one at DBT Pal, and no third party, has access to them, and no human reads them.

5.5 Retention, deletion and revoking access

Backups remain in your Google Drive until you remove them. You can stop DBT Pal's access at any time:

• Revoke access at myaccount.google.com/permissions. Then, in Google Drive under Settings → Manage apps, choose DBT Pal → Delete hidden app data to remove the backups from your Drive.
• Or contact us at support@dbtpal.app and we will help you with the steps.

5.6 Limited Use disclosure

DBT Pal's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6. Notifications

The App may send local notifications (e.g., daily reminders). These are generated on-device; no external servers are involved.

7. Payments & Subscriptions

Premium features are offered via in-app subscriptions managed by Apple (iOS) or Google Play (Android) and RevenueCat. Apple or Google processes payments. RevenueCat knows you by the same anonymous device identifier the App uses for the AI features, not your name or an account, and uses it to validate subscription status. Our AI service checks that status with RevenueCat when you use the AI Coach beyond the free messages. RevenueCat also sends subscription events (such as a trial starting or a renewal) to our analytics provider under that identifier. DBT Pal does not collect or store payment card data.

8. Data Sharing & Disclosure

We do not sell or rent your personal information. We may share limited information only:

• With service providers acting on our behalf (e.g., analytics, Sentry, RevenueCat, and Cloudflare, which hosts our AI service) under contracts restricting use to the services provided.
• With OpenAI, to generate responses for the AI features described in section 2.4.
• If required by law, regulation, or legal process.
• To protect our rights, users, or the public from harm or illegal activity.

We do not share your diary content beyond what you send to the AI features, including the optional diary card context.

9. Data Retention & Deletion

• Analytics & crash data: retained permanently in aggregated or pseudonymous form for trend and reliability analysis.
• Your content: stored under your control on-device and/or in your own iCloud or Google Drive account. Deleting the App removes your content from your device. Backups in iCloud or Google Drive remain in your account until you delete them (see section 5.5 for Google Drive).
• AI service counters: the daily request count expires at the end of each day (UTC). The free-message count is kept so the free allowance applies once per device. The subscription record expires after an hour.

We do not maintain user-identifiable backups on our own servers.

10. Children's Privacy

The App is intended for individuals aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe we have unintentionally collected such information, please contact us so we can delete it.

11. Your Rights & Choices

• Control your data locally (delete entries, delete the App, remove backups from iCloud Drive or Google Drive).
• Manage privacy settings (e.g., analytics sharing) in your device's system settings.
• Contact us with any privacy questions or requests.

For California residents: we do not "sell" or "share" personal information as defined by the CPRA.

12. Changes to This Policy

We may update this Policy from time to time. The "Effective date" above reflects the latest version. Continued use after changes constitutes acceptance.

13. Contact