Just For Today Privacy Policy

Effective July 28, 2026 · Version 1.0.1

Just For Today is made by Prime Logic Labs LLC, a Virginia limited liability company. Privacy isn't a feature we bolted on — recovery is private by nature, and we built the app around that. This policy is short on purpose. There are no tricks hiding in length we didn't write.

One thing up front: most of what makes Just For Today useful — your sobriety date, check-ins, journal, slip events — is consumer health data, and it gets its own stronger, standalone policy: the Just For Today Consumer Health Data Privacy Policy. Where the two overlap, the health policy's protections win. This general policy covers everything else.

1. What we collect

Account basics: email address, chosen handle (which can be anonymous — we encourage it), password-free login codes, timezone, and your date of birth only to verify you're 18+ (we store the verification result, not a running profile of your age).
Things you create: milestones, photos (we strip location/EXIF metadata from photos by default), albums, community posts and messages, and story submissions. What's health data among these is governed by the health policy.
How the app is used: product analytics (screens viewed, features used, crashes) collected with self-hosted analytics running on our own servers — this data never goes to a third-party analytics company.
Technical records: IP address, device/browser type, and timestamps in server logs and in our legal-acceptance ledger (so we can prove which document versions you agreed to).
Payments: handled by Apple, Google, or our payment processor. We receive subscription status, never your card number.

We do not collect your contacts, your precise location in the background, or anything from data brokers.

2. What we use it for

To run the app you signed up for — and nothing stranger than that:

Providing the Service: accounts, sync, timelines, streaks, share cards you ask us to render.
Keeping the Service safe: rate limiting, abuse and spam prevention, moderation of reported content.
Understanding what's working: aggregate, self-hosted analytics so we can improve features.
Talking to you: login codes, service notices, and — only if you opt in — reminder and encouragement notifications, which you can turn off anytime.
Meeting legal obligations, including keeping records of consent.

3. What we never do

We never sell your personal data. Not to advertisers, not to data brokers, not "share for value" under any label.
We never use third-party advertising SDKs or trackers in our apps. There are no ad pixels, no social-media trackers, no embedded ad networks.
We never send your analytics to third-party platforms — analytics are self-hosted.
We never use your private content to advertise to you or anyone else.

4. Who we share with

Service providers (processors) who host and run infrastructure for us (cloud hosting, email delivery for login codes, push-notification delivery) — under contracts that limit them to working for us. The current list appears in the Health Data Privacy Policy and applies here too.
Other users, only per the visibility you choose (Private / Community / Public). Private means private.
Authorities, only if legally compelled by valid process, and we will push back on overbroad demands.
A successor, if Prime Logic Labs is acquired or merged — in which case this policy still binds the data, and we'll notify you before any material change in practice.

That's the whole list. No advertisers, no partners "to enhance your experience."

5. Your rights — for everyone, not just some states

Regardless of which state you live in, you can, at any time, in Settings or by email:

Export a complete copy of your data in a portable format.
Correct your information.
Delete your account and data — a real, hard delete, not a deactivation. Deletion timelines, including backups, are spelled out in the Health Data Privacy Policy and apply to all your data.
Opt out of non-essential notifications.

We don't discriminate against you for exercising any right. If we ever deny a request (for example, a legal retention duty), we'll tell you why and how to appeal.

6. Security and retention

Data is encrypted in transit and at rest, access inside the company is limited and logged, and uploads go through signed, time-limited URLs. We keep data only while your account is active or as needed for the limited legal records described above (like the acceptance ledger), then delete it on the schedule in the Health Data Privacy Policy. No system is perfectly secure — anyone who promises that is selling something — but if a breach affects you, we will notify you as the law requires, and plainly.

7. Children

Just For Today is for adults 18 and over. We don't knowingly collect data from anyone under 18; if we learn we have, we delete the account and its data.

8. Where we operate

Just For Today serves users in the United States and stores data on servers in the United States. We do not offer the Service in the EU, EEA, or UK at launch.

9. Changes

If we change this policy, we'll give you advance notice in the app or by email, and for material changes we'll ask you to review before they apply to you. Every version is archived and viewable.

Questions? legal@primelogiclabs.example

Just For Today Privacy Policy — version 1.0.1 — effective 2026-07-28