Harbord Privacy Policy
The Short Version
Harbord has no accounts and no server. Everything you write, record, or track in the App is stored on your own device and never sent to us. We do not sell your information, we do not share it with advertisers, and we do not have a copy of your journal, your voice recordings, your triggers, your contacts, or anything else you put into the App. We could not hand it over to anyone if we were asked, because we do not have it.
The only information that reaches anyone outside your device is what is needed to process a subscription purchase, and that goes to Apple, Google, and our billing tool, tied to an anonymous purchase identifier rather than to you or to anything you entered.
The rest of this policy explains that in detail, including the two places where data can leave your device without us being involved: your device maker's cloud backup, and anything you choose to send us by email.
1. Who We Are
Harbord is published by Miggy Studio LLC, an Oregon limited liability company. "We," "us," and "our" mean Miggy Studio LLC. You can reach us at support@getharbord.com.
This policy covers the Harbord mobile app and the website at getharbord.com. It does not cover our pages on Facebook, Instagram, TikTok, Discord, or LinkedIn, which are run by those companies under their own privacy policies, and it does not cover the outside organizations we link to.
2. What We Do Not Do
Because this is a recovery app, we want the negatives stated first and plainly:
- We do not require or offer an account, a login, an email address, or a password. There is no way to sign in, so there is no profile to build.
- We do not operate a server, a cloud database, or any other system that stores your content. There is no Firebase, no AWS, and no company-controlled storage.
- We do not sell your personal information or your health information, and we never have.
- We do not share your personal information or your health information with advertisers, ad networks, data brokers, analytics companies, or social media platforms.
- We do not embed advertising or social media tracking software in the App. There is no Meta SDK, no Meta pixel, no TikTok SDK, and no Google Analytics inside the App.
- We do not run ads inside the App.
- We do not monitor, review, or receive alerts about what you enter, including anything about cravings, use, or crisis.
- We do not send your content to any artificial intelligence service, and we do not use it to train, fine-tune, or test any AI model. No AI reads your journal, listens to your recordings, or analyzes anything you enter. Section 8A explains the separate question of how our own content was made.
3. Information That Stays on Your Device
The App stores the following on your device only, using your device's local storage. None of it is transmitted to us or to anyone else:
- Your recovery start date and any important dates you add.
- Your reasons for recovery, including anything you type and any voice recordings you make.
- Private journal entries and written reflections.
- Your trigger map and any custom coping tools you build.
- Daily check-ins, craving logs and craving intensity, milestone and reward data, and money-saved figures.
- Emergency contacts and support contacts you choose to add, including any names and phone numbers you type in.
- Your progress through the educational lessons and any reflections you write in them.
- Notification preferences, App Lock settings, your safety acknowledgment, and the sobriety commitment screen, including your name and any substance you enter there.
- Any backup file you create with the Backup and Restore feature, which is saved wherever you choose to save it.
If you delete the App, this information is deleted with it and cannot be recovered by you or by us.
4. Information We or Our Providers Actually Receive
There are a small number of places where information leaves your device. Here is all of them:
Subscription and purchase records. If you start a free trial or buy a subscription, the purchase is processed by Apple or Google through their in-app purchase systems, and we use RevenueCat to keep track of whether a given installation of the App has an active subscription. What is involved is an anonymous, randomly generated app user identifier, the product you bought, the purchase and renewal dates, whether the subscription is active, cancelled, or refunded, the store country, and basic device and platform information. It is not tied to your name, your email address, or anything you entered in the App. We can see aggregate subscription numbers. We cannot see who you are and we cannot connect a subscription to any of your content.
Store data from Apple and Google. Apple and Google collect their own information when you download, install, purchase, or review the App, under their own privacy policies. They give us aggregate and anonymized reports about downloads, sales, crashes, and reviews. If you have turned on sharing of analytics or crash data with Apple or Google at the device level, they may share crash and performance reports with us in that channel. We do not receive your name or contact information from either store.
Email you send us. If you email us for support, we receive your email address and whatever you choose to write. Please do not send us details about your health, your substance use, or your recovery. We do not need them and we would rather not hold them. We keep support email only as long as needed to handle the issue and to keep a record of it.
The website. Our website is a simple informational site. Our hosting provider records standard server log information, including IP address, browser type, referring page, and time of visit, for security and basic traffic counts. We also use Plausible Analytics to count visits and see which pages people read. Plausible does not place cookies on your device, does not store your IP address, does not build a profile of you, and does not follow you across other websites or over time. It reports daily totals, not information about any individual person, and it is not an advertising company. None of this reaches the App. Nothing you enter in Harbord is connected to a website visit, and visiting the website tells us nothing about any individual person's recovery.
5. Device Backups
This is the one place App data can leave your device without us being involved, and we want you to be clear on it.
Voice recordings are excluded. Your voice recordings are set so that your operating system does not include them in an iCloud or Google backup. They stay on the one device that made them and go nowhere else under any circumstance. The trade-off is that if you switch phones, your recordings do not come with you unless you move them yourself.
Other App data may be included. If you have turned on iCloud Backup on an Apple device or backup on an Android device, your operating system may copy the App's other local data, including journal entries and the things you have typed, into that backup. That is your own phone backing up to your own personal cloud account. It is not us transmitting anything. That backup is held and controlled by Apple or Google under their terms and their security, and we have no access to it and no ability to read it, delete it, or stop it.
If you do not want any of the App's data in a cloud backup, turn backup off for Harbord in your device settings. On iPhone this is in Settings, then your name, then iCloud, then Manage Account Storage or the list of apps using iCloud. On Android it is in Settings, then Google, then Backup.
6. Voice Recordings
The App asks for microphone permission only when you choose to record a message to yourself. You can decline, and every other part of the App still works.
Recordings are saved as files inside the App's own private storage on your device. They are not uploaded, not streamed, not transcribed, not analyzed, and not sent anywhere. No speech recognition or artificial intelligence is applied to them. You can play them back and delete them in the App, and deleting a recording deletes the underlying audio file, not just the reference to it. As described in Section 5, recordings are excluded from your device's cloud backup.
7. Notifications
If you allow notifications, the App schedules reminders locally on your device. We do not send push notifications from a server, and we do not receive a push token.
8. Advertising and Marketing
We may advertise Harbord on platforms such as Meta, TikTok, and Google to help people find the App. That advertising happens outside the App.
We do not put any advertising or tracking software inside the App. We do not build or upload custom audiences, lookalike audiences, or customer lists to any advertising platform. We do not send any signal to an advertising platform indicating that a specific person downloaded, opened, or paid for a recovery app. Where we measure whether an ad campaign worked, we rely on the privacy-preserving attribution provided by Apple and Google, which reports results in aggregate and does not identify individual users to us or to the advertising platform.
If we ever change this, we will update this policy before the change takes effect and, where consent is required, we will ask for it first.
8A. How Our Content Was Made
This is not a question about your data, but people ask it and we would rather answer it here than have you find out somewhere else.
The guided meditations and visualizations are narrated by a synthetic voice produced with text-to-speech software, not by a human narrator and not by a clone of any identifiable person. The written lessons are original material written by Harbord's founder, who holds a Master of Social Work degree. They are not AI-generated.
The narration was produced before the App was built and has nothing to do with your information. No user content is ever sent to any AI tool, and no AI tool has access to anything on your device.
9. Children
Harbord is for adults. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. The App does not have accounts and does not transmit user content, so there is no profile or record for us to collect in the first place. If you believe a minor is using the App, contact us at support@getharbord.com.
10. How Long Information Is Kept
Content on your device is kept until you delete it or delete the App. You control that entirely.
Subscription records held by Apple, Google, and RevenueCat are kept under their retention practices and for as long as needed for billing, tax, and dispute purposes. Support email is kept only as long as needed.
11. Security
We keep security simple and honest. Because we hold none of your content, there is no database of Harbord user information for anyone to breach.
On your device, the App's data is protected by your device's own encryption, which on modern iPhones and Android devices is active when you have a passcode or biometric lock set. The App also offers an App Lock that requires a passcode or biometric check to open it. We strongly recommend using both.
We do not claim that the App applies its own separate layer of encryption on top of your device's. No system is perfectly secure, and anyone who can unlock your device may be able to see what is in the App.
12. Your Privacy Rights
Depending on where you live, you may have the right to know what personal information a business holds about you, to get a copy of it, to correct it, to delete it, to opt out of its sale or of targeted advertising or profiling, and not to be discriminated against for exercising those rights.
You can exercise those rights by emailing support@getharbord.com. Because we hold no accounts and no user content, our honest answer to most access and deletion requests is that we hold nothing about you. Where we can locate a record, such as a support email you sent us, we will act on it. We will not sell your information or use it for targeted advertising, so there is nothing to opt out of. If you want your Harbord content deleted, delete it in the App or delete the App, and it is gone.
If we deny a request, you may appeal by replying to our decision. We will respond to an appeal within the time your state's law requires and tell you how to complain to your state attorney general.
13. Consumer Health Data
Some states, including Washington, Nevada, and Connecticut, treat information that could reveal a person's physical or mental health status, including information about substance use, as a special category of consumer health data with its own rules. This section applies to that information and gives Washington residents the notice their law requires.
What consumer health data the App involves
The App is built so that consumer health data, including anything reflecting substance use, cravings, recovery status, mental or emotional state, or treatment, stays on your device and is never collected by us. The categories listed in Section 3 above cover all of it.
What we collect
We do not collect consumer health data. We do not have a copy of your journal, your recordings, your craving logs, your triggers, or your recovery dates.
The one thing we can infer is that a device with an active Harbord subscription belongs to someone with an interest in recovery from substance use. We treat that inference as consumer health data and hold it to the same rules: it stays with the subscription record described in Section 4, it is tied to an anonymous identifier and not to your identity, and it is used only to deliver and support what you paid for.
How it is used and shared
We use it only to confirm your subscription status and to provide, support, and troubleshoot the App. We share it only with Apple, Google, and RevenueCat, which act as our service providers for billing and receive it only for that purpose. We do not share consumer health data with advertisers, ad platforms, data brokers, or any other third party.
We do not sell consumer health data
We do not sell consumer health data and we will not. We have never sought or obtained an authorization to sell it, because we do not do it.
Your rights in consumer health data
If you are a Washington, Nevada, or Connecticut resident, you have the right to confirm whether we collect, share, or sell your consumer health data, to get a list of the third parties it was shared with, to withdraw consent to its collection and sharing, and to have it deleted. To exercise any of these, email support@getharbord.com with the subject line "Consumer Health Data Request."
A deletion request will be honored, and we will pass it to our service providers. In most cases our response will be that we hold no consumer health data about you. We will say so in writing. If we deny a request, we will tell you why and how to appeal, and how to complain to your state attorney general.
Who inside our business can access it
Only Miggy Studio LLC, and any contractor working under written instructions for billing or support, has access to subscription records. Nobody has access to the content on your device, because that access does not exist.
14. Do Not Sell or Share; Global Privacy Control
We do not sell personal information, we do not share it for cross-context behavioral advertising, and we do not process it for targeted advertising or profiling. Because there is nothing to opt out of, we do not maintain a "Do Not Sell or Share My Personal Information" mechanism inside the App. We honor an opt-out preference signal such as Global Privacy Control on our website where the law requires it.
15. Users Outside the United States
The App is intended for users in the United States and is hosted and operated from the United States. If you use it from elsewhere, you understand that the limited information described in Section 4 is processed in the United States.
16. Changes to This Policy
If we change this policy in a way that materially affects you, we will post the updated policy with a new "Last Updated" date and give notice in the App before the change takes effect. Where the law requires consent for a change affecting consumer health data, we will ask for it before the change applies to data already collected.
17. Contact Us
Miggy Studio LLC