Loading The Citadel
How we protect and handle your data
Last updated: July 10, 2026
The Citadel is designed with privacy as a core principle. We understand the sensitive nature of addiction recovery data, and we've built this application to minimize collection, require consent for optional processing, and keep you in control of deletion and sync.
Recovery data is stored in your browser by default. If you explicitly enable cross-device sync, a copy is also stored in your Supabase account so it can be restored on your other signed-in devices. This includes:
SOS history, seven-day practice progress, support windows, custom activities, and Focus Session state currently remain in this browser and are included only in a backup you explicitly export. Context entered for a resisted urge remains local; sync stores its goal, event type, and time but not that resisted-urge context.
Turning sync off stops future synchronization but keeps your local copy. You can reset individual recovery goals or delete your account data from Account.
We use Supabase for email/password and Google authentication. Account records include:
When sync is enabled, recovery records are linked to this user ID so row-level access controls can restrict them to your account.
We use Vercel web analytics to understand reliability and broad feature usage. Depending on Vercel's deployed settings, this may include:
We strip query parameters and fragments from analytics URLs, and we do not send relapse notes, triggers, source hostnames, or AI analysis text to Vercel Analytics.
Optional AI Analysis
AI analysis is off unless you opt in at the time you record a lapse. When enabled, the current lapse details, your note, recovery-goal type, and up to five recent lapse summaries are sent through OpenRouter to the configured DeepSeek model.
Provider policies can change, so avoid including names or other identifying details. You can use the complete lapse flow without AI.
Available data controls include:
Current security controls include:
We use the following third-party services:
The Citadel is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.
We may update this privacy policy from time to time. We will notify users of any material changes in the app and update the "Last updated" date at the top of this policy.
The Citadel is a self-help tool and is not a substitute for professional medical advice, diagnosis, or treatment. Always seek the advice of your physician or other qualified health provider with any questions you may have regarding a medical condition or addiction. If you may be in immediate danger, contact your local emergency service or crisis line now.
Use the Account page for export, reset, sync, and account controls. To report a privacy or product issue, use the official Citadel feedback channel.
By using The Citadel, you acknowledge that you have read, understood, and agree to this privacy policy and our medical disclaimer.