Privacy Policy

• Account information: your email address and authentication details. If you choose to sign in with Google, we receive the standard sign-in information Google provides.
• Onboarding and health-related information you provide: your daily routine, the habits you want to reduce (including substances), your triggers, your goals, and — if you choose to share it — mental health information. This is sensitive personal information.
• Journal entries you write, and conversations you have with the in-app coach.
• Location, only if you choose to allow it, to suggest nearby places. We request location through your browser, and you can decline.
• Usage data, such as your check-ins, taper progress, and timestamps.
• Analytics and diagnostic data. Our hosting platform (Lovable) collects usage and performance data about how the app is used, including the pages you visit, referral source, an anonymous session identifier, browser performance metrics, IP address, browser type, and timestamps. This may include session-replay recordings of a sample of sessions and of sessions that experience errors. We do not attach your account identity to this analytics data.
• Cookies and local storage. We use first-party cookies and browser storage to keep you signed in, remember your preferences, and autosave your in-progress entries (for example, saving a journal draft so a refresh doesn't lose it). Our analytics provider uses an anonymous session identifier. We do not use third-party advertising cookies.
• Technical data logged by our hosting infrastructure, such as IP address, browser type, and request information, as is standard for operating a secure website.
• When you load the app, Google Fonts may receive your IP address in order to serve fonts.

We use your information to create and adapt your personalized plan, suggest activities and places, track your progress, and operate and improve the service. We do not sell your personal information.

To provide the service, we share certain information with service providers that process it on our behalf, including:

• Lovable (our hosting and backend platform) and Supabase (our database and authentication provider), to host the app and securely store your account and the information you enter. Lovable also provides the analytics, diagnostic, and session-replay tools described in Section 1.
• Cloudflare, which provides content delivery and security for our website and processes standard request data such as IP addresses.
• Lovable's AI Gateway, to generate and adapt your plan and to power the in-app coach. When you use the coach, the messages you send — and journal context, only if you choose to include it — are processed to generate a response.
• Google, only if you choose to sign in with Google, which receives standard sign-in information; and Google Fonts, which may receive your IP address when the app loads.

We do not currently process payments in the app. If we add payments in the future, we will use a third-party payment processor and update this policy.

We use reasonable technical and organizational measures, including encryption, to protect your information. Access to the information you provide is limited to authorized personnel and only as needed to operate and support the service. No system is completely secure, and we cannot guarantee absolute security.

You can access, update, or delete your information, including deleting your account and your data, at any time. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA/CPRA.

We retain your information for as long as your account is active or as needed to provide the service, and we delete it within 30 days of account deletion, except where we must retain it to comply with law.

iCram is for adults 18 and older. We do not knowingly collect information from anyone under 18. If we learn we have, we will delete it.

We may update this policy and will post the updated version with a new "last updated" date.

Privacy questions or requests: support@icram.com