Privacy Policy

1. Who we are

This app (the “Companion”, the “Coaching Portal”) is operated by Bill Gasiamis, Recovery After Stroke (“we”, “us”, “our”). It provides an AI-powered peer-support companion and, for coaching clients, a private coaching dashboard.

For any privacy question or request, contact us at support@recoveryafterstroke.com.

2. What this policy covers

This policy covers the Companion app and Coaching Portal at companion.recoveryafterstroke.com and coaching.recoveryafterstroke.com. Our main website has its own privacy policy; where the two overlap, this policy governs your use of the app.

3. The information we collect

Account information — your name and email address, provided when you are given access (via Patreon, a coaching purchase, or a direct invitation from us).

Authentication data — a securely hashed password and login session information. We never see or store your password in readable form.

Your conversations with the AI — the questions you ask the Companion and the answers it gives. We do not currently store your chat conversations on our servers. Conversations exist only in your browser during a session and are lost when you close or refresh the page. If we introduce a feature to save conversation history in future, we will update this policy and tell you before doing so.

Coaching information (coaching clients only) — notes you write to your coach, notes your coach writes about your sessions, and your coaching call schedule.

Membership and payment status — whether your membership is active, your plan type, and your subscription amount. We do not collect or store your card or bank details — payments are handled entirely by Patreon and ThriveCart.

Technical data — basic technical information such as your IP address, used only to keep the service secure and prevent abuse.

4. Sensitive / health-related information

Because this app supports stroke recovery, the questions you ask and the notes you or your coach write may reveal information about your health. Under the Australian Privacy Act this is “sensitive information”, and under GDPR it is a “special category” of personal data, both of which receive extra protection.

By using the app to discuss your recovery, you consent to us processing this information for the sole purpose of providing you support. You can withdraw this consent at any time by asking us to close your account (see section 8).

5. How we use your information

We use your information only to:

• Give you access to the app and keep you signed in;
• Generate AI responses to your questions;
• Provide coaching services (for coaching clients);
• Send you essential service emails (your login details, coaching notifications);
• Keep the service secure and prevent misuse.

We do not sell your information, and we do not use your conversations to advertise to you.

6. Who we share information with

We use a small number of trusted service providers to run the app. Each receives only the minimum information needed to do its job:

Your questions are sent to Anthropic and OpenAI to generate answers. These providers process the text to return a response and do not use it to train their models on your data under our business terms. We never send them your name or email alongside your questions.

7. Where your data is stored and international transfers

Your account and app data are stored in Australia (Supabase, AWS Sydney region). Some of our providers (for example the AI services and email tools) process data on servers in the United States. Where data leaves your country, we rely on the providers' standard contractual protections to keep it safe.

8. How long we keep your data, and your right to deletion

We keep your account and coaching data for as long as your account is active.

You can ask us at any time to:

• See a copy of the personal information we hold about you;
• Correct anything that is wrong;
• Delete your account and associated data.

To make any of these requests, email support@recoveryafterstroke.com. We will respond within 30 days. When you ask us to delete your account, we remove your personal data from our systems, except anything we are legally required to keep (for example, basic payment records for tax purposes).

9. Data security

We protect your data with industry-standard measures: encrypted connections, hashed passwords, row-level database security so users can only access their own data, and strict access controls on our systems. No system is perfectly secure, but we take reasonable steps to protect your information and review our security regularly.

10. Children

This app is not intended for people under 18, and we do not knowingly collect information from children.

11. Changes to this policy

If we make significant changes — particularly if we ever begin storing your conversation history — we will notify you by email and update the date at the top of this policy.

12. Complaints

If you are unhappy with how we have handled your information, please contact us first at support@recoveryafterstroke.com. You also have the right to complain to a data protection regulator:

• Australia — Office of the Australian Information Commissioner (oaic.gov.au)
• UK — Information Commissioner's Office (ico.org.uk)
• EU — your national data protection authority