What this policy covers
This policy explains how The FASTER Scale App (“FASTER Scale”, “we”, “us”) handles your information. It applies to this website (fasterscale.app), the web app at my.fasterscale.app, and the FASTER Scale apps for iPhone and Android.
This website has no accounts, sets no cookies, and runs no analytics or advertising scripts. The demo check-in on the home page runs entirely in your browser and saves nothing.
The recovery information you enter in the app is sensitive, and we treat it that way. The rule the app is built around is simple: nothing you write is shared until you share it, and nobody outside the people you share with gets to see it.
What we collect
Your account
Your username, your email address, and — if you choose to add them — your first and last name. Sign-in is handled by Clerk, our identity provider, which stores your password (hashed, so we never see it) and your sign-in sessions. We also store your notification preferences and whether you have finished onboarding.
Your recovery data — what you enter in a check-in
The FASTER stages and behaviours you select and how intense they were, plus any behaviours you add yourself; your reflection (how you are feeling and what triggered you); your self-evaluation answers; your Take Action plan, including the name of the person you chose to be accountable to; and when you shared and completed each check-in.
Our server also calculates a risk signal from each check-in — for example whether a relapse or crisis behaviour was selected, and how long it has been since your last check-in. That signal is used only to decide when to show you crisis resources and when to alert your leaders. It is never displayed to anyone and never leaves our systems.
Group content
Messages and reactions you post in group chat, comments you leave on check-ins, and (on the web) prayer requests you post. These are stored with your name so the group can see who said what.
Program and organization details
If you administer a residential recovery program or an organization, we store its name, description, logo, contact email and phone, address and website, and — for programs — the verification details you submit (company email domain, website, EIN and proof of nonprofit status).
Usage
When you were last active, when you last checked in, and when you last posted in a group. These feed the risk signal above and the “needs attention” view your leaders see. Like any web service, our servers keep short-lived request logs that include your IP address, app version and device type.
Billing
If you subscribe, Stripe handles your payment on the web. We store your Stripe customer and subscription identifiers, your plan, its status and its renewal date. We never see or store your card number.
Support and feedback
Feedback you send from inside the app (with your browser or device details), and any email you send to support.
Email delivery records
Which notification emails we sent you, when, and their subject lines — so we never send the same alert twice.
What we do not collect
Your location, contacts, photos, files, calendar, microphone, or any advertising identifier. The mobile apps ask for no permissions beyond internet access and haptic feedback. No analytics, crash-reporting or advertising SDK is included in the apps or in the web app.
Why we use it
- To run your daily check-in, your history and your trends.
- To surface crisis resources and alert your leaders when a check-in suggests you may be at risk.
- To run groups, group chat, and the dashboards programs and organizations use.
- To send you the notifications you have asked for. Every group notification email has an unsubscribe link, and reminders can be turned off in your settings.
- To bill subscriptions and answer support requests.
- To keep the service secure, prevent abuse, and meet our legal obligations.
We do not use your information to build advertising profiles, and we make no automated decisions about you that have legal or similarly significant effects.
Who can see your information
You
Everything you enter is visible to you. Drafts and check-ins you have not shared are visible only to you.
The groups you share with
When you share a check-in with a group, that group’s leaders and members can see it: the behaviours you selected, your reflection, your Take Action plan, and any self-evaluation answers you have not marked private. Answers you mark private are never shown to anyone else. Group chat is visible to everyone in that group. Groups are invitation-only; there is no public feed.
Leaders and program staff, when you may be at risk
If a shared check-in includes a relapse or crisis behaviour, your group leaders receive an email saying that a member of the group needs attention. That email never contains your name or anything you wrote — the leader signs in to see the check-in. If a program enrolled you, its staff can be alerted the same way and can see your check-in cadence on their dashboard. In groups a program has marked private, staff who do not manage your group see you only as an anonymised member number.
The person you name in Take Action
The name you enter is saved on that check-in and is visible to anyone who can see the check-in. We do not contact that person ourselves.
Summaries you send
You can email a summary of one of your check-ins to yourself or to an address you type in. It goes only where you send it.
Our team
A small number of our staff can access production data to run the service, fix problems and answer your support requests. That access is limited to what running the service and supporting you requires, and we do not browse your check-ins.
Service providers
The companies listed below process data for us under contract, only on our instructions. They may not use it for their own purposes.
Legal requirements and safety
We will disclose information if valid legal process requires it, or where we believe in good faith that it is necessary to prevent imminent harm to someone’s life or safety. We will tell you when we are allowed to.
What we never do
- Sell or rent your data.
- Show ads, or share anything with advertisers or data brokers.
- Share your health or recovery information with any third party for any purpose other than running the service for you, as described on this page.
- Let a third-party SDK collect your check-ins, reflections or messages. None is installed.
- Track you across other apps or websites.
Service providers we use
Each of these processes data only to provide its service to us.
- Clerk
- Sign-in and account security. Holds your email, username, hashed password and sign-in sessions, and shows you an approximate location for each session, derived from its network connection.
- Stripe
- Payments and subscriptions, on the web. Receives your email and payment details; we receive only identifiers and subscription status.
- Resend
- Sends our emails. Receives your email address and the content of each email. Alert emails contain no check-in content.
- LaunchDarkly
- Turns features on and off. Our server sends it an internal account identifier — never your email, check-ins or messages. The web app’s browser session uses an anonymous key.
- Microsoft Azure
- Hosts the application, in the East US 2 region (United States).
- Database
- Our database provider, hosted in Microsoft Azure.
How we protect it
All traffic between your device and our servers is encrypted in transit with TLS (HTTPS); the apps refuse unencrypted connections. Your data is encrypted at rest on our servers and in our database.
This is not end-to-end encryption. End-to-end encryption would mean nobody but you could ever read your data. The point of FASTER Scale is that the leaders and group members you choose can read what you share, and our staff must be able to run the service. So we protect your data with access controls, encryption in transit and at rest, and the sharing rules above — not with a claim we could not keep.
Passwords are handled by Clerk and are never visible to us. If you think someone else has used your account, change your password from the sign-in page and email us. Deactivating your account signs you out of every device.
No system is perfectly secure. If you find a security problem, please tell us at support@fasterscale.app.
How long we keep your data, and how to delete it
We keep your data for as long as your account is open. You are in control of it:
- Delete a check-in. You can delete any check-in from your history at any time.
- Leave a group. You can leave any group at any time. Messages and comments you already posted stay visible to that group.
- Deactivate (take a break). You disappear from your groups, leaders’ views and chats immediately and are signed out everywhere. Nothing is deleted. Sign in again whenever you want to come back.
- Delete permanently. In the app under Settings → Account → Delete account, or on the web at my.fasterscale.app/account. Your sign-in is revoked immediately, you are removed from every group and roster, and your name is removed from messages you posted. After 30 days we erase your check-ins, profile, memberships, invitations, feedback and email records, and replace the text of your messages, comments and prayer requests with “[deleted]” so other people’s conversations still make sense. A minimal record of the deletion itself (an account identifier, the date and the action) stays in our audit log.
The 30-day window exists so a deletion made by mistake or under pressure can still be investigated — email us within that time if you need help. Deleting your account does not by itself cancel a paid subscription; cancel it under Account → Subscription first so you are not billed again. If you cannot sign in, you can request deletion by email — see Delete your account.
Your choices and rights
- Share less. Nothing is shared until you share it, and you can mark individual self-evaluation answers private.
- Control email. Use the unsubscribe link in any group notification, or change your notification and reminder settings in the app.
- Correct your details. You can change your name in the app. To change your email address or username, contact support.
- Get a copy. Email us from the address on your account and we will provide a copy of the data we hold about you.
- Delete. Delete individual check-ins, deactivate, or delete your account, as described above.
Depending on where you live, you may have additional legal rights over your data — for example to access, correct, delete or port it, or to object to certain uses. Email us at support@fasterscale.app and we will honour them.
Children and teens
FASTER Scale is not directed to children under 13, and we do not knowingly collect information from them. If you believe a child under 13 has created an account, email us and we will delete it.
People aged 13 to 17 may use FASTER Scale only when a residential recovery program or organization responsible for their care has enrolled them and supervises their use. That program’s staff are the leaders who see what they share.
Not medical advice
This app is not a medical device and does not diagnose, treat, cure, or prevent any medical condition. It is a self-monitoring tool for use alongside, not instead of, professional care. If you are in crisis, call or text 988 (US) or your local emergency number.
Changes to this policy
When we change this policy we update the date at the top of this page. If a change materially reduces your privacy, we will tell you by email or in the app before it takes effect.
Contact
Questions about privacy, or a request about your data: email support@fasterscale.app. You can also visit our support page.