All Ways Connect Privacy Policy

Last updated: October 29, 2026

All Ways Connect ("All Ways Connect," "AWC," "we," "us," or "our") provides the All Ways Connect mobile app, the All Ways Connect website at allwaysconnect.org, and the All Ways Connect CRM used by recovery programs, recovery houses and their staff (together, the "Service"). This policy explains what information we collect, how we use and share it, and how we protect it. Programs that use the Service may also have their own policy, which you can see at allwaysconnect.org/privacy through the link your program gives you.

Information We Collect

• Account information: name, email address, phone number, date of birth and recovery date when an account is created.
• Program records: information your program's staff keep in the Service, such as admissions, coaching sessions, meeting attendance, reports, documents and billing records.
• Health and recovery information you choose to enter, such as check-ins, journal entries and milestones. This can include sensitive health information.
• Location: only with your permission. The app uses it for meeting and recovery center check-ins and, where your program uses geofencing, to note when you arrive at or leave locations your program has set up (such as your house, chosen meetings and other program locations), including when the app is closed. Only those arrivals and departures are sent. Location is never sold or used for advertising.
• Device information: device type, operating system and push notification tokens.
• Usage information: how the Service is used, such as pages and features opened and when.
• Files and photos you or your program upload.
• Google user data when you connect a Google account. See Google User Data below.

How We Use Information

• To provide, maintain and secure the Service.
• To connect you with your program, house, coach and support resources.
• To send notifications, reminders and messages you or your program request.
• To produce the reports programs need for their participants, funders and regulators.
• To provide AI-assisted features, such as drafting text and summarizing program records. These never use Google user data.

We do not sell personal information, and we do not use it for advertising.

Data Sharing

• Your program: the staff of the program you belong to see the records the program keeps about you. Each program's records are kept separate from every other program's.
• Service providers that run parts of the Service for us, under their own data protection terms: Google Cloud and Firebase (hosting, database, storage, sign-in), OpenAI (AI-assisted features), Twilio (text messages and calls), and Intuit QuickBooks (billing, only for programs that connect it).
• Legal reasons: when required by law or to protect the safety of people using the Service.

SMS Text Messaging

When you opt in to receive text messages from the recovery program you engaged with (through the All Ways Connect platform), we use your mobile phone number to send service-related messages such as appointment and meeting reminders, account and status notifications, schedule updates, and two-way support messages with your organization's staff.

No mobile information, including your phone number and your SMS opt-in or consent, will be shared with or sold to third parties, affiliates, or lead generators for marketing or promotional purposes at any time. We share your number only with our messaging provider strictly to deliver the messages you requested.

Text messaging originator opt-in data and consent are excluded from every data-sharing category described in the "Data Sharing" section above; this information will not be shared with any third parties. SMS opt-in and consent are never shared with or sold to anyone under any circumstances.

All phone numbers used for text messaging are collected directly from individuals through our own forms. We do not purchase, rent, or use third-party phone number lists, and consent to receive messages is never a condition of any purchase or service.

Message frequency varies. Message and data rates may apply. Reply HELP for help, or STOP to unsubscribe at any time. For our SMS Terms, see our Terms of Service.

Google User Data

This section explains how AWC handles information it receives when you, or your organization's staff, connect a Google account to AWC.

Data We Access

• Your Google account email address (userinfo.email), to identify which Google account is connected.
• Permission to send email from your Gmail account (gmail.send). This permission only lets AWC send messages. AWC cannot read, search, or delete your inbox.
• Permission to create and edit events on your Google Calendar (calendar.events), used for scheduling coaching sessions, meetings, and appointments. AWC reads your calendar events only to show your schedule inside AWC and to keep the events AWC created up to date when they are changed or cancelled in Google Calendar.

How We Use It

• Only to send emails and to create, update, and show calendar events that you or your organization's staff initiate within AWC.
• Never for advertising, marketing profiles, credit or lending decisions, or any purpose unrelated to these user-facing features.
• People at AWC do not read your Google data unless you ask us to (for example, for support), it is needed for security, or the law requires it.

Sharing

• We do not sell Google user data.
• We do not share it with third parties except service providers needed to operate AWC (Google Cloud and Firebase hosting), as required by law, or with your consent.
• Google user data is not transferred to advertisers or data brokers.

AI and Machine Learning

• AWC's AI features do not process Google user data.
• Google user data is not used to develop, improve, or train generalized AI or machine learning models.
• Google user data is not transferred to third-party AI services, including services that would use it to train their models.

Data Protection

• Google user data is encrypted in transit (TLS) and at rest.
• OAuth tokens are encrypted with AES-256-GCM and stored in Google Cloud Firestore, where they can be read only by AWC's servers, never by the app or website.
• Access is limited to authorized personnel, and data is kept separate for each organization.

Retention and Deletion

• We keep OAuth tokens only while your Google account is connected to AWC.
• AWC does not copy or store anything from your Gmail mailbox. A message sent through AWC is kept with your organization's records in AWC, the same as any other message sent from AWC.
• You can revoke access at any time at https://myaccount.google.com/permissions, or by disconnecting Google in AWC settings. Disconnecting in AWC deletes the stored tokens. Revoking access in your Google Account stops them working at once.
• To request deletion of your Google user data, email info@allwaysconnect.org or use our contact form. We will respond within 30 days.

Limited Use

AWC's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Permitted Use

• AWC sends only transactional and operational messages to existing residents, staff, and partners. AWC is not used for cold email, bulk marketing, or email warming.

Security

The Service runs on Google Cloud and Firebase. Information is encrypted in transit (HTTPS/TLS) and at rest, access is limited to authorized people, and every program's records are kept separate. No system is perfectly secure, but we work to protect your information and fix problems quickly.

Retention

We keep information while an account is active or as long as a program needs it to provide its services and meet its record-keeping duties. When an account is deleted, we delete or anonymize its personal information within 30 days, unless the law requires us to keep it.

Your Choices and Rights

• Ask for a copy of your information, or ask us to correct or delete it.
• Delete your account in the app (Profile, then Delete Account) or at allwaysconnect.org/delete-account.html.
• Turn off notifications and location in your device settings at any time.
• California residents have the rights the CCPA gives them, including to know, delete and not be discriminated against. We do not sell personal information.

Children

The Service is not meant for anyone under 18, and we do not knowingly collect information from children under 18.

Changes

We will post any change to this policy on this page and update the date at the top. For a significant change we will also tell you in the app.

Contact Us

• Email: info@allwaysconnect.org
• Contact form: allwaysconnect.org/contact
• Website: allwaysconnect.org