Last updated: October 15, 2026
Your recovery work is private. We collect only what the apps need to save your entries to your account, we never sell your data or show ads, and we don’t track you across other apps or websites. This policy covers the My Spiritual Toolkit and My OA Toolkit apps on iPhone, iPad and Android, and the toolkit website at secure.myspiritualtoolkit.com. Both are run by LOOK BEFORE YOU LEAP NET, LLC.
What we collect
We collect your email address, the entries you write, and a few details needed to run your account. We never ask for your name, phone number, location, contacts or photos. You can sign up with any email address, including one that doesn’t show your name.
| What | Why we need it | Where it’s kept |
|---|---|---|
| Email address | To sign you in, reset your password, and send account emails. | Our database |
| Password | To sign you in. It is stored scrambled (hashed), so we can’t read it. | Our database |
| Your entries: journals, gratitude lists, nightly inventories and spot checks | To save your work so it’s there on every device and on the website. Your entries are encrypted before they’re stored in our database, and they’re decrypted only to show them to you or if you ask us to look at a specific entry for you. | Our database, encrypted |
| Sobriety or abstinence date | To show your time and milestones. | Our database |
| 4-digit PIN, if you turn it on | To lock the app on your devices. | Our database |
| Device model and system version (for example, “iPhone iOS 26.2”) and the date, each time you sign in | To know which devices and system versions we need to support. | Our database |
| Purchase history (subscriptions and lifetime membership) | To unlock premium features you paid for. | Apple, Google, our payment and subscription providers, and our database |
| How many times you’ve seen the upgrade screen, and which feature led you there | To improve the upgrade offer. It never includes what you wrote. | Our subscription provider |
| On iPhone only: which Apple Search Ads ad, if any, led you to install the app | To see which of our ads on the App Store work. Apple provides this without tracking you across other companies’ apps. | Our subscription provider |
Face ID and Touch ID are handled entirely by your device. The app only learns whether the check passed, and your face or fingerprint never leaves your phone. Reminders are scheduled on your device.
What we never do
- We never sell or rent your information.
- We never show ads, and we never share your data with advertisers or data brokers.
- We don’t track you across other companies’ apps or websites, and we never ask for permission to do so.
- We don’t put analytics or advertising tools such as Google Analytics, Firebase or Facebook in the apps.
- No company we work with receives what you write in your entries, except the service providers described below.
Service providers
A small number of service providers handle data for us, only to run the toolkit. They may use it only to provide their service to us, they must protect it at least as well as this policy does, and none of them may use it for advertising.
| Type of provider | What it receives | Why |
|---|---|---|
| Hosting | Everything in our database, including your entries | Runs our server and database on private servers used only by the toolkit, not a shared hosting environment. Only the developer signs in to them; the hosting company maintains the machines and network. |
| Network security | Your IP address and the encrypted traffic between the app and our server | Protects the site from attacks and keeps it fast. |
| Subscription management | Your account number, email address, purchase history, upgrade-screen counts, and on iPhone, the Apple Search Ads ad that led to your install | Manages subscriptions and lifetime memberships across iPhone, Android and the web. Never your entries. |
| Apple, Google and a card payment processor | Your purchases, and for website purchases your email address and card details | Process payments. We never see your card number. |
| Email delivery | Your email address, and the content of emails we send you | Delivers password resets and other account emails, our newsletter if you join it, and an entry when you use the website’s Email button to send it to someone, such as your sponsor. |
| Feedback boards | Only what you type there | Runs our feature request and feedback boards, a separate website you open from Settings with its own privacy policy. |
We may also share information if the law requires it, such as a valid court order. If the toolkit is ever sold or transferred, this policy will continue to apply to your data.
Error reports and support
If the app ever can’t read a response from our server, it sends us a short technical report so we can fix the problem. The report includes your account number and email address, your device model and system version, the app version, and the response that failed to load. That response can include the text of an entry. Reports go only to the developer and are never shared.
When you tap Feedback & Technical Support, the app opens your own email app with a message that already lists your email address, app version and device model. Nothing is sent until you press Send, and you can delete those lines first.
If you ask for a hardship discount, we receive the reason you give and the email address you want the reply sent to. We use them only to answer your request.
Your choices
- Newsletter. You choose whether to join when you create your account. Every newsletter has an unsubscribe link, or email us and we’ll remove you.
- PIN and Face ID. You can lock the app with a 4-digit PIN, and unlock it with Face ID or Touch ID, in Settings.
- Export your data. You can download a copy of your entries at any time from Settings.
- Delete your entries. You can delete single entries, or all entries of one kind, at any time.
- Delete your account. You can delete your account from Settings in the app or on the website. This removes your account and all your entries right away.
- Subscriptions. Subscriptions bought in the App Store or Google Play are managed and cancelled there. Deleting your account doesn’t cancel them.
How long we keep your data
We keep your account and entries until you delete them or delete your account. When you delete your account, we remove your account, every entry, your PIN, your sobriety date, your sign-in history and your purchase records from our database in one step.
A few things are kept after that:
- Server backups. Copies may remain in our hosting provider’s backups until those backups are replaced.
- Website payment records. Our payment processor’s record of a website payment (your email address and its payment numbers, never your entries) is kept for accounting.
- Error reports. A technical error report already sent to the developer stays in our error log until we clear it.
- Newsletter list. If you joined the newsletter, your email address stays on the list until you unsubscribe or ask us to remove it.
- App store records. Apple, Google and our subscription provider keep their own purchase records under their own policies.
Security
Everything between the apps and our server travels over an encrypted (HTTPS) connection. Passwords are stored hashed. Journal entries, gratitude lists, nightly inventories and spot checks are encrypted before they’re stored in our database. Only the developer can access the database, and only to keep the toolkit running or to help you when you ask. No method of storage is perfectly secure, but we work to protect your data and will tell you promptly if a breach affects it.
Children
The toolkit is meant for adults in recovery. We don’t knowingly collect information from children under 13. If you believe a child has created an account, email us and we’ll delete it.
Changes to this policy
If we change this policy, we’ll update the date at the top. If a change affects how your data is used or shared, we’ll tell you in the app or by email before it takes effect.
Contact us
Questions, or a request to see, correct or delete your data: email [email protected]. We’ll reply within 30 days.