Medical disclaimer: Tidepull is a personal drink-less / sobriety tracking app. It is not a medical device, and it does not diagnose, treat, or provide medical advice of any kind. If you are in crisis or experiencing withdrawal symptoms, use the in-app Crisis Resources or contact emergency services — Tidepull is not a substitute for medical or emergency care.
Not a crisis service: Tidepull is not a medical service and cannot respond to emergencies. Crisis Resources inside the app are informational links to third-party hotlines and services, always free and reachable with no account, no subscription, and no network connection required. In an emergency, call your local emergency number.
Tidepull is designed around a simple principle: your recovery data belongs on your device, not on our servers. Tidepull has no user accounts and no server-side database of your personal information. All drink logs, urge sessions, journal entries, streaks, and check-ins are stored locally on your device using Apple's SwiftData framework. We do not have a copy of this data, and we cannot see it unless you explicitly choose to share specific text with our AI features (see below).
Our backend is a stateless AI proxy. When you opt in to an AI feature, only the specific data needed for that request is sent to our server, forwarded to our AI provider, and the response is returned to your device. Requests are held in an in-process cache for up to 24 hours purely to avoid duplicate AI calls, and that cache is wiped whenever the server restarts. We do not maintain a database of your requests or their contents.
The following categories of data are collected and stored exclusively on your device, and are never transmitted to our servers unless you have opted in to an AI feature (in which case only the specific text needed for that request is sent, as described below):
Tidepull includes exactly three AI-assisted features, and no others: journal theme extraction, report prose generation, and free-text drink parsing. These are the ONLY uses of AI anywhere in the app — there is no AI on the urge or crisis path, and AI is never a gate in front of crisis resources. These features are off by default. The first time you use one, Tidepull shows a plain-language consent prompt explaining exactly what will be sent. You must explicitly consent before any text leaves your device for AI processing, and you can revoke this consent at any time in Settings — doing so immediately stops all three AI surfaces from making network calls, and each falls back to its offline behavior (manual entry, template report text).
When AI consent is granted, only the following text is sent, and only for the specific feature you are using:
We never send your name or account identifiers (Tidepull has no accounts), or any data beyond what is described above for the specific feature you are actively using. AI processing for these features is performed by OpenAI (model: gpt-4o-mini) via our backend proxy. Nothing you send is stored server-side beyond the short-lived, in-memory cache described above — there is no database of your AI requests. Every AI response is filtered for medical-advice language before it is ever shown to you; if a response fails that filter, it is discarded rather than displayed.
Tidepull uses Firebase Analytics and the Meta (Facebook) SDK to understand product usage, measure funnels, and (with your permission) attribute installs. This includes your device identifier (IDFA), and Tidepull requests App Tracking Transparency (ATT) permission before this identifier is used for tracking. If you decline the ATT prompt, your device is not tracked for advertising purposes. Analytics data does not include your drink logs, journal entries, urge sessions, or any personally identifying information beyond the device identifier.
We may disclose information if required by law, court order, or government request, or to prevent fraud or protect the security of our service. Because we do not store your personal data server-side, there is generally nothing for us to disclose beyond the limited analytics and transient AI-proxy data described above.
Because your data lives entirely on your device and we keep no server-side copy, you already have full access to it inside the app, and you can correct or delete any entry directly in Tidepull. Deleting the app removes all locally stored data. If you have used an AI feature, that specific request may still exist in our transient cache for up to 24 hours before it is automatically discarded; you do not need to contact us for this to happen, but you may email us with questions at [email protected].
You can disable AI features at any time in Settings. This immediately stops Tidepull from sending any data to our AI proxy. Manual entry remains available and free for all logging.
You can decline the App Tracking Transparency prompt to prevent your device identifier from being used for tracking. iOS lets you change this decision later in Settings → Privacy & Security → Tracking.
Tidepull is operated in the United States. Any data you send via an opted-in AI feature is processed in the US. If you are located outside the US, by using Tidepull's AI features you consent to the transfer of that limited data to the US for processing under US law.
We implement reasonable security measures, including encryption in transit (HTTPS), to protect any data that is sent to our AI proxy. However, no security measure is 100% guaranteed. If you have security concerns, please contact us at [email protected].
Tidepull is a general-audience app and is not directed at children. We do not knowingly collect data from children. Tidepull has no accounts, so there is no account-based data collection from any user, child or adult.
We may update this Privacy Policy at any time. We will notify you of material changes by updating the "Last updated" date above and, if required by law, via an in-app notification.
If you have questions about this Privacy Policy or our privacy practices, please contact us at:
Scriptstash
Email: [email protected]