Privacy Policy
Effective June 2, 2026 — Core Values Recovery LLC
Core Values Recovery LLC (“we,” “us,” “our”) operates On the Beam, a recovery coaching platform available as a mobile application and web application. This Privacy Policy explains what information we collect, how we use it, and your choices.
If you are a client using On the Beam for recovery coaching, please also review our Notice of Privacy Practices, which describes how your protected health information (PHI) is handled under HIPAA.
1. Information We Collect
1.1 Account Information
- Name, email address, and password (for email/password authentication)
- Phone number (for SMS-based authentication or coach invite)
1.2 Coaching & Conversation Data
- Messages between you and the AI coaching companion
- Messages between you and your human recovery coach
- Daily check-in responses (mood, sleep quality, craving levels, free-text notes)
- To-do items and goals created by you or your coach
1.3 Testing Data
- Substance testing submissions (video recordings, timestamps)
- Test results and review status
1.4 Recovery Information
- Sobriety date and recovery pathway
- Meeting names, dates, and attendance records
1.5 Location Data
- GPS coordinates collected only when you voluntarily initiate a meeting check-in and grant location permission
- We do not track your location in the background
1.6 Device & Technical Data
- Push notification token (for message delivery)
- Device type and operating system (for app compatibility)
- App activity state (active/background) for notification delivery optimization
2. How We Use Your Information
| Purpose | Description |
|---|
| Coaching | Your coach reviews conversations, check-ins, and progress to provide personalized support. |
| AI coaching | Your conversation history provides context for AI responses. We use AI models accessed through Google Cloud covered services. Your conversations are not used to train AI models. |
| Safety monitoring | We monitor for crisis indicators to connect you with emergency resources (988 Lifeline, 741741). |
| Notifications | Push notifications, email, and SMS for coach messages, check-in reminders, and test requests. Notification content never includes clinical details. |
| Service operation | Authentication, security, audit logging, and technical support. |
3. Who Can Access Your Data
- Your assigned coach — conversations, check-ins, testing results, to-do items, and meeting attendance
- AI coaching companion — conversation history and coaching context (to generate responses)
- Platform administrators — for technical support and safety monitoring; all admin access is logged
- Service providers — see Section 4 (Third-Party Services)
4. Third-Party Services
We use the following service providers to operate On the Beam. Each is bound by a Business Associate Agreement (BAA) or equivalent data protection agreement where applicable.
| Provider | Purpose | Data shared |
|---|
| Convex, Inc. | Backend database & serverless functions | All application data (encrypted at rest) |
| Vercel Inc. | Web application hosting | Static assets, request logs |
| Google LLC | AI language model access, video analysis, and identity services through Google Cloud covered services | Conversation context for AI responses, test submission videos for automated review, and authentication identifiers |
| Amazon Web Services | Transactional email delivery through Amazon SES | Email addresses; email bodies contain no PHI |
| Twilio Inc. | SMS message delivery and voice calls | Phone numbers; message bodies contain no PHI |
5. What We Do Not Do
- We do not sell your personal information or PHI.
- We do not share data with advertisers.
- We do not use your conversations to train AI models.
- We do not track your location in the background.
- We do not include clinical content in email or SMS notifications.
6. Data Security
- All data encrypted in transit (TLS 1.2+) and at rest
- Role-based access controls (Client, Coach, Admin)
- Automatic session logoff after 15 minutes of inactivity (coach and admin interfaces)
- Password requirements following NIST SP 800-63B guidelines
- Comprehensive audit logging of all data access and mutations
- Optional biometric app lock (Face ID / fingerprint) on mobile
- Sensitive media served through authenticated endpoints only
7. Data Retention
- Your data is retained while your coaching relationship is active.
- After your coaching relationship ends, records are retained for six (6) years as required by HIPAA.
- Audit logs are retained for a minimum of six (6) years.
- You may request deletion of your data, subject to legal retention obligations (see Section 8).
8. Your Rights
- Access — request a copy of your data in a portable electronic format
- Correction — request amendment of inaccurate information
- Deletion — request deletion of your account and data (subject to legal retention requirements)
- Restriction — request limitations on how we use your data
- Complaint — file a complaint with us or with the HHS Office for Civil Rights
To exercise any right, contact privacy@getonthebeam.com.
9. California Residents
SB 243 AI Disclosure
In compliance with California Senate Bill 243, we disclose that On the Beam uses artificial intelligence to provide coaching support. The AI coaching companion is not a human. Your human recovery coach supervises all AI interactions.
CCPA / CPRA
California residents have additional rights under the California Consumer Privacy Act. We do not sell personal information. To submit a CCPA request, email privacy@getonthebeam.com.
10. Children’s Privacy
On the Beam is not intended for individuals under 18 years of age. We do not knowingly collect information from minors. If you believe a minor has provided us with personal information, contact us immediately.
11. Crisis Resources
On the Beam is not a substitute for emergency services. If you are in crisis:
- 988 Suicide & Crisis Lifeline: Call or text 988
- Crisis Text Line: Text HOME to 741741
- Emergency: Call 911
12. Changes to This Policy
We may update this policy from time to time. We will notify you of material changes through the app or by email. The “Effective” date at the top of this page indicates when this version took effect.
13. Contact Us
Core Values Recovery LLC
Email: privacy@getonthebeam.com
Web: getonthebeam.com