Privacy Policy

Summary

• You can browse facilities without an account.
• If you send an inquiry to a facility, we share your inquiry with that facility so it can respond to you.
• We do not sell your personal information.
• We do not show advertising in the Service, and we do not use third-party advertising or analytics trackers.
• The 4R mobile app does not collect your device location, contacts, photos, or advertising ID.
• You can delete your account at any time from the Account tab in the 4R app, or by asking us. See "How to delete your account" below.

Information We Collect

We collect only the information described below.

Information You Give Us

• Account information. If you create an account, we collect your name, email address, password, and account type (for example, seeker or provider). Your password is stored only in a scrambled (hashed) form; we cannot read it.
• Inquiries to facilities. If you send an inquiry to a facility, we collect your name, email address, phone number (optional), the message you write, and the facility you chose.
• Help messages. If you use the help chat on the website, we collect your name, email address, phone number (optional), and your message.
• Match questionnaire. If you use the "Find a match" questionnaire on the website, we receive your answers (for example, urgency, type of care, preferred city, payment type, preferences, and any notes) to show matching facilities. These answers are used to produce your results and are not saved to our database.
• Search terms. When you search the directory, we receive the words and filters you enter so we can return results.
• Provider and facility information. If you register a facility, we collect the facility name, type of care, address, phone number, email address, website, description, capacity and availability information, and notes. Facility information is published in the public directory once approved. We record which provider account last updated a facility's availability and when.
• Case manager accounts. If you apply for a case manager account, we collect your name, organization, job title, work email, work phone, and password, a record of how your work email was verified (by emailed code or by our team), and our review notes. If you save favorite facilities, we store that list. If you send a referral, we store what you enter: your client's first name or initials, the kinds of help they need (checkboxes and an optional short note), and the timing. Referrals must not include medical records, Social Security numbers, or full dates of birth; we block entries that look like them and ask you to confirm before sending.
• Messages you send us directly, such as by email or phone.

Please do not include more health information in an inquiry or help message than is needed for someone to respond to you. Any information you choose to include in a message is handled as described in this policy.

Information Collected Automatically

• Website page views. On the website, we keep our own simple count of page visits. We record the page address you visited (without search terms), the date and time, and a random visitor ID stored in a cookie named "4r_vid." This cookie lasts up to one year and is used only to count visits and avoid double counting. We do not store your IP address in this record.
• Sign-in cookies. When you sign in on the website, we use cookies to keep you signed in and to protect sign-in forms.
• Mobile sign-in token. When you sign in on the mobile app, a sign-in token is saved in your device's secure storage so you stay signed in. The token expires after 30 days, and it is removed when you sign out.
• Server logs. Our hosting provider automatically processes technical information needed to deliver the Service, such as IP address, browser or device type, and the time of the request.

The mobile app does not include the website page-view counter and does not use cookies. Neither the website nor the app requests your precise device location.

How We Use Information

• To provide the directory, search, map, match results, and facility pages.
• To deliver your inquiry to the facility you selected.
• To respond to help messages and other requests.
• To create and manage accounts and keep them secure.
• To let providers list facilities, update availability, and manage inquiries.
• To review case manager applications, verify work email addresses, and let approved case managers search openings, save favorites, and send referrals to participating providers.
• To review and approve facility listings and send related service emails to facility contacts (for example, listing approved or not approved).
• To understand overall use of the website (for example, which pages are visited) and improve the Service.
• To prevent misuse, protect the Service, and comply with legal obligations.

We do not use your information to show you advertising, and we do not sell it.

How We Share Information

• With the facility you contact. When you send an inquiry, your name, email address, phone number (if provided), and message are made available to the facility you selected, through its provider account. The facility may then contact you. Once a facility receives your inquiry, its use of that information is governed by the facility's own practices, not this policy.
• Referrals. When an approved case manager sends a referral, the participating provider receives it in their Four Recovery inquiries, marked "from a case manager on behalf of a client." It includes the case manager's name, organization, title, work email, and phone, and the client's first name or initials, needs, and timing. Directory listings cannot receive referrals. We do not share referrals with anyone else, and we do not sell them.
• Public directory information. Facility details submitted by providers, and availability updates, are shown publicly in the directory.
• Four Recovery administrators. Our authorized staff can view inquiries, help messages, and account information to operate and support the Service.
• Service providers. We use companies that help us run the Service. They process information on our behalf. See "Service providers we use" below.
• Legal reasons. We may disclose information if required by law, or if we believe in good faith that disclosure is needed to protect the safety of any person, to address fraud or security issues, or to protect our rights.
• Business transfers. If our business is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this policy.

We do not sell personal information, and we do not share personal information with third parties for their own advertising or marketing.

Service Providers We Use

• Vercel: hosts the website and the servers the mobile app connects to.
• Neon: provides the database where account, inquiry, help message, facility, and page-view records are stored.
• Microsoft (Outlook): used to send and receive email, such as listing notices to facility contacts and replies to messages you send us.
• OpenStreetMap: provides the map images shown in the website's map view. When you open the map, your browser loads map images directly from OpenStreetMap servers, which receive your IP address. We also send facility addresses (not your information) to OpenStreetMap's Nominatim service to place facilities on the map, and ZIP code or city searches as described in "Finding support group meetings" below.
• Instagram (Meta): the website's About page displays recent posts from our Instagram account (@four.recovery). When you view that page, post images load from Instagram servers, which receive your IP address and browser information. Selecting a post opens Instagram, where Meta's privacy policy applies.
• Google Play and Expo: the mobile app is built with Expo tools and distributed through Google Play. Google may collect information under its own policies when you download or update the app.

When you tap a phone number, email address, or website link for a facility, your device opens your phone, email, or browser app, and that communication is between you and the facility.

Finding Support Group Meetings

When you use "Find a Support Group Now," you can choose to share your location to see meetings near you. We ask for your location only after you tap "Use my location," and your browser or device will ask your permission first. You can say no and search by ZIP code or city instead.

Your location is used on your device to show nearby meetings and distances. To look up meetings, we send our server only an approximate location, rounded to about half a mile to a mile. It is used only for that search. We do not store it, link it to your account, put it in web addresses, or include it in our analytics or logs. If you search by ZIP code or city, we use what you typed only to find that area on the map (through our mapping provider, OpenStreetMap Nominatim), and we do not store it.

Meeting listings come from the groups' own public meeting lists, such as Narcotics Anonymous service bodies via BMLT. Links to other fellowships' meeting finders take you to their websites, which have their own privacy policies. Four Recovery™ does not run these meetings and does not know whether you attend one.

Case Manager Accounts and Referrals

• Case manager accounts are for professionals who refer clients as part of their work, such as case managers, social workers, and discharge planners. Every account is reviewed by our team before it becomes active, and we may suspend accounts that are misused.
• Four Recovery is not a health record system and does not keep a client database. A referral is a short message to a provider that contains only a first name or initials, needs, and timing. The case manager stays the point of contact.
• Case managers are responsible for having their client's permission to share this information with a provider, and for following their own organization's privacy rules.

How Long We Keep Information

• Account information is kept while your account is active and is deleted when your account is deleted.
• Inquiries you send while signed in are deleted from our systems when your account is deleted. Inquiries sent while signed out, and help messages, are kept so facilities and our team can respond and follow up. We delete them when they are no longer needed for that purpose or when you ask us to delete them.
• Referral details (the client's first name or initials, needs, note, and timing) are deleted automatically 90 days after the referral is sent. The provider's copy of the inquiry is then reduced to a note that a case manager sent a referral, with the case manager's contact details.
• If a case manager deletes their account, we delete their profile, favorites, referrals, and the referral inquiries they sent.
• Page-view records are kept to understand overall use of the website over time. They contain a random visitor ID rather than your name or email address.
• Facility listings are kept while the listing is active or until the provider or our team removes it. If a provider deletes their account, the facility's public listing remains as a directory listing that no longer accepts inquiries through 4R, unless the provider asks us to remove it.

We may keep limited information longer when the law requires it, or when it is needed to resolve disputes, prevent misuse, or enforce our agreements. Copies of email sent through Microsoft Outlook, and backups kept by our service providers, may remain for a limited time under those providers' retention schedules.

Your Choices

• Browse without an account. Searching and viewing facilities does not require an account.
• Choose what you share. Phone number is optional on inquiry and help forms.
• Update your name. You can change the name on your account from your account page in the website or app.
• Access, correct, or delete. You can delete your account in the app (Account tab, then Delete account). You can also ask for a copy of your information, ask us to correct it, or ask us to delete it by emailing anthony@fourecovery.com.
• Cookies. You can block or delete cookies in your browser settings. If you block sign-in cookies, you will not be able to sign in on the website.
• Sign out. Signing out of the mobile app removes the sign-in token from your device.

How to Delete Your Account

You can delete your 4R account, and the information connected to it, at any time. This applies to accounts created on the website or in the 4R mobile app.

In the 4R App

• Sign in, open the Account tab, and tap Delete account. After you confirm, your account is deleted immediately and you are signed out.
• This immediately deletes your name, email address, password (hashed), account type, and the inquiries you sent while signed in.

By Email (Website Users and Anyone Else)

• Send an email to anthony@fourecovery.com from the email address on your account, with the subject line "Delete my 4R account."
• If you cannot send from that address, include the email address on your account, and we will contact you to confirm the request before deleting anything.
• We complete email requests within 30 days and will confirm by email when it is done.
• You can also use email to ask us to delete inquiries you sent while signed out, or help messages. Because these are not linked to an account, please tell us the email address you used and roughly when you sent them.

Provider Accounts

When a provider account is deleted, the facility listing it managed is not deleted automatically. It stays in the directory as a directory listing and stops accepting inquiries through 4R. You can ask us to remove the listing entirely, or to transfer it to another authorized person at the facility.

Case Manager Accounts

Deleting a case manager account also deletes your favorites and referrals, including the referral inquiries delivered to providers through Four Recovery. Providers may keep their own copies outside Four Recovery.

What May Remain

Information may be kept after deletion only where described in "How long we keep information" (for example, where the law requires it, or in service-provider backups for a limited time). A facility that already received your inquiry may have its own copy of your contact details. When you ask us to delete information, we will notify the facility and our service providers of your deletion request.

Children

The Service is for adults 18 and older. Adults, such as a parent, guardian, or professional, may contact facilities on behalf of a minor with permission; please share only what is needed. We do not knowingly collect information directly from anyone under 18. If you believe someone under 18 has provided information to us, please contact us and we will delete it.

Security

We use reasonable measures to protect information, including encrypted connections (HTTPS) between your device and our servers, hashed passwords, secure device storage for the mobile sign-in token, and access controls that limit inquiries to the facility they were sent to and to our authorized staff. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

4R is not a health care provider, and the Service is not designed to store medical records. Please share only the information needed for a facility or our team to respond to you.

Do Not Track and Third-Party Tracking

We do not track you over time or across other websites, so we do not respond differently to Do Not Track signals. When your browser loads Instagram images (on the website's About page) or OpenStreetMap map images (in the website's map view), those companies receive your IP address and browser details under their own policies.

Consumer Health Data (Nevada)

This section describes how we handle consumer health data under Nevada law.

• Consumer health data we collect: the type of care you ask about, the facility you contact, and anything you write in inquiries or help messages about substance use, mental health, medications, or treatment. Answers to the website's match questionnaire are processed only to show results and are not saved.
• Source: you, or someone helping you.
• How we use it: only to deliver your inquiry, answer help requests, and keep the Service secure. We never use it for advertising, and we never sell it.
• Who receives it: the facility you choose to contact; Vercel, Neon, and Microsoft as service providers that process it on our behalf; or others where required by law.
• No third party collects consumer health data about you across other websites or apps through our Service.

Referral needs (for example, detox or MAT) can indicate that a person is seeking substance use treatment. We collect them only to deliver the referral a case manager asks us to send, keep them only for the retention period described above, and never sell them or use them for advertising.

Your rights: you may ask us to confirm whether we collect or share your consumer health data, to give you a list of the third parties we have shared it with, to stop collecting or sharing it, and to delete it. Email anthony@fourecovery.com with the subject line "Nevada health data request." We verify requests using the email address on your account or the email address you used to contact a facility, and we respond within 45 days.

Appeals: if we deny your request, you may appeal by replying to our response with the word "Appeal." We will answer your appeal in writing within 45 days. If your appeal is denied, you may contact the Nevada Attorney General's Office, Bureau of Consumer Protection, by filing a complaint at ag.nv.gov or by calling (888) 434-9989.

Nevada and California Residents

Nevada residents: we do not sell covered information as defined by Nevada law. You may still send questions or requests about your information to anthony@fourecovery.com.

California residents: we do not sell or share personal information (including for cross-context behavioral advertising), and we do not disclose personal information to third parties for their direct marketing purposes. You may ask us what personal information we have about you, ask us to correct it, or ask us to delete it by emailing anthony@fourecovery.com. We will not treat you differently for making a request.

Residents of other states may make the same requests, and we will respond as required by applicable law.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will change the effective date at the top of this page. If we make significant changes, we will provide additional notice, such as a notice on the website or in the app.

Contact Us

If you have questions about this Privacy Policy or your information, contact:

Revive Recovery Holdings LLC, doing business as Four Recovery (4R)

• Email: anthony@fourecovery.com
• Phone: (775) 770-4459
• Mail: 14001 Summit Sierra Blvd, Unit 3125, Reno, NV 89511
• Website: https://fourecovery.com