RecoveryBuddy AI Data Retention Policy

Effective Date: August 1, 2026

Last Updated: August 1, 2026

Platform Owner

Digjy LLC

19580 West Indian School Rd Ste 105 #973

Buckeye, Arizona 85396

United States

Website: https://recoverybuddy.net

Email: [email protected]


Data Retention Policy

RecoveryBuddy AI (“RecoveryBuddy AI,” “we,” “our,” or “us”), owned and operated by Digjy LLC, is committed to managing information responsibly throughout its lifecycle.

This Data Retention Policy explains how RecoveryBuddy AI retains, archives, de-identifies, and securely disposes of information collected or processed through the RecoveryBuddy AI platform.

This Policy should be read together with our Privacy Policy, Terms of Service, HIPAA Notice, PHI Policy, Security Policy, AI Terms of Use, and other applicable legal policies.


Purpose

The purpose of this Policy is to establish principles for retaining information only for as long as reasonably necessary to:

  • Provide requested services.

  • Operate the Platform.

  • Support users.

  • Protect security.

  • Comply with legal obligations.

  • Meet contractual requirements.

  • Resolve disputes.

  • Prevent fraud.

  • Support audits.

  • Maintain business records.

  • Improve platform functionality.

  • Protect the rights of Digjy LLC and its users.

RecoveryBuddy AI seeks to avoid retaining personal information longer than reasonably necessary.


Scope

This Policy applies to information processed through:

  • RecoveryBuddy AI website.

  • Mobile applications.

  • WordPress plugin.

  • Artificial intelligence services.

  • Recovery journals.

  • Recovery plans.

  • Messaging.

  • Recovery meetings.

  • Provider portals.

  • Organization dashboards.

  • Administrative systems.

  • APIs.

  • Customer support systems.

  • Security systems.

  • Cloud infrastructure supporting the Platform.

This Policy applies to both personal information and organizational information processed by RecoveryBuddy AI.


Categories of Information

RecoveryBuddy AI may retain various categories of information, including:

Account Information

Examples include:

  • Name

  • Username

  • Email address

  • Telephone number

  • Organization affiliation

  • User role

  • Account preferences

  • Authentication information

  • Profile settings


Recovery Information

Examples include:

  • Recovery journals

  • Recovery plans

  • Goals

  • Milestones

  • Wellness tracking

  • Recovery progress

  • Meeting participation

  • Educational activity

  • Uploaded files

  • Shared documents


Communications

Examples include:

  • Direct messages

  • Group messages

  • Recovery meeting chats

  • Customer support communications

  • Comments

  • Replies

  • Notifications

  • Feedback


Artificial Intelligence Interactions

Examples include:

  • AI prompts

  • AI responses

  • Conversation history

  • User feedback

  • AI summaries

  • AI-generated recommendations


Technical Information

Examples include:

  • IP addresses

  • Browser information

  • Device identifiers

  • Authentication logs

  • Security logs

  • Error reports

  • Analytics information

  • Performance metrics


Payment Information

RecoveryBuddy AI generally relies on third-party payment processors for payment processing.

We may retain limited payment-related information such as:

  • Transaction identifiers

  • Billing status

  • Subscription status

  • Payment confirmations

  • Invoice records

Complete payment card numbers are generally not retained by RecoveryBuddy AI unless expressly disclosed.


Retention Principles

RecoveryBuddy AI retains information only for legitimate business, legal, contractual, operational, or security purposes.

Retention decisions consider factors such as:

  • Applicable laws.

  • Regulatory requirements.

  • Contractual obligations.

  • User requests.

  • Security needs.

  • Fraud prevention.

  • Audit requirements.

  • Litigation holds.

  • Platform functionality.

  • Business continuity.

Retention periods may vary depending on the type of information.


Account Information Retention

Account information is generally retained while an account remains active.

After account closure, certain information may continue to be retained for purposes including:

  • Legal compliance.

  • Fraud prevention.

  • Security investigations.

  • Financial reporting.

  • Tax obligations.

  • Dispute resolution.

  • Enforcement of agreements.

  • Operational backups.


Recovery Journals and User Content

Recovery journals, recovery plans, uploaded documents, and other user-generated content are generally retained until:

  • Deleted by the user, where supported.

  • Deleted in accordance with platform functionality.

  • Removal is required by law.

  • Retention is no longer reasonably necessary.

Certain copies may continue to exist temporarily within encrypted backups or archival systems until those backups expire according to operational schedules.


Messages and Meeting Data

Messages, meeting records, chat logs, attendance information, and related communication data may be retained for purposes including:

  • Providing requested services.

  • Supporting ongoing conversations.

  • Security investigations.

  • Abuse prevention.

  • Legal compliance.

  • Audit requirements.

  • Platform integrity.

Retention periods may differ depending on user settings, organizational policies, contractual obligations, or applicable law.


Artificial Intelligence Data

AI interaction data may be retained to:

  • Provide requested AI services.

  • Improve AI performance.

  • Detect abuse.

  • Maintain security.

  • Support quality assurance.

  • Investigate technical issues.

  • Comply with legal obligations.

Where appropriate and permitted by law, AI interaction data may be aggregated or de-identified for analytics, research, or system improvement.


Healthcare Information

Where RecoveryBuddy AI processes Protected Health Information (“PHI”) under an applicable Business Associate Agreement or other healthcare arrangement, retention practices will also be governed by:

  • Applicable healthcare laws.

  • HIPAA requirements.

  • Contractual obligations.

  • Organizational retention policies.

  • Regulatory requirements.

Healthcare organizations remain responsible for determining their applicable retention obligations.


Security Logs

Security-related information may be retained to:

  • Investigate incidents.

  • Detect fraud.

  • Identify unauthorized access.

  • Monitor system health.

  • Maintain audit trails.

  • Protect Platform security.

  • Comply with legal obligations.

Security logs may be retained for periods appropriate to operational, security, or regulatory requirements.


Legal Holds

RecoveryBuddy AI may retain information beyond ordinary retention periods when reasonably necessary to:

  • Comply with court orders.

  • Respond to subpoenas.

  • Preserve evidence.

  • Support litigation.

  • Meet regulatory obligations.

  • Protect legal rights.

  • Resolve disputes.

Information subject to a legal hold may remain retained until the applicable matter has concluded.


Secure Storage

While retained, information is protected using administrative, technical, organizational, and physical safeguards designed to reduce the risk of unauthorized access, alteration, disclosure, or destruction.

Security practices may include:

  • Encryption.

  • Access controls.

  • Authentication.

  • Audit logging.

  • Monitoring.

  • Secure backups.

  • Disaster recovery planning.


Data Deletion

When information is no longer reasonably necessary, RecoveryBuddy AI may:

  • Permanently delete information.

  • Securely erase data.

  • De-identify information.

  • Aggregate information.

  • Archive information where legally required.

Deletion timing may vary depending on system architecture, backup schedules, contractual obligations, and applicable law.


Backup Systems

RecoveryBuddy AI maintains backup systems to support business continuity and disaster recovery.

Information deleted from active systems may remain within encrypted backup media for a limited period before secure deletion or expiration occurs according to operational schedules.

Backups are maintained solely for recovery, security, and continuity purposes.


De-Identification

Where appropriate, RecoveryBuddy AI may de-identify or aggregate information so that it can no longer reasonably identify an individual.

De-identified information may be retained for purposes including:

  • Platform improvement.

  • Artificial intelligence development.

  • Analytics.

  • Security research.

  • Product development.

  • Statistical reporting.

  • Operational planning.


User Requests

Where supported by applicable law, users may request:

  • Access to information.

  • Correction of information.

  • Deletion of certain information.

  • Copies of information.

  • Other privacy rights.

Certain information may continue to be retained despite deletion requests where legally permitted or required, including for:

  • Legal compliance.

  • Fraud prevention.

  • Security.

  • Tax obligations.

  • Financial reporting.

  • Enforcement of agreements.


Third-Party Service Providers

RecoveryBuddy AI may use third-party service providers that process information on our behalf.

Those providers are expected to retain and securely dispose of information in accordance with:

  • Contractual obligations.

  • Applicable law.

  • Operational requirements.

  • Security standards.

RecoveryBuddy AI does not control the independent retention practices of third parties beyond applicable contractual requirements.


International Retention

Where information is processed internationally, RecoveryBuddy AI seeks to manage retention practices in accordance with applicable legal requirements governing cross-border data processing.


Policy Updates

RecoveryBuddy AI may update this Data Retention Policy periodically to reflect:

  • Changes in applicable law.

  • Regulatory guidance.

  • Platform enhancements.

  • Security improvements.

  • Business operations.

  • Industry best practices.

  • Operational requirements.

Updated versions will be posted on the RecoveryBuddy AI website with a revised Last Updated date.


Contact Information

Questions regarding this Data Retention Policy may be directed to:

Digjy LLC

RecoveryBuddy AI

Privacy & Compliance Office

19580 West Indian School Rd Ste 105 #973

Buckeye, Arizona 85396

United States

Website: https://recoverybuddy.net

Email: [email protected]


Acknowledgment

By accessing or using RecoveryBuddy AI, you acknowledge that you have read and understood this Data Retention Policy.

You understand that RecoveryBuddy AI retains information only for legitimate legal, operational, contractual, security, and business purposes and seeks to securely delete, archive, or de-identify information when retention is no longer reasonably necessary or required.

© 2026 Digjy LLC. All Rights Reserved.

error: Content is protected !!