Privacy Policy

Encourage is a social-motivation tool. We collect the information we need to run it — your account, the tasks and messages you choose to post, and a few technical details — and nothing we don’t need. We don’t sell your data. We don’t run third-party ad trackers. You control what other members see via the visibility options on each task.

This service is not currently covered by a HIPAA Business Associate Agreement. Please do not post protected health information. See HIPAA and PHI below.

Encourage (“we,” “us”) is operated by [Operator]. You can reach us at hello@encourage.today.

Information you give us

• Account information. Your email address and a password (stored as a salted hash by our auth provider, never in plaintext), or, if you sign in with Google, the basic profile information Google returns (name, email, Google account ID).
• Profile. Your display name. You can edit it at any time.
• Content you post.Task titles and descriptions, group messages, group membership requests, and emoji encouragements you leave on other people’s tasks.

Information we collect automatically

• Session cookies.We set cookies that keep you signed in. These are strictly functional — no advertising, no analytics.
• Server logs. Standard web server logs (IP address, user agent, request timing) from our hosting providers. Used to operate and secure the service, not to profile you.

What we don’t collect

• Payment information (the service is free right now).
• Third-party analytics or advertising identifiers.
• Location beyond what’s inferable from an IP address.

• To run the service — sign you in, show you your content, deliver messages to groups you’re in.
• To respond to your support requests.
• To detect and prevent abuse.
• To improve the product, in aggregate — e.g., noticing that a feature is broken.

Encourage runs on third-party infrastructure. The providers below process your information on our behalf, strictly to deliver the service:

• Supabase— hosts our database and authentication system.
• Vercel— hosts the web application.
• Google— if you choose to sign in with Google, Google handles that authentication step. If you click “Start Google Meet” in a group, Google creates the meeting; we don’t record, store, or transcribe those meetings.

Other Encourage members see content you choose to share with them. A group-visible task is visible to approved members of that group. A public task is visible to any signed-in Encourage user. A private task is never visible to anyone but you.

We do not sell personal information, and we don’t share it for advertising purposes. We may disclose information if required by law, in response to valid legal process, or to protect the safety of users.

• Edit or delete contentyou’ve posted at any time from inside the app.
• Change your display name from your account settings.
• Delete your account. Email hello@encourage.today and we’ll delete your account and associated data within a reasonable period (target: 30 days). Self-serve deletion is on our roadmap. Some information may persist in encrypted backups for a short time before being rotated out.
• Depending on where you live, you may have additional rights under laws like the GDPR or CCPA (e.g., access, portability, correction, objection). To exercise them, contact us at the email above.

We keep your information for as long as your account is active. When you delete your account, we delete it from our operational database and initiate deletion from backups on their next scheduled rotation. Encouragements and group messages you authored are tied to your account and deleted with it; tasks you posted and then made public or shared with a group will also be removed.

We rely on our infrastructure providers’ security practices and add application-level safeguards: encrypted transport (HTTPS), authenticated database access, and row-level security rules so users can only read and write data they’re authorized to. No system is perfectly secure; if you suspect a security issue, email hello@encourage.today with details.

Encourage is not a HIPAA-covered service at this time. We have not signed Business Associate Agreements with our infrastructure providers. Please treat your Encourage account as you would any general-purpose social app: share what feels appropriate for that level of privacy, and do not post protected health information such as diagnoses, medication lists, or clinical details that could identify you.

If your clinician has invited you here, they’re using Encourage as an informal motivational space, not as a clinical tool. Clinical communication should happen through whatever patient portal or channel your clinician has set up for that purpose.

Encourage is not intended for children under [18]. We don’t knowingly collect information from them. If you believe a child has created an account, please contact us and we’ll delete it.

Our infrastructure is located in the United States. If you use Encourage from outside the US, your information will be transferred to and processed in the US.

If we make material changes, we’ll update the date at the top and, where feasible, notify you by email before the changes take effect.

Privacy questions, requests, or concerns: hello@encourage.today.