Privacy Policy

1. Scope and who we are

This Privacy Policy applies to the Groupicorn apps, website, and related services. Groupicorn is operated by groupicorn.com (“we,” “us,” or “our”). The service includes treatment program discovery and, where available, reviews, tours, and herds.

Interest in a behavioral health or substance use program, a tour record, a review, or membership in a program herd may reveal sensitive information about you. Please consider that before using a shared device or posting content.

2. Information we collect

Accounts and identity

Herd features may create an anonymous account with an account identifier, authentication and session data, selected username or avatar, memberships, role, and join dates. If you sign in with Google or Apple, we receive the provider account identifier and any email, name, or profile image the provider makes available. An email address is required to save a tour; you do not need to provide a legal name or phone number for a basic herd account.

Program interest and tours

The iPhone app stores your saved program list on your device. The web dashboard stores programs you track, their status, call and tour dates, ratings, feedback, and private notes with your account. The iPhone app also stores the program you are viewing locally. If you save a tour in the app, we store the program or location, the date and time you say you agreed to, time zone, account identifier, and contact email. Older tour flows may store preferred times. The saved tour is your record; it is not a booking confirmation from the program.

Reviews, messages, photos, and reports

We store reviews and ratings you submit, the staff member or program reviewed, optional meeting date and time, review text, author account identifier, and submission date. Location reviews are visible to other users and may be visible without sign-in. We store herd and direct messages, photos or captions you choose to send, associated members or recipients, and timestamps. We also store reports and block records needed to investigate and enforce our rules. Content may contain health information if you put it there; please do not include another person’s treatment information.

Availability and location

If you enable chat availability, we store that status. If you separately enable location sharing and grant device permission, the app uses precise location to calculate current meetup or in-route status and approximate arrival time. While enabled, the app generally requests a fresh location about once per minute. The current shared location state is overwritten by later updates; the feature is off unless you enable it.

Camera, photos, microphone, and speech

With permission, the camera scans a herd invitation QR code on your device; the QR scanner does not upload camera video. The photo picker lets you choose a picture to upload to a chat. Groupicorn stores the uploaded image and caption so recipients can see them.

For optional tour time dictation, the iPhone app uses the microphone after your phone call, captures the date and time you speak, and uses Apple speech recognition to turn it into text. Recognition may use Apple servers, depending on device and availability; Groupicorn does not require on-device recognition. The app may use an on-device Apple language model or local date detection to interpret that text. Groupicorn does not record the phone call or upload the dictation audio or transcript to our backend; it sends the date and time you choose to save. The app does not keep a recording of that dictation. You may use the date picker instead and revoke microphone or speech permission in iOS Settings.

Technical data

Our service providers may process IP addresses, request times, device or browser information, and error or security logs to operate and protect the service. We do not use advertising or cross-app tracking technology.

3. How we use information

We use the information above to provide accounts and herds; show program lists and your saved or tracked items; record tour plans; display reviews; deliver messages and photos; provide optional meetup status; follow up about a tour using your contact email if needed; respond to reports and support requests; secure and troubleshoot the service; and comply with law. We do not use health-related activity for targeted advertising or sell personal information.

4. How information is shared

Other people and programs

Location reviews, including review text, rating, staff or program, and optional meeting time, may be viewed without sign-in. A review’s account identifier may be included in service responses. Your web tracked programs and tour records are account data; they are not shown in a public directory. We do not send a saved tour to the program as an appointment request. If you call, email, or open a program’s site, you deal directly with that program under its own privacy practices.

People with access to a herd, including eligible program users and members, can see its member list, chosen names and avatars, community messages and photos, and status you choose to share. Direct messages and photos are available to their participants. A herd associated with a treatment program may reveal that its members have a connection to that program. Blocking can hide content or presence between accounts, but it does not erase copies others already made or necessarily remove either person from a shared herd.

Service providers and legal needs

We use Cloudflare for the current API, database, and media storage; Supabase for some legacy authentication and herd services; Apple and Google for optional sign-in; and Apple for optional speech recognition. These providers process data to deliver those functions. Apple may process dictated audio under its own terms and privacy policy. We may disclose information when required by law, to investigate abuse or protect people and the service, or in a business transfer subject to applicable notice requirements.

We do not sell personal information or share it for cross-context behavioral advertising.

5. Retention and deletion

We keep account, tour, tracked program, review, and herd data while needed to provide the service, until you delete it or your account, or longer when required for security, disputes, enforcement, or law. The service retains up to the newest 1,000 community messages per herd and 1,000 direct messages per member pair; older messages are deleted as new ones arrive. Report records are kept as needed to investigate and respond. Current shared location is overwritten by updates and cleared from active presence when sharing is turned off or you log out. Logs and backups may remain for a limited period until rotation.

You can remove a tracked program in the web dashboard, remove a saved program from the iPhone app, or delete your account through Settings → My Account → Delete my account. Account deletion removes associated data from active service systems, subject to limited legal, security, and backup retention. A program list stored on your device may remain until you remove it or clear the app’s local data. Logging out or deleting the app does not by itself delete service records. For access, correction, or deletion help, email [email protected].

6. Your choices and privacy rights

You choose whether to save a program, record a tour, post a review, join a herd, share a photo, or enable availability and location. You can use manual tour time entry instead of dictation. You can change camera, photos, location, microphone, and speech permissions in device settings. Where offered, you can report content or block another user. You can request access, correction, or deletion at [email protected]. Depending on where you live, additional rights may apply. We will not discriminate against you for exercising a privacy right.

7. Security and international transfers

We use safeguards such as encrypted network connections, authenticated access, and database access controls. No system is completely secure. Other people who can view a review, message, or membership may copy or disclose it outside Groupicorn. Groupicorn and its providers may process information in the United States and other countries where they operate, subject to applicable transfer protections.

8. Children’s privacy

Groupicorn is not directed to children under 13 and we do not knowingly collect their personal information. People aged 13–17 need a parent or legal guardian to review and agree to the Terms where required. Behavioral health privacy and consent rules for minors vary; users must follow applicable law and program rules. If you believe a child under 13 has provided information, contact us.

9. Changes to this policy

We may update this policy as Groupicorn changes. We will post the revised policy and effective date and provide additional notice of material changes when appropriate.