Privacy policy

The short version

No account, no sign-in, no name. What you choose and write in the app stays on your phone. We can't see it, and neither can your school.

Two things leave your phone, and only when you make them happen. A message you send to the AI guide, after you agree on the consent screen. And anonymous usage counts, which you can turn off. Nothing else about you is collected.

We don't sell data, we don't advertise, and we share nothing with anyone except the companies named below that do work for us.

Who we are

This policy covers the #WithYouToo app for iPhone and Android and the website at sexualassaultfirstaid.com. Both are made by 3Joannes, Inc., a Delaware public benefit corporation ("3Joannes", "we", "us").

Questions and requests: care@3joannes.com. Postal address: 3Joannes, Inc., 16192 Coastal Hwy, Lewes, DE 19958-3608, United States.

What stays on your phone

Your Support Superpower, the first initial you may enter for the person you're supporting, your campus choice, the door you came in by, your place in the 90-Day Plan, your conversations with the guide, and your settings. All of it is stored only in the app on your phone. Deleting the app, or tapping "Clear everything on this device" under You, removes it from the phone.

The "Was it sexual harm?" questions keep nothing. Boxes you check are not saved and never sent anywhere.

Phone backups are yours, not ours. On Android, the app keeps its data out of Google's backup. On an iPhone, the app's data is included in your iPhone backup if you have backups turned on, like other apps; you can turn that off for this app in your iCloud settings. A backup made earlier can still hold a copy until a newer backup replaces it.

When the app opens, it loads its wording and resource lists from our server, the way a web page loads. That request carries nothing about you beyond the connection details every internet request carries.

When you talk to the guide

The guide is an AI. To answer, it needs your words, so they leave the phone. Before your first message the app shows you exactly what is sent and who receives it, and you can say not now. Everything else in the app works without the guide.

What is sent: your message and the recent conversation (at most the last sixteen turns), together with what you chose in the app: the door you came in by, how long ago it happened, your Support Superpower, your campus, and your first initial if you entered one. No name, no account, nothing from the quiz.

Our server receives it, finds the matching passages in 3Joannes' material, asks the AI model to write the reply, and streams the reply back to you. The server does not store your message or the reply. For each reply it keeps one log line with timings, token counts and whether the safety card was shown, with no text in it. Vercel, which hosts the server, keeps standard request logs, including the connecting IP address, for a short time.

Anthropic, whose model Claude writes the reply, does not use what it receives through its API to train its models and deletes it within 30 days, except content its safety systems flag, which it may keep for up to two years.

Voyage AI finds the passages that match your message. Our Voyage account is set so that it keeps nothing it receives and trains on nothing.

Before the model sees your words, the server runs a fixed check for signs that someone is in danger, so it can show the emergency card first. The check runs in memory and keeps nothing.

To keep the service available to everyone, each install can send only so many messages in a day. For that, the app sends a random id it created when it was installed. The server hashes the id and the IP address with a key that changes every day and counts against the hash; the counts live for at most a day, and nothing is stored that could be turned back into the id or the address. The id is not linked to you, and "Clear everything on this device" replaces it.

Usage counts

So 3Joannes can see where people get stuck, the app reports which screens are opened and which buttons are tapped, with the platform and the app version, to PostHog, a product analytics service in the United States. Examples: that the home screen opened, which door was tapped, that the quiz reached question four, that a message was sent to the guide and a reply arrived, that a call card was tapped.

Never in those counts: what you write, your first initial, your campus, your quiz answers, which phone number you called, or anything you type.

A second random id, created the first time the app opens, lets return visits be counted. It is not derived from your device. "Clear everything on this device" discards it, and the app makes a new one.

PostHog is set to discard the IP address of every request, to work out no location, to build no profile, and to record no sessions. Nothing from the counts can be traced to a person.

You can turn the counts off under You, Privacy. Off takes effect immediately.

Store privacy labels have no category for an id an app makes up itself, so on the App Store and Google Play these counts appear as "product interaction" and the random id as a "device ID", marked as not linked to you. Your phone's own identifiers are never read.

App updates

When it opens, the app checks Expo's update service for new versions of its screens and wording, so fixes can reach you without a store update. That request carries the platform, the app version, the update channel and a random client id Expo uses to count how many installs received an update. Expo sees the connecting IP address, as any server does. Nothing from inside the app travels with it.

The website

sexualassaultfirstaid.com sets no cookies and stores nothing in your browser. PostHog counts page views and taps on the store badges in cookieless mode: no cookie, no local storage, IP address discarded, no profile. The same visitor counts as new the next day. The site is hosted by Vercel.

What we never collect

Your name, email address, phone number, contacts, photos, or location.

Your device's advertising identifier, serial number, or any identifier issued by Apple or Google. The only ids involved are the two random ones the app creates itself, described above.

There is no advertising, no session recording, no data broker, and no selling or sharing of data for ads. We share nothing with your school, employer, or anyone else.

If you tap a phone number or a link, that call or page is handled by your phone like any other, outside the app.

The companies that do work for us

They act on our instructions, under their standard business terms, and only for the purpose named here.

• Vercel: hosts the server and the website (United States).
• Anthropic: its model Claude writes the guide's replies.
• Voyage AI: finds the passages in 3Joannes' material that match a message.
• PostHog: holds the usage counts.
• Expo: delivers app updates.
• Sanity: holds the app's wording and 3Joannes' material. It never receives anything about you.

Apple and Google deliver the app and may collect crash reports and statistics under their own policies and your phone's settings. If the law requires it, or to protect someone's safety, we may disclose what little we hold.

Where the data is

Everything that leaves your phone is processed in the United States. If you use the app from the European Economic Area, the United Kingdom or Switzerland, the transfer rests on the providers' data processing agreements, which include the European Commission's standard contractual clauses.

Legal basis (EEA and UK)

Messages to the guide are processed on the basis of your consent, given on the consent screen. You can withdraw it under You, "Stop sending to the guide"; the guide then asks again before anything is sent.

The usage counts and the message limits rest on our legitimate interest in keeping the service working and improving it, with as little data as possible and an Off switch for the counts.

How long

• On your phone: until you delete the app or clear its data.
• Your messages: not stored by us. Anthropic deletes them within 30 days, Voyage AI keeps nothing.
• Message limits: hashed counts that expire within a day.
• Usage counts: kept as counts, with nothing in them that identifies you. We review them once a year and delete what is no longer useful.
• Server logs: a short time, set by Vercel.

Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or receive a copy of personal data about you, to object to how it is used, and to complain to your data protection authority. California residents also have the right to know what is collected, to delete it, and not to be treated differently for exercising their rights. We do not sell or share personal information as California law defines those terms.

Because there is no account and nothing we hold identifies you, we usually cannot find anything to show or delete. What is on your phone is under your control: "Clear everything on this device" under You removes it. For anything else, write to care@3joannes.com and we will answer within the time the law allows.

Under 18

The app is written for adults supporting adults. The guide asks you to confirm that you are 18 or older before the first message.

The app is not directed at children under 13, and we knowingly collect no personal information from anyone, children included. If you believe a child's information has reached us, email us and we will delete it.

Security

Everything the app sends travels encrypted (HTTPS). Your conversations live on your phone, not on our server, and the server keeps no message content, so there is no store of conversations to lose. Access to our provider accounts is limited to the people who run the service. No system is perfectly secure; if something goes wrong that affects you, we will say so here.

Changes and contact

If this policy changes, the date at the top changes with it, and the new text appears in the app and on sexualassaultfirstaid.com. For a change in what leaves your phone, the guide asks for your consent again.

Questions: care@3joannes.com. Postal address: 3Joannes, Inc., 16192 Coastal Hwy, Lewes, DE 19958-3608, United States.