Last updated October 17, 2026
Cipher Haus, LLC, a Delaware limited liability company ("we", "us"), builds three services, referred to here as I, II and III. Each has its own Privacy Policy, and this page only summarizes them.
Service I is Driftbottle, operated by Cipher Haus, LLC. Its own Privacy Policy and Terms of Service are the complete ones for it, and where this page differs from them, they apply.
In short: you sign up with a username, an email address, and a password (stored as a salted hash, never in plain text), and can turn on two-factor authentication. Sign-up asks for the month and year you were born only to check your age, and doesn't keep them.
The app uses your precise location to show you bottles you can pick up and to leave one where you are, but it doesn't store your location. The only places kept are where bottles are, and a bottle you drop is kept at an approximate spot within 40 meters of where you left it. Other players never see coordinates or when a bottle was dropped; whoever picks up yours sees your display name or username.
When something is reported, a copy is kept for moderators, even if it's deleted afterwards. We don't sell your data or share it with advertisers. Deleting your account in the app deletes it and your content, apart from a few things listed on its account deletion page.
Service II is Next Step, operated by Cipher Haus, LLC. Its own Privacy Policy, Consumer Health Data Privacy Policy and Terms of Service are the complete ones for it, and where this page differs from them, they apply.
In short: you can use Next Step without an account, and your recovery data then stays on your phone. Crash reporting is on by default: it sends technical details when something goes wrong, and a small sample of performance measurements, but not your reflections or photos. You can turn it off in the app's settings. Apart from that, the only usage data the app sends is on Android: diagnostics that Google's ML Kit, which the app uses only to scan a clinician's QR code, sends to Google.
The optional Cloud Backup account, for people 13 or older, stores your data on our server. It's protected in transit, but it isn't end-to-end encrypted, so our service can read it. Clinicians you connect with see only the parts you allow, though your meal and snack check-ins and Nourishment Bridge check-ins, with their photos and what you wrote, are shared by default when you connect; you can change that. We don't check clinicians' identities or credentials, so only connect with someone you know and trust.
We don't sell your data. Next Step has no ads and doesn't track you across other apps or websites. You can delete your account in the app or by email, and erase the data on your phone in the app's settings. Some things aren't removed the way you might expect. For example, if you revoke a clinician's access, your messages with them are hidden but stay on our server until one of you deletes your account. Next Step's account deletion page lists what's deleted and what's kept.
Service III is Family Rosary, operated by Cipher Haus, LLC. Its own Privacy Policy and Terms of Service are the complete ones for it, and where this page differs from them, they apply.
In short: you sign up with your email address, a display name and a password (stored by Google Firebase as a secure hash), and must be 13 or older. Your family circle's members, recordings, novenas and intentions are visible only to the members of that circle, and a manager must approve anyone who asks to join. Recordings of your own voice are copied to each circle you belong to (you can turn this off for a circle), and your account keeps a private copy of them. The microphone is used only while you record, and recordings are only played back to your family: never used to identify voices or to train AI.
The data is stored with Google Firebase. Error reports go to Sentry with pseudonymous codes, not your name, email or recordings, and invitation and request-to-join emails are sent through Cloudflare and Resend. We don't sell your data, show ads, or use analytics or tracking. You can delete your account in the app or by email, and choose whether the recordings of your own voice go with it or stay with your family. Family Rosary's account deletion page lists what's deleted and what stays.
If you believe you've found a security issue in any of these services, please report it to [email protected] rather than filing a public issue or report.