The person doing the work is the only valve.

Invitations flow in freely. A counselor can assign work. A mother can open a door. A sponsor can send a reading, a meeting commitment, four words: call me today, please. None of that requires permission, and none of it should.

But nothing flows out — not a mood, not a score, not a sentence — except on a deliberate, per-item, revocable act by the person doing the work. There are no exports. There are no report cards. There is no dashboard of anyone’s soul.

Applied, it reads like this.

Your counselor sees that work arrived — delivered, never completed — because completion is private by default. If you choose to share, they receive a structured clinical summary: what state you entered in, what state you left in, how long you stayed. Not what you wrote. The chart gets what the chart needs. Your words stay yours.

Your family sees a light. Someone you love is connected. Not your mood, not your graph, not an alert on your worst night. In return, they get something better than watching: a program of their own, because they are in recovery too.

Your sponsor sees what you grant, in a room that is watermarked and expires. Witnessed, not stored. And you can close that door silently, any time, and the closing needs no explanation — that is how sponsorship has always worked.

Why build it this way, when every incentive in this industry runs the other direction?

Because recovery requires a private interior. The work only happens where it cannot be overheard. A journal written for an audience is a performance; an inventory written for a reviewer is a defense. Surveillance doesn’t just fail to help — it corrodes the exact thing it is watching. The moment the watched person starts managing the watcher, the recovery has moved out of the room.

There is one asymmetry, and we will name it plainly rather than hide it in a settings page. Help is never gated — 988 and the crisis line are one tap away no matter your state, your settings, or your signal. And where a care team is connected, safety concerns reach trained clinicians through the consent you set on day one — never a relative’s phone, because a loved one’s panic is not a crisis plan.

Everything else — every word, every score, every bad Tuesday — belongs to the person who lived it.

We think this is the only honest architecture for recovery technology. Not because privacy is polite, but because it is clinical: the alliance survives only when the client controls the story of their own work. Any product that promises families a window, or clinicians a feed, is selling the corrosion and calling it connection.

One product, four doors, one valve.