Privacy Policy

Account information: your email address, used to sign you in and for account-related communication.

Optional profile information: your first and last name and date of birth, collected during onboarding. Your date of birth is only ever used to support the optional Personalise feature on the Reflect page — it can tailor guidance to your approximate age. Personalise is off by default, and you can turn it on or off at any time.

Your reflections: what you write, the AI’s response to it, the Iceberg breakdown it identifies (your conscious thoughts, underlying memories and beliefs, and deeper fears and needs), and any actions you choose to commit to.

Billing information: if you subscribe to a paid plan, payment is handled entirely by Stripe. We never see or store your card details ourselves.

Your reflection, the AI’s written response to it, the Iceberg breakdown, and any recommended actions are encrypted before they’re ever stored in our database. The encryption key is kept entirely separate from the database itself, so database access alone is never enough to read them.

This means your reflections are unreadable to anyone with only database access. It does not mean unreadable under every possible circumstance — someone with both database and application-level access (i.e. us, as the operators of this service) could technically still decrypt this data. We don’t do this as a matter of course, and reflections are never reviewed by a person as part of normal operation.

OpenAI processes your reflection’s text to generate its response — this is the core function of the app. If Personalise is on, your approximate age is included too; your name is never sent, regardless of this setting.

Supabase hosts our database and handles authentication.

Stripe processes payments for paid plans.

We don’t sell your data, and we don’t use any third-party analytics or advertising trackers.