Privacy Policy

Last updated: March 1, 2026

What we collect

When you create an account, we collect your email address and a password. When you use the app, we store the journal entries you write and any AI-generated insights, digests, or reflections produced from those entries.

How we use your data

Your data is used solely to provide and improve the Reflections service. Journal entries are sent to AI providers (such as Anthropic or OpenAI) to generate insights and reflections. We do not sell, share, or use your data for advertising purposes.

Data storage & security

All data is stored in a Supabase-hosted PostgreSQL database with row-level security enabled. This means your journal entries and insights are only accessible to your authenticated account. Data is encrypted in transit and at rest.

Third-party services

We use the following third-party services:

  • Supabase — authentication and database hosting
  • AI providers (Anthropic, OpenAI) — generating insights from your journal entries
  • Vercel — application hosting

These providers process data as necessary to deliver the service. We do not share your data with any other third parties.

Data deletion

You can delete individual journal entries from the entry viewer. You can delete your entire account and all associated data from the Account settings page. Account deletion is immediate and permanent.

Your rights

You have the right to access, correct, or delete your personal data at any time through the app. If you have questions about your data, contact us at the email below.

Changes to this policy

We may update this policy from time to time. Changes will be reflected on this page with an updated date. Continued use of the service after changes constitutes acceptance of the updated policy.

Contact

If you have questions about this privacy policy, please email us at privacy@reflections.app.