Privacy Policy

Last updated: [Date]

This Privacy Policy explains how [Website/App Name] (“we”, “us”, “our”) collects, uses, stores, and protects your personal data when you use our website and self-reflection tools.

1. Who We Are

[Website/App Name] is operated by [Your Full Name].

Contact: [email]

We are responsible for the personal data described in this Privacy Policy.

2. What Data We Collect

Depending on how you use the Service, we may process:

Account information

• email address;
• account and authentication information.

Reflection content

• answers you provide while using reflection tools;
• completed reflections saved to your History;
• dates and information associated with your reflections.

Technical information

• information necessary for the security and operation of the Service, such as IP address, device or browser information, and technical logs.

Communications

• information you provide when contacting us.

We aim to collect only the information necessary to provide and maintain the Service.

3. Please Do Not Provide Sensitive Personal Data

Our reflection tools are designed for exploring everyday emotions, thoughts, reactions, relationships, and decisions.

They are not designed to collect medical or clinical information.

Please do not enter information about:

• medical or mental health diagnoses;
• medications or medical treatment;
• medical records;
• sexual life or sexual orientation;
• racial or ethnic origin;
• political opinions;
• religious or philosophical beliefs;
• trade union membership;
• genetic or biometric data.

Please also avoid entering unnecessary personal information about other people, such as their full names, addresses, contact details, or other identifying information.

If sensitive information is entered voluntarily despite this request, we may delete or restrict such content where reasonably possible.

4. How We Use Your Data

We may use your personal data to:

• create and manage your account;
• provide access to the reflection tools;
• save your completed reflections and make them available in your History;
• maintain, secure, and troubleshoot the Service;
• respond to your requests;
• prevent misuse or security incidents;
• comply with applicable legal obligations.

We do not use your reflection answers to provide medical diagnoses, psychological assessments, or treatment.

5. Legal Basis for Processing

We process personal data only where there is an appropriate legal basis, including where processing is necessary to provide the Service, comply with legal obligations, protect legitimate interests related to the operation and security of the Service, or where you have given consent when consent is required.

6. How Long We Keep Your Data

Your reflections are stored in your History for 90 days and then deleted automatically. You can delete an individual reflection or your account earlier. Journal entries are kept until you delete them or your account.

When you delete an individual reflection, it is removed from your account.

When you delete your account, your account information and reflection History are deleted.

Certain limited information may be retained for a short period where technically necessary for backups, security, fraud prevention, or compliance with legal obligations. Such information will not be kept longer than necessary for those purposes. Payment records, including invoices and your customer record at our payment provider, are kept for as long as tax and accounting laws require, also after you delete your account.

7. Service Providers

We may use trusted third-party providers to operate the Service, for example for:

• hosting and cloud infrastructure (Vercel);
• authentication and database storage in the EU (Neon);
• email delivery (Resend);
• payment processing (Stripe);
• product analytics in the EU, only with your consent (PostHog);
• security and error monitoring.

These providers may process personal data only as necessary to provide their services to us and subject to appropriate data-protection safeguards.

We do not sell your personal data.

8. Cookies and Analytics

We may use cookies or similar technologies that are strictly necessary for the website to function.

With your consent, we use PostHog product analytics, hosted in the EU, to understand how the Service is used. We never send the content you write, and we do not record sessions. Until you choose, nothing is stored on your device; if you decline, visits are only counted without cookies. You can change your choice at any time with “Analytics settings” in the site footer.

More information may be provided in a separate Cookie Policy or cookie settings.

9. Your Rights

Depending on applicable data protection law, you may have the right to:

• access your personal data;
• correct inaccurate data;
• request deletion of your data;
• restrict certain processing;
• object to certain processing;
• receive certain data in a portable format;
• withdraw consent where processing is based on consent;
• lodge a complaint with the relevant data protection authority.

To exercise your rights, contact us at [email].

10. Security

We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration, or disclosure.

However, no online service can guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy when the Service, our data practices, or applicable legal requirements change.

The current version will be available on the website together with the date of the latest update.

12. Contact

For questions about this Privacy Policy or your personal data, contact:

[email]