+ − →

Reflections

Privacy Policy

Last updated: September 1, 2026

Your privacy is of paramount importance to us. This Privacy Policy describes how Reflections collects, uses, and safeguards your information when you use our application.

1. Data Collection

When you use Reflections, we collect:

  • Account Profile: Email address, display name, and avatar provided via Google Sign-In or Email authentication.
  • Technical & Session Telemetry: Coarse device operating system category (iOS, Android, macOS, Windows, Linux), browser type, Progressive Web App (PWA) installation status, time zone, and session activity timestamps.
  • User Thoughts & Feedback (Optional): If you voluntarily choose to submit feedback through our in-app feedback prompt, we collect your message, selected category, client telemetry (OS, app version, color theme), and an optional email address if you choose to provide one for follow-up communication. Feedback records are stored in a secure database collection completely separate from your private journal entries.

If you use Guest Mode, all daily reflections remain stored solely in your local browser IndexedDB cache. No personal identification is gathered during guest usage unless you voluntarily supply an email address in the optional feedback prompt for a response from our team.

2. Data Storage and Security

Your daily reflections journal entries (Positives, Negatives, Next steps) are securely transmitted and stored in Cloud Firestore (Google Cloud Database). Only you have access to read and write your database entries, enforced by strict Firestore Security Rules. User feedback submissions are stored in an administrative-only feedback collection protected by server-side verification (Firebase App Check). We implement industry-standard administrative and technical security measures to protect all data from unauthorized access or disclosure.

3. Data Usage

We use your data solely to provide, run, and personalize your experience within the app (such as calculating streaks, delivering scheduled reminders, ensuring device compatibility, addressing feedback, and generating AI insights). Email addresses submitted with feedback are used strictly to reply to your inquiry. We do not sell, trade, rent, monetize, or share your journal entries or personal information with marketing brokers or third parties.

4. Account and Data Deletion

You have full control over your data. At any time, you can permanently delete your account and wipe all stored journal entries, stats, and session telemetry through the Settings panel in the application. This action is irreversible and immediately purges your records from Google Cloud.

5. Contact Us

If you have any questions or suggestions about our Privacy Policy, do not hesitate to contact us at [email protected].

Back to Journal