Your Privacy

Your entries are private. Other users can never see your journal, prayers, or personal details. This is enforced at the database level — not just in the app code.

Your data is never sold or shared. We don't have advertisers, data brokers, or third-party analytics that can see what you write.

Your data is never used to train AI. The AI that writes your reflections operates under commercial terms that prohibit using your content for model training.

The AI doesn't remember you between sessions. Each reflection is generated fresh. The AI reads your context to write that day's reflection, then the data is not retained beyond a short processing window.

Encryption at rest. All data is encrypted on our database infrastructure. Your most personal content — journal entries, prayers, reflection responses, and life details — is additionally encrypted with AES-256-GCM before storage. Even in a database breach, this content would be unreadable ciphertext.

Row-level security. Every database table enforces row-level security policies. Your browser session can only query rows that belong to you. This is a PostgreSQL-level guarantee, not application logic that could have bugs.

Audit logging. When our system accesses your encrypted data for reflection generation, that access is logged. There is no "browse all users" interface — accessing personal content requires an explicit action that creates an audit record.

AI data handling. Reflections are generated via Anthropic's Claude API under commercial terms. Your data is not used for model training. API inputs are automatically deleted after 7 days. We do not have a zero-data-retention agreement with Anthropic at this time — that requires a separate enterprise contract, which we plan to pursue as Reflect grows.

Scripture text. Every passage in Reflect is quoted from the Berean Standard Bible (BSB), which its publishers have dedicated to the public domain — no license or royalty is owed for its use, and no permission is required to reproduce it.

When you start a $6.99/month subscription, Stripe collects your name, email, and payment method. Reflect stores only the resulting Stripe customer ID, subscription status, and billing period dates — never your card number, CVC, or full payment details.

Retention. Subscription and billing records (the customer ID and status fields on your account) are kept while your account is active and for a reasonable window after cancellation so we can resolve disputes, honor refund requests, and meet tax-record obligations. Stripe retains payment records under their own policies. When you delete your account via the button below, we remove your subscription record from our database; Stripe's own records remain governed by their terms.

You can manage or cancel your subscription anytime at /billing.