Privacy Policy

How your information is protected

Reflection Partner uses several layers of encryption:

• During transmission. Communication between the app and the service is encrypted using HTTPS.
• In database storage. Railway, which hosts the database, provides encryption at rest for its storage.
• For sensitive content. Reflection Partner adds another layer of encryption to sensitive text, including conversation messages, before storing it in the database.

The database backup process is also configured to use server-side encryption for backup files. No method of storage or transmission can be guaranteed completely secure.

Who can access your reflections

To prepare replies, Reflection Partner processes what you share and relevant earlier conversation material. Content needed for a response is sent to AI providers for processing. When you use voice features, speech providers also process the audio or text needed for transcription or spoken replies.

The service holds the key to decrypt stored content for this work. Conversations are therefore not end-to-end encrypted: Reflection Partner and the providers involved in preparing a reply can process readable content.

The system also permits limited authorized access to content for support, troubleshooting, security, and maintenance. The providers involved and the information retained are described below.

Information you provide

Depending on the features you use, this can include:

• your email address and account information, including information received from Apple or Google when you use those sign-in options;
• what you write or say, the replies you receive, conversation titles, corrections, and items you choose to keep;
• summaries and limited context derived from your conversations so the service can respond with relevant continuity;
• voice recordings while they are being transcribed, transcripts, and response text used to create spoken audio when you use voice features; and
• information you submit through the contact form.

Information collected as the service operates

Reflection Partner also processes account and session identifiers, app version and device information, feature activity, response and conversation identifiers, crash and diagnostic information, push notification tokens when notifications are enabled, advertising attribution supplied by Apple, and subscription status and purchase identifiers.

Operational records can include provider and model names, timing, status, token and usage counts, and encrypted copies of model requests and responses used for reliability and troubleshooting.

How information is used

Information is used to:

• create and secure your account and synchronize it across devices;
• form responses and provide conversation history and Kept;
• transcribe speech or create spoken versions of replies;
• verify subscriptions and provide paid features;
• deliver notifications you enable;
• understand feature use and advertising attribution; and
• diagnose failures, maintain security, and improve reliability.

Service providers

Information is shared with service providers only where their work is needed for a feature or for operating the service. Those categories include:

• AI model and embedding providers, which may include OpenAI, Anthropic, and Together AI;
• ElevenLabs for speech transcription and spoken audio;
• Railway and Amazon Web Services for application infrastructure, authentication, and backups;
• Amplitude and Sentry for app analytics and diagnostics;
• Expo for push-notification delivery;
• Apple for advertising attribution;
• Apple, Google Play, and Stripe for purchases and subscriptions; and
• Netlify for the public website and its contact form.

Providers and models can change as the service develops. They process information under their own infrastructure, terms, and retention practices. Information may be processed in the United States and in other countries where these providers operate.

Information may also be disclosed when required by law, or when reasonably necessary to protect users, the service, or others from fraud, abuse, or a security threat.

Retention and deletion

Conversation content and account information are generally retained while your account remains open, unless you delete particular material sooner. Some temporary processing records have shorter lifetimes. Other operational records are retained as needed for reliability, security, billing, and troubleshooting.

You can delete your account from the account area in the app. This removes the active account and most directly associated application data. Some encrypted operational records, recoverable backups, purchase or transaction records, and records held under a service provider’s own retention practices may remain after account deletion. A subscription must be cancelled separately through the store or service where it was purchased.

Analytics, cookies, and local storage

The static public information pages do not load Google Analytics or advertising trackers. When the Reflection Partner app runs on web or mobile, it uses storage needed for authentication, session continuity, preferences, and local app state. The app may use Amplitude to understand feature activity and Sentry to diagnose errors. Core reflection and transcript text are not intended to be included in routine analytics events.

Reflection Partner does not use data from the public website for interest-based advertising. Because it does not perform that kind of tracking, browser Do Not Track signals do not change the behavior of the public pages.

Your choices

You can edit or delete conversation material in the app, manage notifications in the app or device settings, and delete your account from the account area. You can also ask about access, correction, or deletion by using the contact form. Requests may be subject to identity verification and to records that must or may be retained for legal, security, transactional, or operational reasons.

Changes and contact

This policy may change as Reflection Partner develops. The date at the top of this page will be updated when the policy changes.

Questions about this policy or Reflection Partner’s handling of information can be sent through the contact form.