Privacy policy

Your account

• Your name and email address, from Apple or Google when you sign in. If you use Sign in with Apple and hide your email, we get a relay address from Apple instead.
• Your Apple or Google sign-in id, so we know which account is yours.
• A profile photo, if you add one.
• Your language and time zone.
• If you use Sign in with Apple, a token from Apple, stored encrypted. We keep it only so we can disconnect Reflectize from your Apple ID when you delete your account.

Your age

• The age range you pick during setup. We never ask for your date of birth.
• If you pick 13 to 17, also your exact age and your country, so we can check the minimum age where you live and turn on the extra protections for people under 18.

Records of your choices and of account activity

• When you agreed to the AI notice and when you confirmed your age, each with the time and the IP address you used.
• A history of actions in your account, like creating an entry or changing your profile, with the time and the IP address. It never includes what you wrote.

Your journal

• Your entries, your chat messages and the AI’s replies.
• Photos you add (and videos, which earlier versions of the app allowed).
• Voice messages: only the text you send. We do not keep the recording (see “Voice messages and ElevenLabs”).

What Reflectize remembers

• The people, places, plans, calendar events, goals and notes it picks up from your entries.
• Other things you mention about your life: activities, interests, likes and dislikes, work or study, routines and pets.
• Health details you write about yourself. The rules are in What Reflectize remembers, and how to delete it below.
• The questions it prepares for you.
• A short summary of each day, and daily scores for joy, calm, stress and social.

Your setup answers

• What you would like Reflectize to help with, and how you heard about us.
• Your occupation.
• The challenges you pick: loneliness, sleep, anger, anxiety, low mood, grief or focus.
• The practices you pick: yoga, coaching, breathwork, prayer, a recovery program, exercise, a support group or meditation.

Only the age question is required. You can skip the others.

Your settings and your device

• Your notification and reminder settings.
• A device id, the device model, whether it is iPhone or Android, and a push token so we can send you notifications.

Purchases

• Whether you have an active subscription, and which plan. Apple or Google takes the payment, and we never see your card details.

App usage and crash reports, only if you allow them

• A small set of app events, for example finishing setup, opening the subscription screen or buying a plan. Firebase adds its own basic events, like the first time you open the app, with your phone model, system version, app version, language and an approximate location worked out from your IP address.
• Crash reports: the type of error, where in the app it happened, and device details like the phone model and system version.
• None of this includes what you write, and the app does not collect an advertising id. You can turn it on or off in Settings at any time.

Support messages and reports

• The emails you send us and our replies.
• The messages you send us in Talk to the team, in the app’s Settings, and our replies. Talk to the team does not use AI.
• If you report an AI reply: which reply it was, the reason you picked, and a note if you choose to add one.
• If you also turn on “Send this chat to the team” when you report a reply: our team can read that reflection’s chat, your messages and Refy’s, up to the reply you reported, without photos. It is off unless you turn it on, and we can read the chat for 90 days after the report. Reporting the same reply again without it stops the sharing.

What it remembers

• People and places you write about.
• Your plans and goals.
• Other things about your life: activities, interests, likes and dislikes, work or study, routines and pets.
• Health details you write about yourself (see below).

Health details

• Reflectize keeps a health detail only when you write it about yourself, for example a migraine, a knee injury, trouble sleeping or therapy sessions. It keeps it in your own words.
• It never guesses health details from your mood or the way you write, and it never writes down a condition you did not name yourself.
• It does not keep health details about other people.
• It never keeps thoughts of self-harm or suicide as something to remember. Those messages are covered by the safety check in “Automatic features” below.
• Refy can take a health detail into account in a later chat when it fits what you are writing about. Apart from that, the app shows your health details only on the What Reflectize remembers screen in the phone app’s Settings. They are never shown on Insights or in the list of things picked up from a reflection, and they never go into notifications, app usage data, crash reports or our server logs.
• A plan you write about, such as a doctor’s appointment, is kept like any other plan and can show in your calendar.
• If you are under 18, Reflectize does not remember health details or plans about your health for you.
• On a day you wrote about your own health, that day’s summary can get the topic “Health”, so Insights can show that it came up often. Insights shows only the word “Health”, never the details. Day summaries of people under 18 never get this topic.

See, rename and delete

• In the phone app’s Settings, open What Reflectize remembers to see everything it remembers, health details included. You can rename people, places and other things, and delete anything you do not want Reflectize to keep.
• When you delete something there, it is removed from what Reflectize remembers and Refy stops using it. Your reflections and day summaries stay as they are, and if you write about it again, Reflectize may remember it again.
• Deleting your account deletes everything Reflectize remembers.
• Export my journal in Settings includes what Reflectize remembers, health details included.

What we send to Anthropic

• What you write in a chat, and the earlier messages in that same chat.
• Photos you attach.
• Your first name, language, time zone, the day of the week and your local time.
• What Reflectize remembers (people, places, plans, events, goals and other things, including health details you wrote about yourself), and summaries of your past days.
• Your goals, calendar events and notes, so Refy can suggest changes to them (see “Changes Refy suggests” below).
• Some setup answers: what you want help with, your occupation, and the challenges and practices you picked. Never how you heard about us.
• Whether you are under 18, so the AI can keep its replies suitable for your age. Never your exact age.

What Anthropic does with it

• Anthropic processes it for us, under its commercial terms and data processing terms.
• Under those terms, Anthropic may not train its models on what we send.
• Anthropic deletes what we send within 30 days. If its safety systems flag a message as breaking its usage policy, it can keep that message for up to 2 years, and its safety rating for up to 7 years. It can also keep data longer when the law requires it.

Changes Refy suggests

• In a chat, Refy can look at your goals, calendar events and notes and suggest adding, changing, ticking off or deleting one. They are sent to Anthropic’s Claude API like the rest of the chat.
• Refy shows each suggestion as a card in the chat. Nothing changes until you say yes on that card. If you tap “Not now” or do not answer, nothing changes.
• Each suggestion and your answer are kept with the reflection. They are deleted when you delete the reflection or your account.

Voice messages and ElevenLabs

• If you are 18 or over, you can record a voice message in the chat instead of typing. The app asks for microphone access the first time you tap the mic, and it only listens while you record.
• The first time, the app tells you that the recording goes to ElevenLabs to be turned into text, and asks you to agree.
• Our servers send the recording to ElevenLabs, which turns it into text and sends the text back. We send only the recording, never your name, email address or account details.
• The text appears in your message box. You can read it, change it or delete it before you send it. Once you send it, it is a normal message and is handled like anything you type, including being sent to Anthropic for Refy’s reply.
• We do not keep the recording: not on our servers, not in our database and not in our logs. The app deletes it from your phone once the text is ready. If turning it into text fails, the app keeps it on your phone only until you try again or leave the chat.
• ElevenLabs processes the recording for us under its data processing terms. We have switched off the setting that lets ElevenLabs use our data to train its models. Right after we get the text, we ask ElevenLabs to delete it. ElevenLabs removes deleted data from its database straight away, but copies can stay in its backups for up to 30 days, and its debugging and moderation logs may keep some data about the request. ElevenLabs does not publish how long it keeps those logs.
• ElevenLabs stores data in the United States and may also process it in the EU or Singapore. Transfers out of the EU are covered by the Standard Contractual Clauses in its data processing terms, and transfers to the United States also by the EU-US Data Privacy Framework.
• Voice messages are not available to people under 18, because ElevenLabs does not accept voice recordings from or about anyone under 18.

Automatic features

• Replies, summaries and scores are written automatically by the AI, and the AI picks out what Reflectize remembers. Nobody at Reflectize writes or reviews them.
• Every message is checked automatically for signs that you may be in crisis. If a message suggests you may be in immediate danger, the app shows a fixed message with crisis helplines instead of an AI reply.
• When this feature is on, each day summary also gets up to 4 general theme tags, for example work, family or sleep, and whether each one came up as something good, something hard or neither. Anthropic’s Claude API picks them when it writes the summary. We use them only for your Insights, to show what keeps coming up.
• When this feature is on, Claude also writes a short weekly note about your patterns, from the last 4 weeks of your day summaries. It is deleted when you delete an entry or day summary it is based on. It is not made for people under 18.
• None of this makes decisions about you with legal or similarly serious effects. You can still object to it, or ask a person to look at it, by writing to [email protected].

Who can read your journal

Our team does not read your journal. A small number of engineers can reach the database to keep the service running. They look at journal content only if you ask us to, for example to fix a problem with an entry, or if the law requires it. When you send us a chat with a report, the people on our team who review reports can read that chat for 90 days.

In the app

• See and export: everything you write is in the app. In Settings, tap Export my journal to get a readable file (.md) or a data file (.json).
• What Reflectize remembers: in the phone app’s Settings, open What Reflectize remembers to see it, rename people, places and other things, and delete anything, health details included.
• Delete: in Settings, tap Delete account, or follow the steps on our account deletion page.
• App usage and crash reports: turn them on or off in Settings.

By writing to us

Depending on where you live, the law gives you some or all of these rights. Write to [email protected] and we answer within 30 days, free of charge. We may ask you to confirm the account is yours.

• Find out whether we hold data about you, get a copy, and get the data you gave us in a format you can take elsewhere.
• Correct data that is wrong or incomplete.
• Delete your data.
• Limit or object to a particular use of your data.
• Take back a permission you gave, such as your AI permission. After that, Reflectize cannot write replies or summaries or remember new things for you. You can still read your past entries, export them and delete your account. Taking it back does not affect what we did before.
• Find out which companies we shared your data with, in Türkiye or abroad, and ask us to tell them about a correction or deletion.
• Object to a result that goes against you and was reached only by automatic processing.
• Ask for compensation if you were harmed because we broke the law.

If you are not happy with our answer

You can complain to a data protection authority: in Türkiye, the Personal Data Protection Authority (KVKK); in the UK, the Information Commissioner’s Office (ICO); in the EU, the authority in your country. In the United States, if we turn down your request, you can appeal by replying to our answer, and if we turn down your appeal, you can contact your state attorney general. We would be glad to hear from you first.