Privacy Policy

1. Information We Collect

We collect information necessary to provide and improve the Service.

2. How We Use Your Information

• 🧘
  To provide, maintain, and personalize the Service.
• 📈
  To develop new features and improve the Service through analysis of aggregated, anonymized trends.
• 📧
  To communicate with you about your account, including administrative messages, security alerts, and updates.
• 🔐
  To monitor and protect the security and integrity of the Service, including to prevent fraud and abuse.

3. Legal Basis for Processing

For users located in the European Economic Area (EEA) or the UK, we process your personal data on the following legal bases:

4. How We Share Your Information

We may share your information only in the following limited circumstances:

• Service Providers: We engage trusted third-party vendors to perform functions on our behalf (e.g., cloud hosting, data analytics, email delivery). These entities are bound by contractual obligations to keep your information confidential and use it only for the purposes we specify.
• Legal Obligations: We may disclose information if required to do so by law, such as in response to a valid subpoena, court order, or other governmental request.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred. We will provide notice before your information becomes subject to a different privacy policy.

5. Data Security

We implement industry-standard technical and organizational measures to protect your information. This includes encryption in transit (TLS 1.3) and at rest (AES-256), regular security assessments, and strict access controls. Your personal reflections are private by default and are not accessible by our team unless you explicitly share them for support purposes.

6. International Data Transfers

Your information is primarily stored on servers in Canada. In some cases, it may be processed in other countries, including the United States. When we transfer data outside of your jurisdiction, we ensure appropriate safeguards are in place — such as standard contractual clauses — to provide a level of protection equivalent to the laws of your home country.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. You may delete your account at any time through the Settings menu. Upon deletion, we will permanently erase your personal data from our systems within 30 days. Anonymized data that cannot be used to identify you may be retained indefinitely.

8. Your Rights & Choices

9. Children's Privacy

The Service is not intended for individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on our website and within the application, and we will update the "Last Updated" date. Your continued use of the Service after any change constitutes your acceptance of the revised policy.