Your data & privacy
Nothing you create here is used to build a profile, train a model, or personalize what you see. The system does not track patterns across your sessions or analyze your writing over time. A few non-content preferences — a saved setup, an introduction you've already dismissed — may be remembered so returning feels familiar; never your words.
What you don't save doesn't persist. If you close a session and choose to discard, the content is removed entirely — not archived, not held anywhere, never treated as saved work. Draft state exists only to protect you from accidental loss; it is cleaned up automatically.
Deletion is complete. Deleting a reflection removes the text, any audio recording, and any shared copies — the files themselves, not just the references to them. Closing your account removes everything you hold, across all three spaces: reflections and recordings, your Connection cards, facets, connections, and canvas contributions, any live Studio scene, every shared snapshot and preference, and your account record. The system verifies the deletion completed before reporting success.
What backups can and cannot hold. Recordings, images, and exported files are never part of our database backups — once deleted, they are gone for good. The database is snapshotted daily and kept for up to eight days for disaster recovery, so text can sit in a snapshot for that long after deletion before it rotates out.
What you save, you control. You can download your reflections and recordings any time, and export everything you hold in a portable format. You can share what you make — a reflection, a card, a facet, a canvas — always by a deliberate step, and mostly take it back: revoking a link removes the shared copy, not just the link. (A card link also lapses on its own after 30 days; a card someone has already claimed is saved in their account and stays theirs.)
The AI does not know who you are. When AI is present, requests carry no identifier of any kind — not your name, email, account ID, session ID, or any pseudonym — and every request instructs the provider not to store it or use any part of it for training. Your words themselves may identify you if you write identifying details.