PRIVACY & DATA
Care deserves confidentiality.
Here is a plain-language description of how the application is designed to handle personal reflection. This is a technical explanation, not a finalized legal privacy policy.
This application has not undergone independent security, privacy, or legal review. Site owners must publish a jurisdiction-appropriate privacy policy and verify the configured database, email provider, access controls, retention, and incident-response procedures before inviting real users to enter sensitive information.
What is collected
When email sign-in is enabled, the application stores your email address, account and session records, conversation membership, timestamps, and consented reminder scheduling metadata. Conversation titles and reflection answers are encrypted using an application-level key before storage in Cloudflare D1.
Who can see reflections
For a voluntarily shared conversation, one person's draft is not shown to the other while either person is still writing. When both people independently submit, both submitted reflections appear in the shared map. Submission locks the reflection. The application does not offer counselor access accounts in the current version.
Encryption and access
Encryption in storage is not end-to-end encryption. The server can decrypt an authorized request to show your content. Administrators with access to the application secret and database may also technically decrypt stored information. Email addresses and reminder metadata are not encrypted with the same application-level text encryption.
Reminders
Email reminders are optional and do not include the conversation title or your written reflections. They depend on the configured email service and an hourly scheduled check, so delivery is not guaranteed at the exact minute chosen. The anonymous Pause & Return quick guide does not send emails or transmit the phrase you select to the application's database.
Saved data, deletion, and backups
Users can remove their participation from a shared conversation, and the creator can delete an entire conversation from the active application database. Backups, security logs, and third-party email-provider metadata may have additional retention periods. Exact retention windows require final production configuration and a reviewed policy.
Your device
The installable site may cache only public interface files for faster access. It deliberately does not cache private API responses, written reflections, or authenticated conversation content for offline reading. Do not enter personal details on a shared or untrusted device.
Next steps
Before using this product publicly, complete independent privacy and safeguarding review, publish a formal privacy policy including contact information and rights requests, and verify live infrastructure with test accounts. See the safety guidance.