How we handle your data
Plain English. Updated September 2026 · Policy version 2026-09
Who can see itOnly you. Our staff can't read your decisions unless you give written permission for a support case, which you can grant and revoke in Settings. Every access is logged.
AI trainingNever. Our AI provider is contractually barred from training on anything you write here. We send it only the text of the session, never your name or email.
AI in the productWhen you start, an AI model reads your first message to suggest an approach (or to ask one question if it isn't clear yet), which you can change. Suggestions, framings and challenges come from an AI model and are always labelled "AI suggested" until you accept them. It suggests; it never decides.
Health and personal mattersYou can think through anything here, including health, relationships and money. The first time a decision touches your health, we ask your explicit OK to store it; it's encrypted like everything else and only you can see it. We never use it for anything but your own journal.
If you're strugglingIf something you write suggests you or someone else may be in danger, we pause and show crisis lines for your country, based on your browser's language setting. Nothing is sent to anyone. This is a reflection tool, not a diagnosis, treatment, or financial, medical or legal advice.
Where it livesEU or US region, your choice. Encrypted at rest and in transit, and your decisions are encrypted again with a key that belongs to your account alone.
DeletingInstant in the app. Deleting your account destroys your key, so every copy, including backups, becomes unreadable at once. Backups are wiped within 30 days.
Shared linksOff by default. You can turn any link off at any time. Never indexed by search engines.
Guest modeStays on your device until you choose to save it, and clears itself after 7 days.
Base ratesOpt-in only. We use the decision type, your choice and the outcome score, never your words, names or company. Groups under 50 are never shown.
EmailsReview emails only when something is due, unless you choose the Monday brief. One-click unsubscribe in every email.
Selling or sharingWe don't sell or share your personal information, and we don't use advertising or tracking cookies.
Your rightsExport everything or delete your account from Settings at any time. To correct anything, edit it or choose Rethink on the decision. Questions go to [email protected].
See also Security and our subprocessors.