Your reflections deserve clear privacy choices.

1. Scope

This Privacy Policy explains how Reflect: Emotional Tracker (“Reflect,” the “App,” “we,” “us,” or “our”) handles information when you use the Reflect mobile application, this website, and related support services. Reflect is operated by Ignite-Soft and developed by DucHV.

Reflect is a self-reflection product, not a medical service. Do not use Reflect for emergency communication or as a replacement for professional medical or mental-health care.

2. Information we collect

Account and authentication information

Reflect creates a Firebase user identifier so the App can maintain a session. If you link an account using Google or Apple, we may receive your email address, display name when provided, authentication provider, and provider-specific identifier. We do not receive your Google or Apple password.

Mood and journal content

When you create a check-in, we process the mood you select, the note you write, check-in date and time, local calendar date, time-zone offset, and technical timestamps. This content provides your journal, calendar, summaries, and insights.

Feedback and support information

If you send feedback in the App, we process the category, optional title, message, request code, and up to five images that you choose to attach. If you allow us to contact you, the record may contain the email address associated with your linked account. If you email us, we receive your email address and message content.

Subscription information

If you view, purchase, restore, or manage Premium, Reflect and RevenueCat process an App user identifier, product and offering identifiers, purchase status, trial eligibility, entitlement status, and subscription expiration or management information. Apple or Google processes the payment. We do not collect or store your full payment-card details.

Usage, diagnostics, and device information

In production versions, Firebase Analytics records limited interaction events such as viewing the Premium screen, selecting a package, and purchase or restore outcomes. Firebase Crashlytics may process crash reports, stack traces, App and operating-system version, device model, diagnostic identifiers, and related technical data. Providers may also process IP address and request metadata to deliver their services.

Permissions and local settings

Reflect requests photo-library access only when you choose screenshots to attach to feedback. Notification permission is requested only when you enable daily reminders. Reminder time, language, theme, and similar preferences may be stored locally. We do not use advertising SDKs and do not request contacts or precise location.

Website information

This website does not currently include a contact form, advertising tracker, or custom analytics script. Vercel may process IP address, browser and device information, requested URL, timestamps, and server logs needed to deliver and secure the site.

3. How we use information

We use this information to:

• authenticate users and maintain App sessions;
• save, synchronize, display, and edit mood and journal entries;
• generate calendar views, summaries, and personal insights;
• provide and restore Premium entitlements;
• schedule reminders that you enable;
• receive feedback and respond to support requests;
• diagnose crashes, prevent abuse, and improve reliability;
• comply with applicable law and enforce our Terms of Use.

We do not sell your personal information. Reflect does not show third-party advertising and does not use journal text for advertising.

4. Service providers and disclosures

We disclose information only as needed to operate Reflect, process a request you initiate, protect the service, or comply with law.

We may disclose information when reasonably required by law, valid legal process, or to protect users, Reflect, or others. Information may also transfer as part of a merger, acquisition, financing, or sale of assets, subject to applicable law and continued protection.

5. International processing

Reflect and its providers may process information in countries other than where you live. Those countries may have different data laws. We use established providers and take reasonable steps to require appropriate protection for information processed on our behalf.

6. Data retention and deletion

Mood check-ins, journal notes, linked-account information, feedback, and attachments are kept while needed to provide your account and the features you use. When account deletion completes in the App, Reflect deletes the current Firebase account and associated mood check-ins, feedback records, and stored feedback attachments that it controls.

Provider backups, security logs, fraud-prevention records, crash and analytics records, and app-store transaction records may remain for the period set by the provider or as required for security, legal, accounting, or dispute-resolution purposes. We do not control Apple or Google purchase-history retention. Aggregated or de-identified data that no longer identifies you may be retained.

Delete inside the App

1. Open Reflect and go to Settings.
2. Select Delete account.
3. Review the explanation and confirm deletion.
4. Reauthenticate if the App asks you to confirm your identity.

If you no longer have the App, use our web account-deletion request. Deleting your Reflect account does not cancel an Apple App Store or Google Play subscription; cancel it separately in store settings.

7. Your choices and rights

• Account: manage sign-in or delete your account in Settings.
• Journal: review and edit supported entries inside Reflect.
• Notifications: disable reminders in Reflect or device settings.
• Photos: change access in device settings; only selected images are received.
• Subscriptions: manage or cancel through Apple or Google settings.
• Privacy requests: ask for access, correction, deletion, restriction, or a copy where applicable law provides those rights.

We may verify your identity before completing a request. Rights vary by location and legal exceptions may apply.

8. Security

We use reasonable safeguards designed to protect information, including authenticated access and provider security controls. No internet or storage system is completely secure, so absolute security cannot be guaranteed. Protect your device and linked accounts.

9. Children

Reflect is not directed to children under 13, and we do not knowingly collect their personal information. Where local law sets a higher age for consent, a parent or guardian must provide required permission. Contact us if you believe a child provided information without consent.

10. Changes to this policy

We may update this policy as Reflect changes. We will publish the new version here and update the effective date. Material changes will receive additional notice where required.

11. Contact us

For privacy questions or requests, email duchv2008@gmail.com. Use the subject “Reflect Privacy Request” and do not include sensitive journal text in your first message.

Operator: Ignite-Soft · Developer: DucHV