Privacy Policy

Effective Date: July 20, 2026 · Last Updated: July 20, 2026

This app is operated by Rajat, an individual developer based in India.

1. Introduction

Welcome to Reflection ("the App"). This Privacy Policy explains what information the App collects, how it is used, and your rights in relation to it. By using Reflection, you agree to the practices described here.

Reflection is local-first: every log, entry, and photo you create is stored on your device and works fully offline. Signing in is optional and adds an encrypted-in-transit backup so you can restore your data on a new device. We do not sell your data to advertisers or share it with third parties for their own purposes.

2. Developer Information

3. Information We Collect

3.1 Information you create

Stored on your device always, and additionally in our backup database if you sign in:

• Log names, descriptions, and configuration settings
• Entry text, notes, and descriptions
• Duration, numeric values, and custom field data you enter
• Photos you attach to entries — stored locally, and uploaded to our media storage (Cloudflare R2) only if you're signed in
• Location data — only when you explicitly enable the Location field for a specific log

3.2 If you create an account

Signing in is optional ("Skip for now" keeps the App fully offline and local-only). If you sign in, we collect:

• Your email address, used to send a one-time sign-in code
• Your first and last name, if you choose to add them to your profile

We do not use passwords — sign-in is via a one-time emailed code only.

3.3 Crash and error data (Sentry)

If the App encounters an unhandled error, technical diagnostic data (device model, OS version, app version, a stack trace, and the screen you were on) is sent to Sentry, our crash-reporting provider, so we can fix bugs. This does not include your log/entry content.

3.4 Product analytics (PostHog)

We use PostHog to understand how the App is used — which screens are visited and which controls are tapped — so we can improve it. This is anonymous usage/interaction data (screen names, tap events, device type) and does not include your log/entry content.

3.5 If you contact us

• Feedback form: your message, and your email if you're signed in (so we can reply), is sent to the developer's inbox.
• Waitlist: if you join the waitlist, we store the email (and name, if provided) you submit.

3.6 What we never collect

• Payment information — the App has no purchases
• Advertising identifiers, or any data for advertising purposes
• Contacts, messages, or other apps' data on your device

4. How Your Data Is Stored

• On your device: every log, entry, and photo, always — this is the source of truth and the App works fully offline.
• In the cloud, only if signed in: an encrypted-in-transit backup of your logs/entries in a managed Postgres database (Render/Neon), and photos in Cloudflare R2 object storage.
• Sign-in codes are delivered by email via Brevo, our transactional email provider.

If you delete the App without ever signing in, your data is gone for good — we recommend signing in or using the export feature if you want a backup.

5. Location Data

Reflection may access your device's location only when:

• You have explicitly enabled the Location field for a specific log
• You are actively creating a new entry in that log

Location access is foreground-only and on-demand — the App never accesses location in the background, and location is captured only at the moment you save an entry. It is included in that entry's data (and therefore in your cloud backup, if signed in) like any other field you fill in.

6. Photos and Camera

If you enable the Photos field for a log, the App requests camera and/or photo library access only when you attempt to attach a photo. Photos are stored locally, and — if you're signed in — also uploaded to our media storage so they're included in your backup. We request only the minimum permissions necessary.

7. Your Controls

• Use the App entirely offline, forever, by choosing "Skip for now" at onboarding
• Sign out at any time — your on-device data is unaffected
• Permanently delete your account from Profile → Delete Account — this immediately and irreversibly deletes your account, cloud backup, and uploaded photos from our servers. Data already on your device is not affected.

8. Children's Privacy

Reflection is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child under 13 has used the App, contact us and we'll help delete the associated account/data.

9. International Users

9.1 European Union — GDPR

You have the right to access, delete, and export your data. Data you never sync to an account never leaves your device. For data tied to an account, contact us or use in-app account deletion. The legal basis for processing is your consent, given when you create a log/entry or choose to sign in.

9.2 United States — CCPA

Reflection does not sell your personal information. You may request to know what data we hold or have it deleted via in-app account deletion or by emailing us.

9.3 India — DPDP Act 2023

Reflection complies with India's Digital Personal Data Protection Act 2023. Where you sign in, we act as the data fiduciary for the account/backup data described above.

10. Third-Party Services

Reflection uses the following third parties, each only for the purpose described:

• Render / Neon — hosts the backup database
• Cloudflare R2 — stores uploaded photos
• Brevo — delivers sign-in code emails
• Sentry — crash/error reporting
• PostHog — product usage analytics

None of these providers may use your data for their own purposes — they process it solely to deliver the service to you. If this list changes, we'll update this policy and notify users in-app.

11. Data Security

We recommend using a device passcode or biometric lock and keeping your OS updated. Cloud data is transmitted over encrypted connections; no security measure is perfect, and we cannot guarantee the security of data on a lost, stolen, or compromised device.

12. Changes to This Policy

If this policy changes, we'll update the date at the top of this page and notify users through an in-app notice.

13. Contact Us

© 2026 Reflection.