Privacy Policy

Last updated: August 22, 2026. A plain-language summary, not legal advice.

What stays on your device

The apps you reflect on, the reasons you give in your own words, and your journal entries live only on your device. There is no account. Because we never hold your data, we cannot see it — and we cannot recover it if you delete the app. A device backup is the only copy.

The two things the app can send

Both are on by default, each has its own switch in Settings → Diagnostics & Data, and neither can ever include a word you wrote:

Crash and error reports. When the app breaks, we receive a technical report — what failed, where in the code, the app version, device model and OS. Personal data is scrubbed: no IP address, no name, no email, and never any recording of your screen. Failures use a fixed list of internal codes, not free text, so a report is structurally incapable of carrying your words. Processed by Sentry, in the EU.

Anonymous usage counts. Counts of fixed, named events like “finished onboarding” or “opened the weekly review” — never free text, never the name of an app you track. No advertising identifier, no cross-app tracking, no personal profile.

The weekly AI review

When the AI writes your weekly review, the app sends that week’s counts and reasons — in full — to the AI provider. This is the one time your own words leave your device. The request goes only to providers that keep nothing afterwards and don’t train on it; if no such provider is available, the app writes the review on your device instead.

The server

A small server does exactly two things. It checks your subscription receipt, if you subscribe, and hands back a usage-capped key so the app can generate weekly reviews — it never sees your reviews or reflections. What it stores is one opaque number Apple issues for your subscription (not your name, email, or Apple Account), so it can hand out one key per week rather than an unlimited supply.

It also records whether each week’s review was written — one of three words: written, nothing-to-say, or failed — so we can tell that everybody who paid actually got their review. That record never includes any part of the review itself (there’s no field for it, on purpose) and is deleted after about three months.

Reporting a problem

The Report a problem button opens a prefilled email in your own mail app — the app sends nothing itself. You can read, edit, or delete every part before sending. The prefilled part contains only technical details (app version, OS major version, crash summaries), never the apps you track or anything you wrote or spoke. Sending it shows us your email address; reports go to our support inbox and are never public.

This website

The site uses cookieless analytics (Plausible) that counts page views without storing anything on your device or tracking you across sites, and error reporting (Sentry) with personal data scrubbed. Both keep data in the EU. Nothing is stored on or read from your device — which is why there’s no cookie banner.

What we never do

No advertising. No advertising identifier. No selling or sharing of your data. No cross-app or cross-site tracking. No personal profile. No session recording. And we never receive the words you write or speak in the app — not on our server, not in any log. The one place they go is the AI provider, for your weekly review, as described above.

Deleting your data

Delete the app and your reflections go with it. There is no copy anywhere else, so there is nothing to request and no one to ask.

Changes

If a future version ever collects or transmits more than what’s described here, this page will be updated before that happens — and anything touching sensitive data will be opt-in.

Questions? Email hello@impulsemirror.com or visit Help & Support.