# Privacy Policy

Your feelings are yours. Here's how we keep it that way.

Effective Date: February 10, 2026

The short version: Reflect is built around privacy. Your mood data stays on your devices and in your personal iCloud account. We don't have user accounts, we don't sell data, and we can't read your entries. We collect anonymous usage analytics to improve the app — and you can opt out at any time.

## 1. Who We Are

Reflect is developed and operated by 88 Oak Apps ("we", "us", "our"). This Privacy Policy explains how we collect, use, and protect information when you use the Reflect app for iOS and watchOS ("the App").

## 2. Data That Stays on Your Devices

The core of Reflect — your mood entries, notes, and photos — is stored locally on your device using Apple's SwiftData framework. If you have iCloud enabled, this data syncs automatically through your personal iCloud account via Apple's CloudKit.

- Mood entries — your daily mood rating (Great, Good, Average, Bad, Horrible)
- Notes — any text notes you attach to entries
- Photos — any images you attach to entries
- Streak data — your voting streak history

We never have access to this data. It is stored on-device and, if iCloud is enabled, encrypted and synced by Apple. We cannot read, access, or recover your mood data.

## 3. HealthKit Data

If you grant permission, Reflect can integrate with Apple HealthKit to read and write mindful minutes and mood data. HealthKit data is governed by Apple's strict privacy policies and is never shared with us or any third party. We do not use HealthKit data for analytics, advertising, or any purpose other than displaying it to you within the App.

## 4. Anonymous Analytics

We collect anonymous usage analytics to understand how people use Reflect and to improve the app. This is handled through a self-hosted instance of PostHog, an open-source analytics platform, running on our own servers.

### What we collect:

- App usage events — which screens are viewed, which features are used (e.g., changing a theme, logging a mood), and how the app is navigated
- App preferences — which theme, icon pack, voting layout, and visual style you've selected (sent as aggregate properties, not tied to an identity)
- Device information — device model, OS version, app version, screen size, and locale
- Session data — session duration, app foreground/background events
- Performance data — network request timing (URLs and status codes, no request/response bodies)

### What we do NOT collect:

- Your name, email, or any personally identifiable information
- Your mood entries, notes, or photos
- Your iCloud account information
- Your HealthKit data
- Your location
- Contacts, calendar, or any other personal data

All analytics are collected anonymously. We do not create user accounts and do not link analytics data to any identity. Each device generates a random anonymous identifier that cannot be traced back to you.

### Session Replay

Reflect may use PostHog's session replay feature, which captures anonymized visual recordings of app sessions to help us identify usability issues. Session replays do not capture text input, personal data, or mood content. This feature can be disabled at any time within the App. We may also disable it remotely if needed.

### Opting Out

You can opt out of all analytics at any time in the App's Settings under the Privacy section. When opted out, no analytics data is collected or transmitted.

## 5. How We Use Your Information

- To provide and improve the Reflect app experience
- To understand how features are used so we can improve them
- To identify and fix bugs and performance issues
- To develop new features based on usage patterns

## 6. Subscription and Purchase Data

Reflect offers optional paid subscriptions ("Reflect+") managed entirely through Apple's App Store and StoreKit. Payment processing is handled by Apple. We do not collect or store your payment information, Apple ID, or billing details.

We receive anonymized subscription status information (e.g., whether a subscription is active, in a trial period, or expired) solely to unlock premium features within the App.

## 7. Data Sharing

We do not sell, rent, or share your personal data with third parties. Period.

- No advertising networks — Reflect contains no ads and no ad tracking
- No data brokers — we never sell or provide data to third parties
- No social networks — any sharing features are initiated by you and use Apple's native share sheet

Our analytics data is processed on our self-hosted servers and is never shared with external analytics providers.

## 8. Third-Party Services

- Apple CloudKit: Used for syncing your personal data across devices (if iCloud is enabled). Subject to Apple's Privacy Policy.
- Apple StoreKit: Used for in-app purchases and subscriptions. Payment processing is handled entirely by Apple.
- Apple HealthKit: Used for reading and writing health-related data with your explicit permission. Subject to Apple's Privacy Policy.

## 9. Data Storage and Security

Your mood data is stored on-device using Apple's encrypted storage. If iCloud sync is enabled, data is encrypted in transit and at rest by Apple's CloudKit infrastructure.

Anonymous analytics data is stored on our self-hosted PostHog instance, which is secured with industry-standard encryption and access controls.

## 10. Data Retention

- Personal data — stored on your device and iCloud account indefinitely, or until you delete it. Deleting the app removes local data; iCloud data can be managed through your iCloud settings.
- Analytics data — retained for up to 24 months, then automatically purged.

## 11. Your Rights

Because we don't collect personally identifiable information, most traditional data rights (access, portability, deletion) are handled directly through your device and iCloud account. You have full control over your data at all times.

You can:

- Delete any or all mood entries within the App
- Delete the App and all local data at any time
- Manage iCloud data through Apple's iCloud settings
- Opt out of analytics in Settings > Privacy
- Disable session replay within the App's settings
- Revoke HealthKit permissions through iOS Settings at any time
- Contact us to ask what data we hold about you (which is none, since analytics are anonymous)

## 12. Children's Privacy

Reflect is not directed at children under the age of 13. We do not knowingly collect any information from children. Since we don't collect personal information from any users, there is no risk of children's data being stored or processed.

## 13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of the App after changes constitutes acceptance of the updated policy.

## 14. Contact

If you have questions about this Privacy Policy or our privacy practices, contact us at:

support@88oakapps.com