Privacy Policy

Version 1 · Effective 18 July 2026 · This document also serves as the privacy notice referenced at sign-up.

1. Who we are

Reflow is a private journaling app with an AI reflective companion. A contact address for anything in this policy will be published here before the app is available to the public.

2. What we collect

• Account — your email address and sign-in credentials (or your Google/Apple sign-in identifier).
• Journal content — the entries you write, photos you attach, moods, and the "Facets" (roles) you create.
• AI conversations — your reflection chats with the AI companion.
• App settings — language, reminder time, notification token (if you enable push notifications).
• Crash diagnostics — when the app crashes or hits an unexpected error, we receive a technical report (error type, the code path that failed, device model, OS version, app version) through Firebase Crashlytics. These reports are deliberately built to exclude your journal: entry text, AI conversations, photos, and links to your media are stripped before an error is reported, so a crash report tells us what broke, never what you wrote.

We do not collect your contacts, precise location, or advertising identifiers.

3. Voice stays on your device

Voice dictation is transcribed on your phone by the operating system. The audio is never uploaded — only the text you choose to post is stored.

4. How the AI works with your data

To generate reflections, relevant excerpts of your entries are sent securely to our AI provider (Anthropic). Under their API terms, this data is not used to train AI models. Every AI conversation also passes through automated safety screening. You can turn the AI companion off entirely in Settings — journaling works without it.

5. Storage, security, and international transfers

• Data is encrypted in transit (TLS) and stored on Google Cloud infrastructure in the Singapore region.
• When you use the AI companion, relevant excerpts are processed on Anthropic's servers in the United States.
• These cross-border transfers are made only to providers bound by contractual data-protection obligations, as permitted by Thailand's PDPA (s.28) and equivalent laws. By using Reflow you acknowledge these transfers.
• Your biometric unlock and app PIN are processed and stored on your device only.

6. Who we share data with

Reflow is private by design — there is no sharing, no followers, and no public content. We never sell your data or share it for advertising. Data is processed only by the service providers that run the app (cloud hosting, the AI provider above, and Google Firebase for sign-in and crash diagnostics), and disclosed only if the law requires it.

7. Retention and deletion

You can delete individual entries, or your entire account, inside the app at any time. Deleted data is removed from our production systems immediately and cleared from backups within 30 days.

8. Your rights and our legal bases

We process your data on these legal bases: performance of the service you signed up for (account, entries, sync), your explicit consent (sensitive data in your journal, AI processing), and our legitimate interest in keeping the service secure.

Depending on your jurisdiction (including Thailand's PDPA and the EU's GDPR), you may have the right to access, correct, export, or delete your data, to withdraw consent, and to object to or restrict processing. Email us and we will act on your request. You also have the right to lodge a complaint with your supervisory authority — in Thailand, the Personal Data Protection Committee (PDPC, สคส.).

9. Age and parental consent

Reflow is for people aged 16 or older. Under Thai law the age of majority is 20: if you are 16–19, you confirm that a parent or legal guardian has consented to your use of Reflow and to the processing described in this policy (PDPA s.20). We may suspend accounts where we learn this consent is missing.

10. Changes to this policy

If we change this policy in a meaningful way, we'll notify you in the app and ask for renewed consent where required. The version and effective date at the top always identify the current document.

นโยบายความเป็นส่วนตัว

เวอร์ชัน 1 · มีผล 18 กรกฎาคม 2026 · เอกสารนี้คือประกาศความเป็นส่วนตัวที่อ้างถึงตอนสมัครใช้งาน