What happens to what you write.

Your private entries are not visible to other LevelHeaded users. There is no social feed and no public profile. Limited authorized systems or service providers may process information when required to operate, secure, or support the service.

Every private table is protected by row-level security, so one account cannot read another account's rows.

You sign in with email and password or Google. Email addresses are confirmed before an account can be used, and passwords are handled by our authentication provider — we never see or store them in plain text. Each request to your data is checked against your signed-in session.

Traffic uses HTTPS/TLS. Stored data sits on managed infrastructure with encryption at rest. We do not claim end-to-end encryption — our systems can technically access stored content in order to run the product, and staff access is limited and controlled.

We hold no security certifications today, and we don't claim any.

When you use the Emotion Translator, Rewrite My Text, or a vent reflection, we send only the text of that one request plus the tone or intent you selected.

Your name, email address, billing details, subscription status, account identifiers, unrelated vent or trigger history, and other members' content are not sent to the AI provider.

We do not authorize the AI provider to train models on your private emotional content. Providers may retain requests briefly for abuse monitoring and security; we don't claim prompts are discarded the instant they are received.

We do not sell your private emotional content, and we never use vent, rewrite, translator, or trigger text to target advertising. Product analytics record only anonymous action events such as "cool down started" or "check-in completed" — never the content itself.

From Settings you can export your profile, check-ins, vents, rewrites, triggers, control score history, and subscription metadata. The export is generated for your authenticated session only.

Export your data →

Account deletion is initiated immediately. Personal content is removed from active production systems within 30 days. Encrypted backup copies rotate out within an additional 30 days and are not restored except for disaster recovery. Records required for tax, fraud prevention, legal holds or proof of consent may be retained only for their required period.

Delete your account →

Payments are processed by Stripe. Your full card number never reaches our servers. We keep only subscription status, plan, and billing-event metadata (such as renewal or cancellation dates) so we can give you access. You can cancel any time from Settings.

Hosting and database (Supabase infrastructure), payment processing (Stripe — they receive billing data, never your entries), transactional email delivery, and our AI model provider for the text you submit to an AI tool.