What happens to what you write.

Your vents, rewrites, triggers, and check-ins are visible only to you inside the app. There is no social feed, no public profile, and no sharing of your entries with other members.

Every private table is protected by row-level security, so one account cannot read another account's rows.

Traffic uses HTTPS/TLS. Stored data sits on managed infrastructure with encryption at rest. We do not claim end-to-end encryption — our systems can technically access stored content in order to run the product, and staff access is limited and controlled.

We hold no security certifications today, and we don't claim any.

When you use the Emotion Translator, Rewrite My Text, or a vent reflection, we send only the text of that one request plus the tone or intent you selected.

Your name, email address, billing details, subscription status, account identifiers, unrelated vent or trigger history, and other members' content are not sent to the AI provider.

We do not authorize the AI provider to train models on your private emotional content. Providers may retain requests briefly for abuse monitoring and security; we don't claim prompts are discarded the instant they are received.

We do not sell your private emotional content, and we never use vent, rewrite, translator, or trigger text to target advertising. Product analytics record only anonymous action events such as "cool down started" or "check-in completed" — never the content itself.

From Settings you can export your profile, check-ins, vents, rewrites, triggers, control score history, and subscription metadata. The export is generated for your authenticated session only.

Export your data →

Deleting your account removes your profile, check-ins, vents, rewrites, triggers, AI-derived records, and your sign-in credentials from our live systems.

Encrypted backups roll off on a fixed cycle, so deleted content can persist in backups for up to 30 days before it is overwritten. We restore backups only for disaster recovery, never to bring back a deleted account.

Delete your account →

Hosting and database (Supabase infrastructure), payment processing (Stripe — they receive billing data, never your entries), transactional email delivery, and our AI model provider for the text you submit to an AI tool.

The guardian-authorized experience for ages 13–17 is built but not enabled. When it launches, guardians will see account and consent status only — never a teen's vents, rewrites, translator text, or private notes.