← Back to REFLCT

Privacy Policy

Last updated: 13 June 2026

REFLCT ("we", "us") builds a private voice-journaling app and this waitlist website (reflct.org). Privacy isn't a feature we bolt on — it's the reason the product exists. This policy explains, plainly, what we collect and what we never do.

1. What this website collects

If you join the waitlist, we collect only your email address, plus basic, non-identifying technical data your browser sends (e.g. approximate region, device type) that our hosting provider logs to keep the site running and secure.

2. Where your email is stored

Waitlist emails are stored with our email and spreadsheet providers solely so we can contact you about the launch. We keep them only as long as needed for that purpose, and delete them on request.

3. What the REFLCT app does (when it launches)

4. Cookies & tracking

This site uses no third-party advertising or cross-site tracking cookies. We may use a single browser storage value to remember that you already joined the waitlist, so we don't ask twice.

5. Your rights

Depending on where you live (e.g. the EU/UK under GDPR, or California under CCPA), you may have the right to access, correct, or delete the personal data we hold about you, and to object to its processing. To exercise any of these, email us and we'll honor it promptly.

6. Children

REFLCT is intended for adults. It is not directed at children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect their data.

7. Not medical advice

REFLCT is an emotional-wellness journaling companion. It is not a medical device and does not provide therapy, diagnosis, or treatment. If you are in crisis, contact your local emergency services or a crisis line such as 988 (US).

8. Changes & contact

We may update this policy as the product evolves; material changes will be reflected by the date above. Questions or requests: hello@reflct.org.

This is a plain-language starting policy provided to get you live. Before public launch, have a lawyer review it against your final data flows, providers, and the jurisdictions you operate in.