Data Handling

Moments are user-only. The product does not give practitioners access to raw moments, and it does not use moment content for analytics.

User content is stored in Supabase Postgres with row-level security and is encrypted at rest by the hosting provider. Exports are written to private Supabase Storage paths and delivered by signed links that expire after 24 hours.

AI-provider calls to Anthropic or OpenAI are made server-side only for extraction, reflection, assessment interpretation, distillation, and related user-requested outputs.

The app does not train models on user data. Legal review is required before launch.