Data Handling

Moments are user-only. The product does not give practitioners access to raw moments, and it does not use moment content for analytics.

User content is stored in Supabase Postgres with row-level security and is encrypted at rest by the hosting provider. Exports are written to private Supabase Storage paths and delivered by signed links that expire after 24 hours.

Processing requests to Anthropic or OpenAI are made server-side only for extraction, reflection, assessment interpretation, distillation, and related user-requested outputs.

The app does not train models on user data. Legal review is required before launch.