How we protect you.

What you write belongs to you. Not to us.

We do not sell your entries. We never will. We don’t hand your moods, your cycle data, or your body signals to advertisers — we don’t work with advertisers at all. There are no trackers, no ad pixels, and no data brokers anywhere in this app.

And your writing is never used to train an AI model. Not Anthropic’s. Not ours. Not anyone’s. Your journal is not raw material for a machine. It’s your journal.

Being vague here would be easy. We’d rather be specific.

Three companies touch your data, and each one only touches the part it needs to do its job:

• Anthropic — the company behind Claude, the AI that writes your reflections. When you ask for a reflection, that entry is sent to their API over an encrypted connection, read by the model, and answered. Anthropic’s terms say API data is not used to train their models. They don’t sell it.
• Stripe — handles payment, and only payment. They see your name, your email, and your card details when you subscribe. We never see your card number. Stripe doesn’t see a single word you’ve written. They don’t sell your data.
• Emergent — our hosting provider. They run the servers this app lives on, so your account and entries are stored on their infrastructure. That’s the same relationship every app has with its host. They don’t sell your data.

That’s the whole list. Nobody else. If that ever changes, we’ll tell you before it does — not after.

Nobody at Clarity Mirror can read your password. Not us, not an engineer, not anyone with database access.

The moment you type it, it’s scrambled into a one-way code (bcrypt, with a unique salt just for you). We only ever store the scrambled version. When you log in, we scramble what you typed and check if the two match. The real password is never written down anywhere.

Which is also why we can’t email it back to you if you forget it. We genuinely don’t have it.

Your writing is protected in two different moments.

While it’s moving. Everything travelling between your phone or laptop and our servers goes through an encrypted tunnel (HTTPS/TLS). Nobody sitting on your coffee-shop wifi can read it on the way.

While it’s sitting still. Before your entry is saved, we encrypt the text itself — and the reflection written about it. What sits in our database is scrambled code, not sentences. Anyone looking at the raw storage, on any host, sees nothing readable.

Your entries are encrypted with a key unique to your account.

You can walk out with everything, or erase everything. Both take about ten seconds, and both live in Settings.

• Take it all with you. Download a single file containing every entry you’ve ever written, every mood, every body signal, and every reflection. It’s yours to keep, forever.
• Erase it all. Delete your account and every trace of your data, permanently. No waiting period, no “are you sure” loop, no hidden copy kept in a drawer somewhere. Gone means gone.

You don’t need to ask us for permission, and you don’t need to explain why.

We hope this never happens. But if it does, you’ll hear it from us first.

If there is ever a security incident that affects your data, we will email you within 72 hours of confirming it. We’ll tell you exactly what happened, exactly what was affected, and exactly what we’re doing about it. No hiding it in a blog post. No quiet update to a policy page.