Your data belongs to you.

What we collect

We only collect what we need to give you a meaningful reflection experience:

• Account information — your email, name, and password (encrypted).
• Reflection responses — the words people share when responding to your invitations.
• AI-generated reflection letters — the woven letters our AI creates from those responses.
• Invitation metadata — the email addresses you invite and whether the invitations were opened.
• Anonymous responses — when someone chooses to respond anonymously, we deliberately do not store their identity.
• Referral activity — which invitations led to new accounts (so we can quietly say thank you).
• Basic technical logs — timestamps and error information used to keep the product reliable.

We do not sell your data. We do not run ad networks on your reflections. We do not train third-party AI models on your data.

Why we collect it

Only for these reasons:

• To create and deliver your reflection.
• To generate your AI Reflection Letter.
• To keep your account secure.
• To improve the product over time based on aggregated, non-identifying patterns.

How it's protected

• Data is transmitted over encrypted (HTTPS) connections.
• Data is stored on managed infrastructure with encryption at rest.
• Access is restricted by row-level security, so people can only see what they're meant to see.
• Anonymous responses stay anonymous — even to us.

You are in control

Your ownership

Your reflections are yours. You can archive them, delete them, or export them.

Data deletion

Deleting a reflection removes it and its responses from our systems. Deleting your account removes your profile and everything tied to it. Backup copies naturally expire within a short window.

Data export

A downloadable export is coming in a future chapter. In the meantime, write to us and we'll prepare one for you personally.

Third-party services

We use a small number of trusted providers to run the service: managed cloud infrastructure for storage and authentication, and AI providers that help weave your Reflection Letter. These providers are contractually bound to handle your data confidentially and never to train their models on it.

Cookies and analytics

We keep tracking to a minimum. We use only the cookies needed to keep you signed in and to remember your preferences. If we ever add analytics beyond this, we'll say so clearly on this page — and only ever with aggregated, non-identifying data.

Your legal rights

Wherever you live, you have the right to access, correct, delete, or export your data, and to withdraw consent at any time. We follow the principles of the Singapore Personal Data Protection Act (PDPA) and the EU General Data Protection Regulation (GDPR) — regardless of where you are.

Children

Through Their Eyes is not intended for children under 16. Please don't create an account for anyone under that age.

Changes to this policy

If we ever update this policy in a way that changes how your data is handled, we'll let you know before it takes effect.

Contact

The best way to reach us is through our contact form. Every message goes directly to a real person.