ZenReflect Privacy Policy

Last updated: 18 August 2026

ZenReflect is a personal reflection journal. It is built so that your entries stay with you: by default there is no account, no login, and no server holding a copy of your journal. Signing in is optional, and only turns on syncing between your own devices.

What ZenReflect stores, and where

Everything you enter — daily reflections, mood ratings, habits and their quantities, tasks, weekly reviews, reminder settings and your chosen language — is stored in the app's local storage on your own device. If you never sign in, that is the only copy that exists and we cannot read it.

Optional: syncing with a Google account

You can connect a Google account from Settings so that your journal follows you to another device and survives a reinstall. This is entirely optional and off until you turn it on. When it is on:

• What we store about you as a person — only the stable account identifier Google issues for ZenReflect (the sub claim), plus the dates you first signed in and last synced. We do not store your name, your email address, or your profile picture, and nothing in our database identifies you by them.
• What we store of your journal — a copy of the records you have written: entries, habits, tasks and weekly reviews, plus your language, reminder settings and the time each record was last changed. It is stored as you wrote it, so it is readable in principle by anyone with administrative access to the database. We do not read it, mine it, profile you with it, or use it to train anything.
• Where — in a Cloudflare D1 database, accessible only through our Cloudflare Worker, which serves each account only its own records.
• How the session works — Google signs you in on your device and the app hands the resulting token to our Worker, which checks it with Google and issues its own sign-in token, valid for 90 days and stored on your device. We never receive your Google password.
• Disconnecting — "Disconnect" in Settings stops the syncing and removes the sign-in token from your device. Your journal stays on the device. The copy on the server is kept, so that signing back in restores it; see Deleting your data to have it erased instead.

Backups you make yourself

Settings also offers an export that writes your whole journal to a JSON file, and an import that restores one. The file is created on your device and handed to you — through the browser's download or the Android share sheet — and it never passes through us. It is plain, unencrypted text, so keep it somewhere you consider safe. Importing a backup replaces what is currently in the app.

The AI features

Three optional features use Google's Gemini AI model. They are the only ones that send your journal content to Google:

• Weekly Retro insights — sends the entries of the week under review (mood, habits and quantities, and the reflection text) so the model can describe patterns.
• Zen chat — sends your message plus a short summary of your context (streak, average mood, active habit names, today's entry).
• Personalised reminders — sends the same short context summary to generate notification texts.

These requests pass through a proxy we operate on Cloudflare, whose only purpose is to attach our API key without shipping it inside the app. The proxy does not log or store request contents. Google processes the request under the Gemini API terms. If you never open these features and never sign in, nothing leaves your device.

So that these features cannot be abused at our expense, the proxy counts how many AI requests each installation makes and refuses any far beyond normal use. The count is kept against a random identifier the app generates for itself the first time it runs. It is not the advertising identifier, it does not follow you to other apps or sites, and it is never stored next to anything you wrote — only the number of requests is recorded, never their contents. Clearing the app's storage or uninstalling it discards the identifier for good.

Audience measurement

The website uses Cloudflare Web Analytics, which counts page views and where visitors arrived from, so we know whether the app is useful enough that people come back. It sets no cookie, stores no device identifier, and cannot follow you to other websites. The Android app loads no analytics at all.

What we do not do

• No advertising, and no advertising identifiers.
• No advertising SDKs, and no tracking across other apps or websites.
• No profile built from your entries, and no use of them to train AI models of our own.
• No selling or sharing of your data with third parties for their own purposes.
• No access to your contacts, location, camera, microphone, photos or files.

Permissions

The app requests internet access (for the AI features and, if you use it, sync) and, if you turn reminders on, permission to post notifications. Notifications are scheduled locally on your device.

Deleting your data

On your device. Uninstalling the app — or clearing its storage from Android Settings → Apps → ZenReflect → Storage → Clear data — permanently deletes the local copy.

On our server, if you signed in. Deleting a record in the app deletes it from the server too, on the next sync. To have the whole account and everything in it erased, email othman.bech@gmail.com from the address of the Google account you signed in with, with the subject "ZenReflect account deletion". The account row and every record belonging to it are deleted within 30 days, with no backup copy retained beyond that point. If you never signed in, there is nothing on our side to delete.

Children

ZenReflect is not directed at children under 13 and we do not knowingly collect data from them.

Not medical advice

ZenReflect is a journaling and wellbeing tool. It does not diagnose, treat, or provide medical advice. If you are struggling, please contact a qualified professional or a local support service.

Changes

If this policy changes, the date above is updated and the new version is published at this same address.

Contact

Questions about this policy: othman.bech@gmail.com