How Reflct handlesyour data

Your Vault, on your Mac

Your Vault is the sources you add to Reflct on your Mac. Each is off until you add it, has its own switch, and stays on your Mac. Passwords and keys for them stay in the macOS Keychain.

• Messages and Recordings: see below.
• Contacts: names, numbers and email addresses.
• Calendar: your events, without their notes, from macOS Calendar or Google. Reflct adds an event only when you tap Add to calendar, and never changes or deletes one or invites anyone.
• Email: from Gmail, if you add it.
• Other sources: ChatGPT and Claude history (from the Chrome extension or an export file), WhatsApp, Screen Time, Chrome history and Claude Code or Codex sessions (each a folder you pick), and Granola (with your key).

Messages

Your messages and attachments stay on your Mac. You give Reflct the Messages folder with the macOS folder picker and can take it back at any time. Reflct does not need Full Disk Access and never changes anything in Messages. Message text reaches Reflct's server only in things you choose to send, listed under What goes to Reflct.

Recordings

• Where they live: on your Mac. Audio is kept 7 days unless you pick longer or star it; transcripts stay until you delete them.
• Speech to text: on your Mac, or through Deepgram under your own account if you add your Deepgram key.
• Who spoke: voices are matched on your Mac. Voiceprints are numbers kept only there, and you can forget any of them.
• Understand my recordings, off until you turn it on, uses Claude or ChatGPT on your own account to note who was there and write a recap. It stays on your Mac and in the copy for your iPhone, if that is on.
• Call recordings: with your Apple Notes folder, Reflct copies call transcripts to your Mac; the audio stays in Notes.

Some places require everyone to agree before a conversation is recorded; getting that consent is up to you (see our Terms).

Google

Sign in with Google gives Reflct your name and email for your account. In the Mac app you can also add Google Calendar and, as a separate step, Gmail. What they bring stays on your Mac, and removing the Google account deletes it there.

• Calendar: your list of calendars and access to read and add events. Reflct keeps the calendars you pick, from two weeks back to two months ahead, without descriptions.
• Gmail: read-only, so Reflct cannot send, change or delete mail. It keeps conversations with real people from the last 90 days on, as plain text, without attachments. Spam, promotions, social and forum mail stay in Gmail.
• Use: only to show you your people, plans and follow-ups, including through Claude or ChatGPT on your own account; never sold or used for ads. Our team does not view it except as Google's policy allows (with your permission, for security, or by law). Revoke access at myaccount.google.com/permissions.

Who can use your Vault

Claude or ChatGPT, on your own account, or an API key you add, including Talk. Requests go from your Mac straight to that company with what one task needs. What it keeps, and whether it may train on it, follows your account's settings; some consumer plans allow training by default. Reflct never holds that sign-in.

Apps you connect, such as Claude Desktop, Claude Code or Codex, once you say yes, under your account with that app's company. Sensitive items are left out unless you include them. You can narrow or remove an app under Vault, Access, where Activity lists each use. A connected app can also ask for the docs your account keeps on Reflct's server.

People you leave out are left out of all of this.

What goes to Reflct

For an account on the current Mac app, this is the full list.

Always

• Your account: the name and email from your Apple or Google sign-in, and a phone number if you link one.
• Billing: your plan and its status. Payments go through Stripe or Apple; we never see your card number.
• A check that the app is running: app version, platform, a random id for this Mac, your sharing choice, whether Reads on this Mac are ready, the day you last opened Reflct, and whether setup worked (how far the first setup got, in minutes and counts, and why it stopped if it did). No content. The first one also sends PostHog a one-time "Mac app installed" event.

Unless you turn it off

• Error reports and usage: see the next section.

Only when you choose it

• The copy for your iPhone, so your phone and the website can show it: your people (names, numbers and email addresses), plans and follow-ups, your Today, People and Me cards, and short quotes from your messages (at most 280 characters each, and you can turn them off). Sensitive items are left off unless you include them. Reflct's server can read this copy; turning it off deletes it.
• Things you share, one tap at a time. A share, which may include audio, is encrypted on your Mac with the key only in the link, so Reflct holds a file it cannot open. If you approve a preview for the link, its title, first names, one line and photos are not encrypted, so Messages can show them. Links last 30 days unless you choose otherwise; revoking one deletes it. For a specific recipient we keep a one-way coded form of their number or email.
• Captures and questions from your iPhone: sealed on the phone so only your Mac can open them, and held until your Mac collects them, at most 30 days.
• A Read you order: some paid Reads are made on Reflct's server and say before you pay which messages they need. Those are deleted within 24 hours; quoted passages stay until you delete the Read.
• A bug report you send: your note, the app version and basic device details, plus a screenshot or the open Talk conversation only if you tick it.

Error reports and usage

The Mac app's Share error reports and usage switch, in Settings, is on unless you turn it off. It is tied to your account and tells us whether Reflct works for you.

• What it sends: errors, crash and hang logs, failed runs, setup steps, speed, which features you use and for how long, and how calls to your Claude or ChatGPT account went (count, time, model, tokens).
• Never: message text, names, contact details, titles, file paths, prompts or answers. The server accepts only values from a fixed list.
• Where it goes: Reflct's server. Usage events are kept 90 days and may also go to PostHog, our analytics provider, without your IP address. Error reports stay with Reflct.
• Control: See what's sent lists what went. Off stops sending and clears anything waiting.

When our team sees your data

Our team has no access to your Vault on your Mac. We look at what Reflct's server holds for your account only:

• When you ask for support or send a bug report (notes go to a private team Discord channel, screenshots to private storage).
• In team alerts: private Discord alerts with your email when you ask to join, sign up, connect your Mac, buy, share a Read, or join or leave the beta, never naming who a Read or share is about. A daily summary lists members by first name, and our usage page shows each account's usage numbers.
• To keep Reflct working and secure, looking only at what a failure or abuse case needs.
• When the law requires it, sharing only what a valid legal request requires and telling you where the law allows.
• In the beta, which turns on Help improve Reflct: our team may look at the copy for your iPhone and finished Reads, including short quotes, to improve quality. Leaving the beta stops it.

Turning things off and deleting

• Switches on your Mac turn off a source (you choose whether to delete what it made), a connected app, a person, the copy for your iPhone, or error reports and usage.
• Delete your account in account settings on the website or iPhone app. Deletion on Reflct's server begins right away and finishes within 30 days, including backups and anything done by email or by hand; billing records the law requires are kept. Your Mac is separate: Start fresh removes what Reflct made there, your Claude or ChatGPT sign-ins and the copy for your iPhone, and deleting the app and its data removes the rest.
• Get a copy: account settings export your imported AI conversations and summarize what else is on file. For anything else on Reflct's server, email us. What is on your Mac is already in files there.
• Fix a mistake: tell us and we will correct it.

How long we keep the rest: your account and what you made, until you delete them; the days you opened Reflct, about 13 months; website and iPhone product events, 180 days. Companies that work for us follow their own terms.

Other people in your Vault

Your messages, contacts and recordings include other people, and you can leave anyone out. When something about another person reaches Reflct's server, such as in the copy for your iPhone or a share, that person can email support@reflct.ai to ask us to delete it, even if they do not use Reflct.

Older accounts

If you set up Reflct on the current Mac app, nothing here applies to you. Reflct used to keep more on its server, and accounts whose Mac app has not opened a current version still work that way. Opening the current Mac app stops these uploads; what they stored stays with your account until you delete it.

• Messages: who you text, how often and when (never the words), group member lists, and your contacts' names, numbers, email addresses and photos. On Pro, recent iMessage and WhatsApp text is also uploaded and kept for three days, and paid Reads may be made from it on the server. A few internal team accounts keep a longer archive.
• Other sources: call history, Screen Time, Chrome history, git activity, older iPhone app transcripts (by Deepgram on Reflct's account), and ChatGPT and Claude conversations imported through an older extension, the iPhone app or the website.
• Google on the website: read-only access to Gmail, Calendar, Contacts and Drive, and access to Sheets, with the sign-in stored encrypted on the server. Mail and events are copied to the server. The same Limited Use commitment applies.
• Other connections: Instagram posts, comments, profile photos and inbox metadata (who you message and when, never the words) through the extension, which may also try to send recent direct messages that the server refuses and does not keep; bank and card transactions through Plaid (read-only); WHOOP and GitHub.
• AI on Reflct's servers: pages and Talk answers are made there with AI companies on Reflct's accounts, and Talk conversations are stored with your account.

The extension, website and iPhone app

• The Chrome extension copies your ChatGPT and Claude conversations, using sessions you are already signed in to (never your passwords), to the Reflct Mac app on the same computer, and nowhere else. It sends Reflct a status check with its version, platform, item counts and errors. It uses your conversations only for that copy, never for ads, credit decisions or resale.
• Website analytics: Plausible counts visits without cookies; Statsig runs feature flags and records page views and performance, with masked session replay on a few public pages only.
• Product events: which website and iPhone app features you use, tied to your account and sent to PostHog, never with message text, Read content, contact names or share links.
• Crash reports from the website and iPhone app go to Sentry, with personal details and screenshots turned off.
• Voice input on the website is turned into text by Deepgram on Reflct's account. The audio is not kept.
• Your iPhone's Contacts, if you allow them, are used on the phone to show your people's photos.
• Notifications: push through Apple if you allow it; email through Resend for sign-in, invites, billing, trials, setup help and links you choose to send.

Companies we work with

Companies you connect yourself work under your own account and terms: Anthropic, OpenAI, Google, Granola, Deepgram with your key, and apps you connect.

Companies that work for Reflct:

• Supabase: database, sign-in and file storage, on AWS in the United States. Vercel: hosting.
• Stripe and Apple: payments, sign in with Apple, push notifications. Google: sign in with Google.
• Resend: email. Twilio: texts when you link a phone number. Discord: private team alerts.
• Sentry, Statsig, Plausible and PostHog (in the United States): crash reports, analytics and feature flags, as described above.
• Cloudinary: profile photos. Hugging Face: hosts the speech models the Mac app downloads; nothing of yours goes there.
• For paid Reads, website voice input and older accounts: Anthropic, OpenAI, Google Gemini and OpenRouter for AI, Deepgram for speech, ElevenLabs for reading text aloud, and Plaid for bank connections, on Reflct's own accounts, under terms that do not allow training on what we send.

We share data with them only to run Reflct. If Reflct is acquired, merges or goes through bankruptcy, account data may move to the new owner, who must keep to this policy.

Your rights

Depending on where you live, including California, you can ask to know, get a copy of, correct or delete the personal information we hold about you, and to opt out of its sale or sharing. Email support@reflct.ai. We check that a request comes from your account's email address and answer within the time the law sets, usually 30 to 45 days. Someone you authorize in writing can ask for you. If we say no, you can ask us to look again or complain to a regulator. Using these rights never changes how we treat you.

• What we hold: identifiers (name, email, phone, account and device ids), payment status, usage and diagnostics, and what you choose to send from your Vault.
• No selling or sharing: we do not sell or share personal information, as California law defines those terms, or use it for cross-context behavioral advertising.
• Sensitive information is used only to provide the service you ask for.
• Do Not Track: we do not track you across other sites, and we treat a Global Privacy Control signal as an opt-out where the law requires.

Security

Reflct's server data is stored with Supabase on AWS in the United States, encrypted in transit and at rest, with access controls designed so each account reaches only its own data, and production access limited to our team. On your Mac, the app is sandboxed by macOS, and your Vault is protected by your Mac's own security, such as your login and FileVault. No system is perfectly secure; if a breach affects your personal information, we will tell you as the law requires.

About this policy

Children: Reflct is not for anyone under 18, and we do not knowingly collect data from children. If you think a child has given us data, tell us and we will delete it.

Changes: we update the date at the top when this policy changes, and tell you in the app or by email before a significant change takes effect.

Who we are: Reflct Inc., a Delaware corporation, based in Santa Monica, California. Questions: support@reflct.ai. See also our Terms of Service. Effective October 29, 2026.