AI Journaling – Privacy Policy & Terms of Use
Summary: Reflect is local-first. Your journal lives on your device. Entry text leaves it only when you explicitly request an AI reflection or weekly AI summary. The requested text is sent through our Cloudflare proxy to Anthropic. Our proxy does not store the input text; it caches only the generated response for up to 30 days under a key derived from a one-way hash of the request.
This privacy policy applies to the mobile app Reflect (referred to as "the App"). It describes what data the App processes, when, and why. No Fruhji account is required. The controller is Fruhji; contact: hello@fruhji.com.
Your journal entries, prompts, locally generated reviews, saved voice audio, streaks, and settings are stored on your device. They are not transmitted to Fruhji except for the explicit AI requests described below. A plain export or encrypted backup is created locally and handed to the system share sheet; you choose where that file is stored.
Both AI features run only after an explicit request:
Anthropic states that commercial API inputs and outputs are normally deleted within 30 days, subject to the exceptions in its current retention policy, including legal and usage-policy enforcement. Do not include information you do not want processed by an AI provider. If you request neither feature, no journal text is sent to the proxy or Anthropic.
The proxy processes the IP address supplied by Cloudflare and a pseudonymous RevenueCat App User ID for abuse prevention, free-use limits, cost limits, and Pro entitlement checks. Daily counters expire after about 48 hours; rolling free-use counters expire after up to 14 days. A pseudonymous installation identifier and Apple App Attest or Google Play Integrity proof are processed to verify genuine App installations. These checks use a hash of the request body, not a stored copy of the journal text.
Subscriptions are handled by RevenueCat together with the Apple App Store and Google Play. RevenueCat processes a pseudonymous App User ID, subscription and transaction information, and basic technical context to determine entitlement status. Fruhji does not receive your payment-card or bank details.
The production App uses PostHog EU Cloud for pseudonymous product-usage events such as app opened, entry created, reflection used, weekly summary generated, backup created, or paywall shown. The SDK also supplies technical context such as App, operating-system, and device information. We never add journal text, prompts, voice audio, or generated AI content to analytics events. Analytics is used to understand whether features work and are useful, not for advertising.
Cloudflare (proxy, response cache, limits, and installation integrity) · Anthropic (requested AI processing) · RevenueCat (subscriptions) · PostHog EU Cloud (pseudonymous product analytics) · Apple or Google (store payments and platform integrity). Where processing involves a transfer outside your country, the provider's applicable data-transfer safeguards apply.
We process requested AI and subscription data to provide the contract, and security and pseudonymous analytics data for our legitimate interests in a secure, reliable, and useful service. Depending on where you live, you may have rights to access, correction, deletion, restriction, portability, objection, and complaint to a supervisory authority. Because Reflect has no Fruhji account, a request may require the relevant pseudonymous identifier.
The App is not directed at children. No Fruhji account is created, and journal text stays on the device unless an AI feature is explicitly requested.
If anything changes about how data is handled, this policy will be updated and the date below revised.
If you have any questions about this privacy policy or your data, you can reach us at:
Last updated: August 8, 2026
Also available as a standalone page: Terms of Use
These Terms of Use ("Terms") govern your use of the mobile app Reflect ("the App"). By downloading or using the App you agree to these Terms. If you do not agree, do not use the App.
You are granted a personal, non-exclusive, non-transferable, revocable license to use the App on devices you own or control, for your own personal, non-commercial use. Where the App is distributed through the Apple App Store, Apple's Licensed Application End User License Agreement (standard EULA) applies in addition to these Terms; where these Terms grant you more rights, these Terms prevail.
The core journaling features of the App are free. Reflect Pro is an optional auto-renewable subscription (monthly or annual) that unlocks unlimited AI reflections and the deeper weekly AI summary.
Everything you write in the App belongs to you. Your entries are stored locally on your device and are transmitted only when you explicitly request an AI reflection or weekly AI summary, as described in the Privacy Policy above. We claim no ownership of, and no rights to, your journal content. You are responsible for keeping your device and any exports or backups of your data secure.
AI reflections and weekly summaries are generated by a language model. They are offered as prompts for your own thinking and may be inaccurate, incomplete, or not appropriate to your situation. They are not medical, psychological, therapeutic, legal, or financial advice, and are no substitute for professional help. If you are in crisis or concerned about your mental health, please contact a qualified professional or a local emergency service.
You agree not to misuse the App or its AI service — including attempting to disrupt or overload the service, circumvent rate limits or subscription gating, reverse engineer the App except where permitted by law, or use the AI service for purposes unrelated to journaling in the App.
We may improve, change, or discontinue features of the App (including the AI service) at any time. The AI reflection feature depends on third-party providers and an internet connection and may be temporarily unavailable. Your journal itself works offline and remains on your device.
The App is provided "as is" and "as available", without warranties of any kind, express or implied, to the maximum extent permitted by applicable law. We do not warrant that the App will be uninterrupted, error-free, or that AI output will be accurate or fit for a particular purpose.
To the maximum extent permitted by applicable law, we are liable without limitation only for damages caused by intent or gross negligence, and for injury to life, body, or health. For slight negligence we are liable only for breaches of essential contractual obligations, limited to the foreseeable damage typical for this type of contract. Mandatory statutory liability (including under product liability law) remains unaffected. Nothing in these Terms limits rights you have as a consumer under mandatory law.
We may update these Terms from time to time, for example when features change. The current version is always available at this address, and the date below shows when it was last revised. If you continue using the App after a change takes effect, the updated Terms apply.
These Terms are governed by the laws of the Federal Republic of Germany, excluding its conflict-of-law rules. Mandatory consumer-protection provisions of the country in which you live remain unaffected.
Questions about these Terms? Reach us at:
Last updated: August 8, 2026