CoinReflectBack to home
Privacy

Privacy Policy

CoinReflect is built around a small, user-owned behavioral record. We collect what is needed to provide the journal and its reflection tools, and we avoid advertising and visitor surveillance.

Last updated October 17, 2026 · Early-access policy

1. What we collect

  • Account information: email address, optional display name, authentication and session information.
  • Your records: mission, rules, portfolio context, decisions, rule checks, cooling-off periods, reflections, lesson progress, watchlist items, decision replays, and the small behavior events needed to show your progress.
  • Reminders: if you enable browser reminders, the browser push subscription, timezone, reminder time, enabled state, and delivery timestamp needed to operate that reminder.
  • Coach requests: the question you submit and the Coach response are saved to your account. When AI is available, the request is paired with minimized structured signals from your records.

2. What we do not collect for product analytics

CoinReflect does not currently run visitor analytics, advertising trackers, or country-level visitor profiling on public pages. We do not sell personal information or use it for targeted advertising. Hosting, authentication, security, and delivery providers may still create essential technical logs needed to operate their services.

3. How we use your information

We use account information to authenticate you; your records to provide the journal, rule checks, progress views, and reflections; reminder information to send reminders you request; and Coach information to return the reflection experience you ask for. We may also use aggregated, non-identifying operational information to keep the service reliable. CoinReflect does not execute trades, custody assets, or ask for exchange credentials.

4. Where your information is processed

The production app uses Vercel for deployment and Supabase for authentication and database storage. The current Supabase project is configured in the EU region eu-west-1. When the optional AI Coach is used, your question and minimized structured signals are routed through Vercel AI Gateway to OpenAI to generate a response. Access to account records is scoped to the signed-in user through application checks and database row-level policies. CoinReflect does not expose your records publicly.

5. AI Coach and model training

CoinReflect does not use your account records to train a CoinReflect model. When you use the optional AI Coach, your question and minimized structured signals are routed through Vercel AI Gateway to OpenAI to generate a response. The current implementation excludes raw saved thesis, invalidation, learning, and next-change text from that AI context. Processing and retention are governed by the applicable provider terms and configuration; do not paste seed phrases, passwords, names, or other secrets into the Coach.

6. Retention and deletion

Your account records are kept while your account is active so the journal can show history and progress. You can download a JSON copy directly from Settings at any time. If you cannot access Settings, you may request an export by email. CoinReflect does not currently run an automatic post-deletion retention schedule; deletion requests are handled manually so a history cannot disappear accidentally. To request account deletion, email hello@coinreflect.com. We aim to acknowledge a verified request within 7 days and respond within one month of receiving it. If a request is complex and a longer period is legally permitted, we will explain that within the first month. Reminder subscriptions can be disabled in Settings or in your browser.

7. Your choices and rights

Depending on where you live, you may have rights to access, export, correct, delete, restrict, object to, or receive a copy of your personal information. Contact us at hello@coinreflect.com and describe the request. You may also contact your local data-protection authority. We will ask for reasonable information to verify an account request.

8. Early-access operator details

CoinReflect is currently an early-access project and does not yet offer paid subscriptions. The operator’s legal name, mailing address, final retention schedule, and jurisdiction-specific representative details will be added before paid launch. Until then, privacy questions and deletion requests can be sent to hello@coinreflect.com.

This is an early-access policy written in plain language. It will be updated as the service, providers, and operator details develop. For privacy questions or account requests, contact hello@coinreflect.com.