Privacy Policy

Last updated: June 2026

1. Who we are and what this policy covers

This policy explains how ME And I (“we”, “us”) collects, uses, and protects your information when you use the ME And I app and website (the “Service”). It applies to all users worldwide. Sections 13 and 14 describe additional rights for residents of the EEA/UK and the United States.

Questions: support@me-and-i.app

2. Information we collect

Account information. Email address (or, if you use Sign in with Apple, an Apple private relay address), your name if your sign-in provider shares it, and authentication identifiers needed to create and secure your account. If you sign in with email, we send a one-time sign-in code to that address. If you sign in with Google, Apple, or Microsoft, those providers authenticate you on their systems and share with us only what is needed to link your account (typically email and a provider-specific user ID). We do not receive journal content from sign-in providers.

Journal content. Entries you write or dictate, Letters to Future Self, your conversations in Talk to ME, and any life-context information you voluntarily provide. This content may include anything you choose to write. We do not require you to provide sensitive information, but you may choose to write about sensitive topics.

Derived content. Content the Service generates from your entries to provide its core features: Reflections, Mirror Reports, detected mood labels, semantic indexes that allow the AI to recall relevant context, and similar outputs. Derived content stays inside your account and exists only to serve features back to you.

AI processing metadata. Technical records of AI operations (timestamps, model used, token counts, status, error categories). We design these records not to intentionally store your journal text. In some cases, metadata may include bounded retrieval previews (for example, a short excerpt used for quality review) or crisis-safety signals (for example, matched safety keywords or classifier category scores) without storing the full text of your message.

Error diagnostics. To keep the Service reliable, we send error reports to Sentry when something fails. These reports are designed to include technical details (such as error type, stack trace, app version, and environment) and not journal text, Reflection prose, Talk replies, or other user-written content.

Product analytics (optional). If you agree, we use PostHog to understand how the Service is used: for example, which screens you open, when you save an entry, or when you export data. Events are metadata-only (such as entry mode, word-count buckets, or format choices) and are designed not to include journal text, Reflection prose, Talk replies, letters, mood labels as free text, voice audio, or your email address. After you sign in, events may be linked to a pseudonymous account ID — not your email. Session replay is off by default.

Device data. Basic technical information required to deliver the Service (browser type, app version, approximate region from network routing for compliance and analytics defaults).

We do not collect advertising identifiers, and we do not use third-party advertising or tracking SDKs.

3. How we use your information

We use your information only to:

• Provide the Service: generate Reflections, Talk to ME replies, Mirror Reports, mood detection, exports, and optional life-context memory
• Maintain and secure your account (email sign-in codes and third-party sign-in, where offered)
• Operate, debug, and improve reliability (Sentry error reports; optional PostHog product analytics if you consent — Section 9)
• Detect safety-related signals and show crisis support resources where appropriate
• Comply with legal obligations

We do not use your journal content for advertising, profiling for marketing purposes, or any purpose other than delivering the features described above.

4. Advertising

ME And I does not show third-party advertising in the app and does not use your journal content for advertising or marketing profiling. We may run our own marketing campaigns on other platforms (for example social media or search ads) that link to our website; those campaigns do not receive your journal content. Our marketing landing page is separate from the journal app. If we ever introduce in-app advertising or materially change this approach, we will update this policy and obtain any consent required by law before it takes effect.

5. AI processing

AI features are processed server-side in Supabase Edge Functions. AI provider keys are kept server-side and are not intentionally exposed to your browser or device.

When you request an AI feature (such as a Reflection, Talk to ME reply, Mirror Report, mood detection, or context-based recall), the relevant journal text and related context may be sent to our AI inference providers via API solely to generate the requested output.

We use AI provider API products under terms that do not allow them to use your API inputs or outputs to train their models by default. We do not opt in to provider model training using your journal content.

AI outputs are generated automatically and may be inaccurate, incomplete, or emotionally imperfect. They are not medical advice, mental health advice, legal advice, or emergency support.

6. Sensitive content in your journal

ME And I does not require you to provide sensitive information. However, because the Service is a personal journaling and reflection tool, you may choose to write about sensitive topics, including health, mental health, relationships, beliefs, sexuality, trauma, or emotional distress. The AI may respond to what you write, but you remain in control of what you save or delete.

Mood detection may infer emotional tone from your writing even when you do not explicitly describe your health or mental state. We process the sensitive information you choose to include, and inferred mood signals, only to provide the Service features described in Section 3.

Where required by law, we rely on your explicit consent to process special-category or consumer health data that you choose to include in your journal. You can withdraw this consent at any time by deleting the relevant entries or your account (Section 11). Withdrawal does not affect the lawfulness of processing before withdrawal. We may ask you to confirm this consent separately during signup or before saving your first entry.

If your entries indicate you may be in crisis, the app may show local support resources as part of normal processing. We do not store the full text of flagged messages in crisis-safety logs. We may store metadata about safety-related events (such as that a banner was shown, optional feedback you give on the trigger, matched safety keywords from our own curated list, or classifier category scores) to tune safety systems. We do not share this with third parties for advertising.

ME And I is not a medical, mental health, or emergency service. If you may be in immediate danger, contact local emergency services or a crisis hotline.

7. Voice and imported files

Voice recordings and imported files are processed in memory to produce text. The original audio or file is not stored in your account. Only the text you choose to keep is saved.

8. Data on your device

To keep you signed in, Supabase Auth stores your session in your browser’s localStorage. Small UI preferences (such as dismissed hints) may also be stored in localStorage or sessionStorage.

For offline use, drafts and synced entries may be cached in IndexedDB. These local copies are not encrypted on the device. Anyone with access to your unlocked phone, tablet, or browser profile could read them. Signing out clears the local cache on that device.

We do not use advertising cookies. If you opt in to product analytics, PostHog may store a pseudonymous identifier in similar browser storage (not an advertising cookie) so events can be counted consistently. Declining or withdrawing analytics consent stops new PostHog events and clears that analytics storage where technically possible.

Our hosting provider (Cloudflare) may set short-lived security cookies on web requests; we do not control those cookies and do not use them for advertising.

9. Analytics and diagnostics

Sentry (error reports). Sentry helps us detect and fix crashes and server errors. It runs to keep the Service working and is not used for advertising. Reports are filtered to avoid journal content and are tagged by environment (staging vs production).

PostHog (product analytics). PostHog helps us understand feature usage — for example, how often people export data or use Talk to ME — so we can improve the product. We configure PostHog with explicit events only (no automatic capture of clicks on journal text), no session replay by default, and properties that exclude journal content. We infer your approximate country from Cloudflare network routing (/cdn-cgi/trace on our app domain, with a browser-locale fallback) to apply regional defaults — not for advertising. For residents of the EEA, UK, and Switzerland, PostHog runs only after you opt in in the app. Elsewhere, product analytics may be enabled by default on first use; you can turn it off at any time in Settings (or by contacting support@me-and-i.app).

If you decline analytics, core journaling features still work; only optional usage measurement is disabled.

Where GDPR applies, EEA/UK PostHog data is processed on PostHog’s EU infrastructure (eu.i.posthog.com) under our instructions and a data-processing agreement.

10. Sharing and subprocessors

We do not sell your personal information, and we do not share it for advertising. To run the Service, the following providers may process data on our behalf:

• Supabase — authentication, database, Edge Functions hosting; processes account and journal data
• Cloudflare — web hosting and CDN; processes network and request metadata
• OpenAI — AI chat, text embeddings for semantic recall, speech-to-text (Whisper) for voice entries, and safety classification for crisis detection; relevant journal text or audio is sent only to generate the requested feature
• Anthropic — AI chat for Reflections, Talk to ME, Mirror Reports, and related features
• Google (Sign in with Google) — authentication when you choose this option; Google processes sign-in on its systems and shares account identifiers with us via Supabase Auth
• Apple (Sign in with Apple) — authentication when you choose this option; Apple processes sign-in on its systems and may share your email or an Apple private relay address plus a provider-specific identifier
• Microsoft (Sign in with Microsoft) — authentication when you choose this option; Microsoft processes sign-in on its systems and shares account identifiers with us via Supabase Auth
• Google (Gemini) — AI chat for Reflections, Talk to ME, Mirror Reports, and related features
• Google Cloud Speech-to-Text — speech-to-text for voice entries; processes audio during transcription only (not stored as audio in your account)
• Resend — transactional email for email sign-in codes (when you sign in with email); processes your email address and delivery metadata
• RevenueCat — subscription and purchase management when we offer paid plans (including through app stores); processes purchase and subscription metadata linked to your account, not journal content
• Sentry — error and performance diagnostics; processes technical error metadata designed not to include journal content
• PostHog — optional product analytics; required opt-in in the EEA/UK/Switzerland; may default on elsewhere based on approximate region; processes pseudonymous usage events; EU infrastructure when GDPR applies; designed not to include journal content; session replay off by default

During the free soft launch, paid plans may not be active yet; RevenueCat applies only when we start selling subscriptions. We will update this policy before paid plans ship.

Each provider processes data under a data-processing agreement or equivalent contractual terms and only on our instructions. We may disclose information if required by law, but we will resist overbroad requests and, where legally permitted, notify you.

11. Retention, export, and deletion

Export. You can export your data at any time from Settings, in Markdown or JSON.

Deletion. When you delete your account, your data is removed from our production database, including entries, letters, Mirror Reports, voluntary life-context submissions, semantic indexes, and AI processing metadata linked to your account.

Residual copies may remain in encrypted backups until they are overwritten according to our backup rotation cycle. Offsite logical backups are retained for up to 90 days; other backup layers may rotate sooner.

Retention while active. We keep your journal content while your account is active, unless you delete specific entries earlier. Account data without journal content (for example, an email address for a never-used account) is retained until you delete the account.

AI processing metadata linked to your account is deleted when you delete your account. We may retain aggregated, non-identifying operational metrics after deletion.

12. Security

Data in transit is encrypted (TLS). Data at rest in our database is encrypted by our hosting provider. Access to production data is restricted and logged. No system is perfectly secure; Section 8 describes the one place your data is intentionally stored unencrypted: your own device’s local cache.

13. Additional information for EEA and UK residents

Legal bases. We process your data on the following bases under the GDPR / UK GDPR:

• Performance of a contract (Art. 6(1)(b)) — account data, journal content, derived content, and AI processing needed to deliver the Service you signed up for
• Consent (Art. 6(1)(a)) — optional PostHog product analytics in the EEA/UK/Switzerland (Section 9); you may withdraw consent in Settings at any time
• Explicit consent (Art. 9(2)(a)) — special-category data you choose to include in your journal, as described in Section 6
• Legitimate interests (Art. 6(1)(f)) — service security, abuse prevention, and Sentry error diagnostics (balanced against your rights; not used for advertising)
• Legal obligation (Art. 6(1)(c)) — where we must retain or disclose data under applicable law

Your rights. You have the right to access, rectify, erase, restrict, and object to the processing of your personal data, and the right to data portability. Export (portability and access) and account deletion (erasure) are available in Settings. For anything else, contact support@me-and-i.app. You also have the right to lodge a complaint with your local supervisory authority.

Withdrawing consent. You may withdraw consent to optional product analytics in Settings (Section 9). You may withdraw consent to the processing of sensitive journal content at any time (Section 6). Withdrawal does not affect the lawfulness of processing before withdrawal.

International transfers. Our providers may process data in the United States and other countries. Where data of EEA/UK residents is transferred outside the EEA/UK, we rely on appropriate safeguards such as Standard Contractual Clauses and, where applicable, providers participating in recognized transfer frameworks.

Automated processing. The Service uses AI to generate reflections on your writing. These outputs are a feature you requested, not decisions producing legal or similarly significant effects on you within the meaning of Art. 22 GDPR.

14. Additional information for US residents

We do not sell or share your personal information as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA) and similar state laws. We do not use your personal information for cross-context behavioral advertising.

Depending on your state, you may have the right to access, correct, delete, and obtain a portable copy of your personal data, and to appeal a refusal. Export and deletion are available directly in Settings; you can also opt out of optional product analytics in Settings. For other requests or appeals, contact support@me-and-i.app. We do not discriminate against users who exercise their privacy rights.

Consumer health data (Washington, Nevada, Connecticut, and similar laws)

Where these laws apply, some states regulate “consumer health data” broadly, including information about mental health and emotional state. Because your journal may contain such information, and mood detection may reflect your emotional state, this section applies to covered users:

• What we collect: journal content you voluntarily provide, derived mood signals, and related metadata described in Sections 2 and 6
• Why: solely to provide the features of the Service back to you (Section 3)
• Who can access it: our subprocessors listed in Section 10, acting only on our instructions
• Sharing and sale: we do not sell consumer health data and do not share it for advertising or for any purpose other than providing the Service
• Your rights: access, deletion, and withdrawal of consent, available in Settings or via support@me-and-i.app

Where required, we rely on your consent to the collection and processing of consumer health data contained in your journal for the purposes above. You may withdraw consent by deleting entries or your account.

15. Children

ME And I is not intended for anyone under 18, and we do not knowingly collect data from anyone under 18. If you believe someone under 18 has created an account, contact us and we will delete it.

16. Crisis resources and regional availability

Crisis-support resources may vary by country and availability. Where we provide localized crisis resources, we aim to review them before making them available in that region. ME And I is not an emergency service and does not guarantee that crisis resources are available, current, or appropriate for every user.

17. Changes to this policy

We may update this policy as the Service evolves. For material changes, we will notify you in the app or by email before they take effect. The “Last updated” date at the top reflects the current version.

18. Contact

Privacy questions: support@me-and-i.app. See also our Terms of Service.