How REINVENT OS handles your data

What we collect

Your email address, display name, and sign-in provider from Apple, Google, or a legacy email account; your timezone and app preferences; the version and server timestamp of your adult-eligibility and legal confirmation; selected protocols and their ranking; morning intentions, check-ins, quests, completion and abandonment reflections, night-journal text, CBT answers, beliefs, affirmation feedback, and progress history.

Completion Moments are optional. If you enable them and choose a photo after a completed quest, we store that normalized photo privately in your REINVENT account. It is not automatically saved to your device gallery. It remains until you delete that Moment or delete your account. If you separately enable ARC photo reflections, we send only the normalized selected photo and its exact quest text to OpenAI to create one private reflection. ARC does not verify completion.

Speaking instead of typing is optional. Every free-text field also offers a microphone; the clip is recorded on your device, stops automatically after two minutes, and is deleted from your device when you send it, cancel it, or it fails. We store only the transcribed text, in the field you were filling. We do not keep the audio on our servers.

We do not ask for your date of birth, identity document, contacts, or precise location. On Android, Focus Shield inventories visible launcher apps so you can select apps, checks which app is in the foreground during a quest, and stores your selected package list locally on your device. Those selections and usage checks are not sent to REINVENT, our backend, advertisers, or AI. On Apple devices, Focus Shield selections are managed through Apple Screen Time APIs on your device.

How AI is used

ARC sends only the text and context needed for the feature to OpenAI gpt-4o-mini through our Supabase Edge Functions. This can include morning or custom task text for quest shaping; journal text and CBT answers for reflection analysis; stored beliefs, mood signals, and recent feedback for affirmation generation; and, only with separate Completion Moments consent, a selected normalized photo plus its exact quest text. If you choose to speak rather than type, the recorded clip itself is sent to OpenAI for transcription and only the returned text is kept. ARC reflections are not proof or verification of a completed quest. We do not send your email address to the model or use your writing to train our own models. Generated output is checked with OpenAI’s moderation service before it is returned. OpenAI API inputs and outputs are not used for model training by default; provider abuse-monitoring logs may retain customer content for up to 30 days unless an approved retention control applies.

What we never do

We do not sell your data. We do not share your text with advertisers or data brokers. It is disclosed only to the service providers described in this policy when needed to operate the app. We do not show you ads.

Where it lives

Account and app data are stored in Supabase. Row-level security limits signed-in users to their own data, while narrowly scoped server functions process data to operate the app, exports, and deletion. Authentication runs through Supabase Auth using Apple, Google, or password authentication for approved legacy accounts.

Crisis safety

Before eligible submitted text is sent to OpenAI, automated checks on the device and server look for direct crisis or self-harm language. If a check matches, the app shows India support resources and skips OpenAI processing. Submitted morning intentions and reflections remain saved; a matched night reflection is marked safety_saved, while unsaved task-shaping text remains in its form. We do not add a model-call telemetry event or a duplicate raw-text evidence packet for this zero-model check. If an older app path had already created analysis or cards from a reflection later marked safety_saved, active derived outputs and replayable responses are removed. Previously submitted affirmation-feedback history may retain the generated card wording that was rated until account deletion; it does not retain a duplicate of the original reflection or label the feedback as crisis data.

This automated check is imperfect. It is not a diagnosis, real-time monitoring, or an emergency-response service. No person is watching your writing, and REINVENT OS does not automatically contact a helpline, emergency service, or anyone you know.

How long we keep it

Your account content and eligibility receipts remain until you delete your account, except where a longer period is legally required. A private Completion Moment remains until you delete that Moment or delete your account. Generic service metadata used for request integrity and reliability does not contain your journal or CBT text. Provider backups age out under the hosting provider’s retention controls.

Exporting your data

You can request a journey export from your profile. The CSV includes account and app records associated with your signed-in account, including Completion Moment metadata and any ARC reflection, but not image bytes or image URLs. Each private Completion Moment image can be downloaded separately from Moments; the journey export is not an image archive. Authentication secrets and deletion challenge secrets are excluded. The temporary CSV file is deleted from REINVENT OS after the system share sheet closes.

Deleting your data

You can delete an individual Completion Moment; this removes its private photo and any ARC reflection, without undoing the quest, completion, or XP. You can also delete your account from your profile. Account deletion removes your Supabase Auth account and app data tied to it, including Completion Moment rows and stored images, plus matching waitlist or administrator access records. Deletion requires a fresh Apple or Google sign-in, or password confirmation for a legacy email account. Provider backups age out under the hosting provider’s retention controls.

Children

This India release is intended for adults aged 18 and over. We do not knowingly collect app content from anyone under 18. If you believe a minor has signed up, contact us and we will delete the account.

Changes to this policy

If we change anything material we will notify you in-app before it takes effect.

Contact

rajvardhan@reinventosapp.com — we read every email.