Reflect is a private journaling app for tracking your thoughts, moods, and daily moments. You can add photos, voice memos, locations, moods, and reactions. Over time, the app turns your entries into trends and gentle AI insights. The app works fully offline — cloud features (backup, sync, AI, social) are opt-in.
Yes. Your moments are encrypted on your device. If you turn on cloud backup, your entries, photos, and voice memos are encrypted again before upload using a key derived from your recovery code — meaning we cannot read them on the server. We don't sell your data, we don't show ads, and AI features are opt-in.
No, with one exception. Your encrypted backup can only be unlocked with your recovery code, which only you have. The exception is the Shared Journal feature: anything you write there is stored in plain text because both you and the person you connect with need to read it. Your private journal is never auto-shared.
Only when you trigger an AI feature. AI insights, Ask AI, MBTI, Guided Moment, and dynamic prompts run through Google Gemini. Before your text leaves the device, we strip personal identifiers (emails, phone numbers, addresses, etc.). Gemini does not retrain its models on your content. You can disable all AI features in Settings.
Honest answer: less so than text features. Dictation sends your raw audio to Gemini for transcription, and the text scanner sends the raw photo. We can't strip personal details from audio or images the way we can from typed text — anything you say or photograph goes as-is. The transcribed result is then encrypted on your device. If a recording or page contains sensitive information, type it manually instead.
Ask AI lets you ask questions about your own moments — like "What made me happiest this month?" or "Did I follow through on my goals?". Your question and a sample of recent moments (with personal identifiers stripped) are sent to Gemini. Daily limits apply, with more allowed on premium.
Open Settings › Backup & Restore, enter an email, and tap "Back Up Data". The app shows you a recovery code — write it down. Your text, photos, voice memos, mood, location, weather, and stickers are encrypted on your device, then uploaded. Recovery codes refresh periodically; back up again when prompted.
Install Reflect, open Settings › Backup & Restore, enter the same email and recovery code you used when backing up, and tap "Restore Data". The app re-derives the encryption key from your recovery code and decrypts everything locally. If the recovery code is wrong, restore fails with a clear error.
If you lose both your recovery code and your only device, your encrypted backup cannot be recovered — there is no backdoor. Reflect is a privacy app, not a recovery service. Save your recovery code in a password manager, locked notes, or on paper. We can't reset it for you.
Yes. Back up on one device, then restore on the second device using the same email and recovery code. Once both devices are signed in, moments sync between them automatically. Honest caveat: the in-flight sync layer is plain text on our servers while data moves between your devices — only the long-term backup is encrypted with your recovery-code key. If this matters to you, keep sync turned off and rely on backup alone.
When you connect with someone via Together, they can see your display name, avatar, and current journaling streak. That's it — your private moments, photos, and AI insights are NOT shared. You can also send each other preset cheer messages. Either of you can disconnect at any time, which deletes the connection on both sides.
No, and this is intentional. Shared Journal is a separate timeline you and your connected buddy both write in. Because both of you need to read entries, they're stored as plain text on our servers. Treat anything you write in Shared Journal like a group chat. Your private journal is unaffected.
Yes. Writing moments, viewing past entries, search, mood selection, photos, voice memos, stickers, themes, and charts all work fully offline. Cloud features (backup, sync, AI, dictation, scanner, social) need a connection. Anything you write offline is queued and uploaded when you're back online.
The core journal is free — writing, mood tracking, daily insights, themes, stickers, search, and offline use are all included. Premium adds the heavier AI features (weekly/monthly/yearly insights, MBTI, Ask AI, smart goal detection), data export, voice dictation, the text scanner, and automatic cloud backup. You can choose monthly, yearly, or one-time Lifetime. Pricing is shown in your local currency by Apple or Google. There is a free trial for new users.
The one-time Lifetime purchase unlocks all premium features forever, including AI features for 3 years from the date of purchase. After that 3-year window ends, all your moments and non-AI premium features (export, automatic backup, photo stickers, etc.) stay unlocked forever — only AI features need a monthly or yearly subscription to reactivate, because each AI call has an ongoing cost. We send reminders well before the window ends, and offer a discounted yearly plan to Lifetime buyers if you choose to keep AI active.
Subscriptions are billed by Apple (App Store) or Google (Play Store). Cancel through your Apple ID or Google Play subscription settings — we cannot cancel for you. Your premium features stay active until the end of the current billing period.
Settings › Delete Account wipes everything tied to your account: your encrypted backup, photos, voice memos, sync data, buddy connection, profile, avatar, subscription record, and notification preferences. The only things that persist by design are Apple/Google billing receipts (held by them), anonymous analytics already sent, and a short-lived security audit row of the deletion event itself. Prefer email? Write to [email protected] — we honor server-side deletion requests within 30 days.
Yes, and yes. We collect anonymous, aggregate-only product events (e.g. "screen viewed", "backup completed") so we can see which features are used. No moment content, no real names, no Firebase user ID — only events. To opt out completely, go to Settings and turn off "Share anonymous usage data". The toggle stops events at the source.
Reflect is for users 13 and older. On first launch you pick your date of birth, and if you're under 13 the app stops at a restriction screen. We don't store the date of birth you entered; it's used only for the age gate.
Settings › Diary Lock lets you require a PIN, password, or biometric (Face ID, Touch ID, or fingerprint) to open the app. PINs and passwords are hashed locally and never stored in plain text. Biometric data never leaves your device. The optional recovery email is for unlocking the app if you forget your PIN — it's separate from the backup recovery code.
Only if you grant permission, and only in the foreground. When you tap the location pin while writing a moment, the app uses your device GPS to look up a city or neighborhood label and saves that label with the moment. Raw GPS coordinates aren't uploaded. The app never tracks location in the background. Decline permission and moments save normally without any location.
Yes (premium). Settings › Backup & Restore › Export Your Data produces a single ZIP archive with a PDF, a plain-text copy, your photos, and metadata. The file is saved to your device. The PDF includes photos, mood, and rich-text formatting; the plain-text copy is unformatted.
English, Français, العربية, 한국어, Español, Português, हिन्दी, Deutsch, and 日本語. The app picks your device language on first launch; change it any time in Settings. Arabic is fully right-to-left.
Local data is wiped when you uninstall, including the device-side encryption key. If you have a current cloud backup and your recovery code, you can restore on any device. If you uninstall without a backup AND without your recovery code, the moments stored only on that device are gone. Make a backup first.
Email [email protected]. We typically reply within a few business days. Settings › About has a "Contact Support" shortcut that opens your email client pre-addressed.