The Short Version
Your reflections are yours. We do not sell your data, we do not share it with advertisers and we do not train AI models on your personal content. We collect only what is needed to run Izel and make it useful to you.
What We Collect
- Email address — for authentication and account recovery. If you sign in with Google, we receive your email address and display name from your Google account.
- Profile data — your display name, word of the year, life areas, archetypes and preferences you set in the app.
- Reflections and content — journal entries, celebrations, courage logs, goals, weekly reset data and wheel scores. This is the core of Izel and is stored to provide your personal experience.
- Voice recordings — processed for transcription only. Audio is sent to our transcription provider, converted to text and not retained after transcription.
- Push notification tokens — if you opt in to notifications, we store your device token to send daily reminders.
- Subscription data — payment status and subscription IDs (managed by Stripe). We do not store credit card numbers.
How We Use Your Data
- To provide your personal Izel experience — reflections, Mirrors, nudges and insights.
- To generate AI content (Mirrors, affirmations, nudges) from your own entries. Your data is sent to our AI provider for real-time generation only. It is not used to train models.
- To send you push notifications (if you opt in).
- To process payments via Stripe.
Your reflections, journal entries, goals and personal content are private to your account. They are not visible to other users and are not reviewed by humans unless you explicitly request support or where required to protect the security of the service or comply with legal obligations.
Third-Party Services
We use a small set of trusted providers to run Izel:
- Supabase — database and authentication. Your data is stored in a PostgreSQL database with row-level security.
- Groq — AI processing infrastructure used for real-time text generation and transcription. Your content is processed only to provide responses within Izel and is not used to train foundation models.
- Stripe — payment processing. Handles all billing and credit card information.
- Vercel — hosting, serverless infrastructure and anonymous pageview analytics (cookieless, no personal data collected).
- Sentry — error tracking. If something breaks, crash data (no personal content) is sent to Sentry so we can fix it.
- Resend — transactional email delivery (magic links, account notifications). Only your email address is shared.
- Google — authentication (if you choose “Continue with Google”). We receive your email address and profile name. Google’s privacy policy applies to your Google account data.
Where Your Data Is Stored
Izel uses cloud infrastructure providers that may process data in countries outside your own, including the United States. Where required, we take steps to ensure appropriate protections are in place for international data transfers.
How Long We Keep Your Data
We keep your personal information for as long as your account remains active or as needed to provide the service. When you delete your account, your personal data is permanently deleted from our active systems. Some information may remain temporarily in secure backups until those systems are cycled, or where retention is required by law.
Legal Basis for Processing
We process your personal information to provide and improve Izel, fulfil our obligations under our agreement with you, comply with legal requirements and where applicable, based on your consent (such as for optional notifications).
Data Security
All data is transmitted over HTTPS. Database access is protected by row-level security policies — you can only access your own data. API routes require authentication. We use rate limiting to prevent abuse.
Your Rights
- Export — you can export all your data as JSON from Settings at any time.
- Delete — you can permanently delete your account and all associated data from Settings. This action is irreversible.
- Access — all your data is visible to you within the app.
Cookies
We use essential cookies only: authentication session, onboarding status, and subscription status. No tracking cookies, no analytics cookies, no third-party advertising cookies.
Children
You must be at least 16 years old to use Izel. We do not knowingly collect data from children.
Changes to This Policy
We may update this policy as the product evolves. Significant changes will be communicated via the app or email.
Contact
Questions or requests relating to your personal data? Reach out at hello@izel.au