Privacy Policy

The Short Version

Your reflections are yours. We do not sell your data, we do not share it with advertisers and we do not train AI models on your personal content. We collect only what is needed to run Izel and make it useful to you.

What We Collect

• Email address — for authentication and account recovery. If you sign in with Google, we receive your email address and display name from your Google account.
• Profile data — your display name, word of the year, life areas, archetypes and preferences you set in the app.
• Reflections and content — journal entries, celebrations, courage logs, goals, weekly reset data and wheel scores. This is the core of Izel and is stored to provide your personal experience.
• Voice recordings — processed for transcription only. Audio is sent to our transcription provider, converted to text and not retained after transcription.
• Push notification tokens — if you opt in to notifications, we store your device token to send daily reminders.
• Subscription data — payment status and subscription IDs (managed by Stripe). We do not store credit card numbers.

How We Use Your Data

• To provide your personal Izel experience — reflections, Mirrors, nudges and insights.
• To generate AI content (Mirrors, nudges) from your own entries. Your entries are sent to our AI provider to generate this content.
• To send you push notifications (if you opt in).
• To process payments via Stripe.
• AI quality checks: once a week, a small sample of AI-generated Mirrors and nudges, together with the journal entries they were based on, may be sent to our AI provider to check whether the writing is specific, grounded in what you wrote and consistent with Izel’s approach. These checks are automated and are used to improve quality. We keep only the resulting scores, not your text.
• If you choose to share a reflection with us, we keep that reflection and any note you add so we can understand what went wrong and improve Izel. You can ask us to delete it.

Your reflections, journal entries, goals and personal content are private to your account. They are not visible to other users and are not reviewed by humans unless you explicitly request support, choose to share a reflection with us, or where required to protect the security of the service or comply with legal obligations.

Safety

If you write something that suggests you may be at risk of harming yourself, or that you’re worried about someone, Izel automatically shows local support services instead of generating an AI reflection.

We don’t create or store a safety flag, review these moments or contact anyone on your behalf. Izel is not a crisis or medical service. If you or someone else is in immediate danger, contact your local emergency services.

Third-Party Services

We use a small set of trusted providers to run Izel:

• Supabase — database and authentication. Your data is stored in a PostgreSQL database with row-level security.
• Groq — AI text generation and transcription. Your entries are sent to generate content in Izel and for the weekly quality check. Groq processes them only to provide this service and does not keep them by default.
• Cerebras — backup AI provider, used only when our main provider is busy or unavailable. Your entries may be sent to generate content in Izel. Cerebras processes them only to provide this service and does not keep them.
• DeepInfra — backup transcription provider, used only when our main provider is busy or unavailable. Your voice recordings may be sent to be converted to text. DeepInfra processes them only to provide this service and does not store them once the request is complete.
• Stripe — payment processing. Handles all billing and credit card information.
• Vercel — hosting, serverless infrastructure and anonymous pageview analytics (cookieless, no personal data collected).
• PostHog — product analytics, used to understand how the app is used. It runs without analytics cookies.
• Upstash — rate limiting. Counts requests per account to prevent abuse; none of your content is sent.
• Sentry — error tracking. If something breaks, crash data (no personal content) is sent to Sentry so we can fix it.
• Resend — delivers our sign-in and account emails (magic links and sign-up confirmations), sent through Supabase Auth. Only your email address is shared.
• OpenStreetMap (Nominatim) — place-name search for the optional birth chart in Settings. Only the place name you type is sent.
• Google — authentication (if you choose “Continue with Google”). We receive your email address and profile name. Google’s privacy policy applies to your Google account data.
• Web push — if you opt in to notifications, reminders are delivered through your browser’s push service (for example Apple, Google or Mozilla).
• Telegram — internal operational alerts to the Izel team only. No user content is sent.

Where Your Data Is Stored

Izel uses cloud infrastructure providers that may process data in countries outside your own, including the United States. Where required, we take steps to ensure appropriate protections are in place for international data transfers.

How Long We Keep Your Data

We keep your personal information for as long as your account remains active or as needed to provide the service. When you delete your account, your personal data is permanently deleted from our active systems. Some information may remain temporarily in secure backups until those systems are cycled, or where retention is required by law.

Legal Basis for Processing

We process your personal information to provide and improve Izel, fulfil our obligations under our agreement with you, comply with legal requirements and where applicable, based on your consent (such as for optional notifications).

Data Security

All data is transmitted over HTTPS. Database access is protected by row-level security policies — you can only access your own data. API routes require authentication. We use rate limiting to prevent abuse.

Your Rights

• Export — you can export all your data as JSON from Settings at any time.
• Delete — you can permanently delete your account and all associated data from Settings. This action is irreversible.
• Access — all your data is visible to you within the app.

Cookies

We use essential cookies only: authentication session, onboarding status and subscription status. No tracking cookies, no analytics cookies, no third-party advertising cookies. Our product analytics (PostHog) runs without analytics cookies.

Country cookie (izel-country): a small cookie that stores your country so Izel can show the appropriate local support services and show prices in your currency.

Children

Izel is for people aged 18 and over. We do not knowingly collect data from children.

Changes to This Policy

We may update this policy as the product evolves. Significant changes will be communicated via the app or email.

Contact

Questions or requests relating to your personal data? Reach out at hello@izel.au