Privacy Policy

1. Scope and Who Is Responsible

This Privacy Policy explains how Roman Paprotskyi, trading as Feelings Wheel ("Feelings Wheel," "we," "us," or "our"), collects, uses, shares, and retains personal data. We are the controller of the personal data described in this policy.

This policy applies to the Feelings Wheel website at feelingswheel.app, our mobile applications for iOS and Android, and the accounts, subscriptions, content, artificial-intelligence features, notifications, and related services available through them (collectively, the "Services"). It should be read together with our Terms of Use.

2. Privacy at a Glance

• The website can be used without creating an account. The mobile app uses an account for features that save and synchronize reflections.
• Reflections can contain sensitive information about emotions, wellbeing, relationships, or health. You decide what to enter.
• Optional AI features send selected emotions—and, for requested AI summaries, relevant reflection content—to OpenAI.
• We do not sell personal data or reflection content, and we do not use reflection content for targeted advertising.
• Deleting an account removes it from active use but does not immediately purge every record. You can request permanent erasure by email as described below.

3. Personal Data We Collect

Website data

• Usage and technical data: IP address, approximate location derived from it, browser and device type, operating system, pages viewed, referring page, timestamps, interaction events, errors, and cookie or similar identifiers.
• Feelings selected for AI guidance: the emotion identifiers you choose and the language of the request. The website does not require an account for this feature.
• Preferences: information stored on your device to remember choices such as language or interface settings.
• Messages: your email address and any information you include when you contact us.

Mobile app and account data

• Account and authentication: name, email address, password hash, optional profile image, account ID, preferred language, registration platform, login tokens, and security records.
• Social sign-in: if you use Google or Apple sign-in, we receive information allowed by your provider choice, such as a provider account identifier, name, email, profile image, and authentication tokens. Apple may provide a private relay email address.
• Reflections and wellbeing content: selected emotions, notes, answers to reflection prompts, dates and times, time-of-day labels, onboarding choices about areas of difficulty, saved AI guidance, and other content you choose to record.
• Insights and AI summaries: calculated patterns and statistics, generated headlines, overviews, summaries, date ranges, language, timezone, and the source statistics used to create a summary.
• Subscription data: an app user ID, product and entitlement information, purchase history, transaction or receipt information, renewal status, marketplace, and related timestamps. Apple or Google processes payment details; we do not receive your full payment-card number.
• Notifications: push token, device platform, timezone, language, permission status, reminder preferences, and scheduled reminder times.
• App analytics and diagnostics: app and device details, operating system, country or region, screen layout, navigation, taps and gestures, session duration, errors, and an internal account identifier associated with analytics sessions.
• Device storage: the app stores login credentials in secure device storage and keeps preferences and onboarding status locally on your device.

We also receive ordinary server and security logs when your device communicates with our systems. We do not intentionally collect precise location, contacts, photos, microphone recordings, or health-platform data unless a future feature clearly asks for permission and this policy is updated.

4. Sensitive Reflection and Wellbeing Data

Your emotion selections, notes, and answers may reveal sensitive information about your mental or physical wellbeing, relationships, beliefs, or other private circumstances. Depending on the content and the law where you live, this may be treated as health data, special-category data, or sensitive personal data.

You choose whether to create this content and what level of detail to include. We process it to store your reflections, show your history and patterns, create the insights you request, and provide other features you deliberately use. Where applicable law requires explicit consent for this processing, we will ask for it in the relevant flow. You may withdraw that consent for future processing by deleting content, deleting your account, or contacting us. Withdrawal does not affect processing that was lawful before withdrawal.

Do not include another person’s sensitive or confidential information unless you have an appropriate and lawful reason to do so.

5. How and Why We Use Personal Data

We use personal data to:

• provide, operate, personalize, and synchronize the Services;
• create and secure accounts and support Google or Apple sign-in;
• save, display, organize, export, and analyze your reflections;
• provide optional AI guidance and summaries you request;
• manage Pro access, validate purchases, and prevent purchase fraud;
• deliver reminders and service messages you enable;
• respond to support, privacy, and security requests;
• understand performance and usability, diagnose errors, and improve the Services;
• protect users, enforce our Terms, prevent abuse, and comply with law.

Where a law requires a legal basis, we rely on performance of our contract with you to provide requested features; our legitimate interests in securing, maintaining, and improving the Services; your consent for optional processing such as notifications, non-essential analytics, or sensitive data where required; and compliance with legal obligations. If we rely on legitimate interests, we consider whether your rights and the sensitivity of the data override those interests.

6. AI Features

When you request AI guidance on the website or in the app, we send OpenAI the selected emotion names and the language needed to generate a response. When you request an AI summary in the app, we also send the relevant reflection records for the chosen period, which can include notes and answers to reflection prompts. We do not include your name or email address in the AI prompt.

We use OpenAI’s API to process these requests. Under OpenAI’s published default API data controls, API content is not used to train its models unless the API customer opts in, and content may be retained in abuse-monitoring logs for up to 30 days unless a different approved retention control applies. See OpenAI’s API data controls.

We may store AI output in your account when it forms part of a saved reflection or generated summary. We do not train our own AI models on your private reflections. Website AI requests are not attached to an account, although normal network and security logs may still be created.

7. Analytics, Cookies, and Similar Technologies

Website

In production, the website uses Google Tag Manager to load and manage analytics technologies, which may include Google Analytics and Microsoft Clarity. These services can use cookies or similar identifiers to measure visits, sessions, approximate location, device and browser details, page interactions, and performance. Clarity can provide heatmaps and reconstructed session replays.

Mobile app

The app uses Microsoft Clarity to understand navigation, gestures, screen layout, errors, and usability. We associate an internal account ID—not your email address—with Clarity sessions when you are signed in. Microsoft says its mobile SDK masks information it classifies as sensitive by default, but session data can include visible interface text that is not masked. We use this data to understand product use, not to analyze the substance of an individual person’s reflections.

Website analytics choices

You can block or delete analytics cookies through your browser settings and use any consent control presented on the website. Blocking analytics cookies does not prevent you from using the core feelings wheel, although some preferences may not persist.

Mobile app analytics choices

The mobile app uses the Microsoft Clarity SDK rather than browser cookies. Where applicable law requires consent, non-essential app analytics should operate only with that consent. You may contact us at support@feelingswheel.app regarding analytics data associated with your account.

Learn more in the Google Privacy Policy and Microsoft Privacy Statement.

8. Subscriptions and App Marketplaces

Apple App Store or Google Play processes your purchase and payment details. RevenueCat helps us validate receipts, manage subscription entitlements, restore purchases, prevent fraud, and understand subscription performance. RevenueCat receives an app user ID, device and app details, purchase tokens or Apple receipt information, purchase history, and entitlement status. In our implementation, purchase history can be linked to your Feelings Wheel account ID.

Marketplace and RevenueCat records are also governed by their own privacy practices. See RevenueCat’s Privacy Policy, Apple’s Privacy Policy, and the Google Privacy Policy.

9. Notifications

If you enable reminders, we store your notification preferences, reminder times, timezone, language, platform, and push token. The operating system controls notification permission, and you can withdraw it in device settings or disable reminders in the app.

We use Expo Push Service, which passes notifications to Apple Push Notification service or Google Firebase Cloud Messaging for delivery. Notification titles and bodies are generic reminders and are not intended to contain reflection content. Delivery providers process the push token and notification payload under their own terms.

10. When We Share Personal Data

We disclose data only as reasonably necessary to:

• Service providers: cloud hosting, databases, security, logs, email delivery, support, and other vendors that operate the Services for us.
• AI processing: OpenAI, for optional AI features described above.
• Analytics: Google and Microsoft, for the analytics described above.
• Authentication: Apple or Google when you choose their sign-in service.
• Purchases: Apple, Google, and RevenueCat for subscriptions, receipts, and entitlements.
• Notifications: Expo, Apple, and Google to deliver reminders you enable.
• Legal and safety: authorities, advisers, or affected parties when reasonably necessary to comply with law, protect rights or safety, investigate abuse, or establish or defend legal claims.
• Business changes: a buyer, successor, or adviser in connection with a proposed or completed sale, reorganization, financing, or transfer of the Services, subject to appropriate confidentiality and legal safeguards.

We do not sell personal data or reflection content. We do not use reflection content for targeted advertising or permit service providers to use it for their own marketing. Some laws define "sale" or "sharing" broadly enough to cover certain analytics disclosures; where those laws apply, you may exercise the relevant opt-out right by contacting us.

11. International Data Transfers

Your data may be processed in the United States, the European Economic Area, and other countries where we or our providers operate. Those countries may have privacy laws different from the laws where you live. Where required, we use contractual or other recognized safeguards for international transfers and take steps designed to ensure that providers protect data in accordance with this policy and applicable law.

12. Retention, Account Deletion, and Erasure

We keep personal data for as long as reasonably necessary to provide the Services, maintain security, comply with law, resolve disputes, and enforce agreements. Retention depends on the type of data, why it was collected, its sensitivity, legal requirements, and whether you keep an account. Provider logs, marketplace records, and analytics data follow the applicable provider’s retention settings and obligations. Data in backups may remain until the backup is overwritten in the ordinary cycle.

When you use Delete Account in the app, we revoke access tokens, remove the account from active use, replace the active email with a generated non-routable address, retain the original email in a restricted account record, and soft-delete the account and its reflection sessions. Related records—such as social-login links, AI summaries and usage records, subscription status, device tokens, and notification preferences—may remain linked in restricted storage. This process is intended to make the account inaccessible; it is not immediate permanent erasure of every database record.

To request permanent erasure of personal data that remains after account deletion, email support@feelingswheel.app. We may ask for information reasonably necessary to verify your identity. We will process the request within the timeframe required by applicable law and instruct relevant processors where necessary, subject to limited data we must retain for legal obligations, security, fraud prevention, subscription or tax records, or the establishment or defense of legal claims.

Export any reflections you want to keep before deleting your account. An exported CSV file is created in the app’s temporary storage and passed to the destination you choose through your device’s share interface. Once you share or save it outside the app, the recipient app or storage service—not Feelings Wheel—controls that copy.

13. Your Rights and Choices

Depending on where you live, you may have the right to ask us to access, correct, delete, or provide a portable copy of personal data; restrict or object to processing; withdraw consent; opt out of certain sales, sharing, or targeted advertising; appeal a decision; and complain to a data protection authority. You will not be discriminated against for exercising a privacy right.

You can update some account data and notification choices in the app, export reflections as CSV, delete individual reflections, or delete your account. For any other request, email support@feelingswheel.app. Tell us what right you want to exercise and which Service you used. We may verify your identity and authority before acting. If another person submits a request for you, we may require proof that they are authorized.

We do not use personal data to make solely automated decisions that produce legal or similarly significant effects. AI output is provided only as a reflection feature and is not a professional assessment.

14. Security

We use measures designed to protect personal data, including encrypted network connections, hashed passwords, token-based authentication, secure device storage for app credentials, access controls, and restricted service provider access. No method of storage or transmission is completely secure, so we cannot guarantee absolute security. Keep your device and login credentials secure and contact us if you suspect unauthorized access.

15. Children

The Services are not directed to children under 13, and we do not knowingly collect their personal data. If you are under the age of legal majority where you live, a parent or legal guardian must review and authorize your use where local law requires it. If you believe a child under 13 has provided personal data, contact us so we can investigate and delete it as required.

16. Third-Party Services and Links

The Services may link to third-party websites, app marketplaces, sign-in providers, or sharing destinations. Their privacy practices are controlled by them, not by this policy. Review their notices before providing data.

17. Changes to This Policy

We may update this policy as the Services, providers, or laws change. We will post the revised policy here and update the date below. If a change materially affects how we use personal data, we will provide additional notice in the Services or by another appropriate method when required.

18. Contact Us

For privacy questions or requests, contact the data controller:

Roman Paprotskyi
Feelings Wheel
support@feelingswheel.app