The short version
What you write stays on your phone. The only thing that ever leaves it is a decision you explicitly ask us to think through with you, and we do not keep what you wrote.
What stays on your device
Everything that makes up your record is stored in a database on your phone and is never uploaded:
- what you brought here, in your own words
- the options you were weighing
- what you chose, what you turned down, and why
- what the decision came down to, what you were pulled between, and how you felt
- how sure you were
- your sealed predictions and the answers you give months later
- everything the mirror shows you
We have no copy of any of it. If you delete the app, that record is gone and we cannot recover it for you.
When you use "Think it through"
This is the one feature that leaves your phone, and it requires an account.
What is sent: the text of that conversation, a random identifier for the decision, and your device's country setting. It goes to our server, which passes it to Anthropic's Claude API to generate the reply. Anthropic's processing is governed by their own terms.
Your country setting is used for one thing only: choosing which country's crisis helplines the model is given, so that it never invents a number or offers one that does not work where you are. It is not stored.
What our server keeps afterwards:
- your account identifier
- a random identifier for the decision
- how many turns the conversation ran, and how many tokens it used
- which version of our prompt answered
What it does not keep:
- what you wrote
- what came back
- the title or subject of the decision
- anything else from the conversation
The identifier for the decision is a random string generated on your phone. It lets us count conversations so the free allowance works. It carries nothing about what the decision was.
We do not log the contents of conversations, and our error logs are written to exclude anything derived from them.
Your account
Signing in uses Google. From Google we receive your email address, your name, and a Google account identifier. These are stored by Supabase, our hosting provider.
We use them to know it is you, and to count how many conversations you have had. We do not use them for marketing, and we do not sell or share them.
You do not need an account to use the rest of the app.
Deleting your data
- The record on your phone: delete decisions individually inside the app, or delete the app.
- Your account: in the app, open Settings and choose Delete my account. This deletes your account and the usage rows attached to it. It is immediate and cannot be undone.
- If you no longer have the app: email contact@nivaash.dev from the Google account you signed in with, and we will delete your account within 7 days.
These steps are also at discern.nivaash.dev/delete-account.
Children
Discern is not intended for children under 13, and we do not knowingly collect information from them.
Changes
If this policy changes in a way that affects what leaves your phone, the app will tell you before it takes effect.