Privacy policy

Last updated: 12 October 2026

This policy describes what the Reframe app and this website do with your data.

1. Who is responsible

The data controller is Claes Consultants BV, Boskant 32, 3945 Tessenderlo-Ham, Belgium, enterprise number BE 0685.540.174. Contact: robin@easystreet.be.

2. Data that stays on your phone

The app keeps the following in a database on your device:

• the thoughts you wrote down and the reframes you received (your journal);
• the replacement thoughts you saved;
• your first name, if you entered one. It is only used to greet you;
• your language setting and the record that you agreed to the AI processing described below;
• whether you switched the usage statistics on or off;
• the times at which you received a reframe in the last 7 days, which the app uses to count your free reframes, and whether Reframe Plus is active;
• technical records: that you finished the introduction, that the Reframe Plus offer was shown once, on iPhone the key and token of the device check, the identifier and purchase status cached by RevenueCat, and a scheduled trial reminder if you allowed it.

We have no access to this data. It is removed when you delete the app. "Delete all my data" on the You tab removes your journal, your saved thoughts and your name. It keeps your language, your consent record and these technical records. It does not reset the count of free reframes and it does not cancel a subscription. If you back up your iPhone, the app's data can be part of that backup, under the terms of your backup provider. On Android, the app is excluded from Google's backup, so its data is not part of a backup of your phone.

3. Data that is sent when you ask for a reframe

The app asks for your consent before it sends anything. When you ask for a reframe, the app sends two things over an encrypted connection (HTTPS) to our server: the text of the thought you wrote, and the language of the app (English, Dutch, French, Italian or Spanish). Your name, your journal and your saved thoughts are not sent.

Our server adds our instructions for the AI model and passes them, with the text, to a server function of ours, hosted at Supabase in the European Union (Ireland). That function sends the request to an external AI service, receives the reframe and returns it. Neither our server nor this function stores the text or the reframe or writes them to its logs. For each request our server logs the time, the outcome (for example "ok", an error code, or the category the AI service gave when it refused a text), the duration and whether the device check in section 4 passed.

The text of a thought can say something about your health or other sensitive matters. Write only what you are willing to have processed in this way, and leave out names and details that identify other people.

Reporting a response

You can report a response from inside the app, for example when it is offensive, harmful or inaccurate. A report sends only the reason you chose, the language of the app, the app version and the platform (iPhone or Android) to our server. It never contains your thought or the response, and our server records only those four details.

What the AI service does with the request

The reframe is written by an AI model of an AI service provider whose parent company is established in the United States and which acts on our instructions, as our processor, under a data processing agreement. Because we are established in Belgium, our contract is with the provider's company in Ireland. You can ask us for the name of the provider. The provider's terms and documentation for business customers state the following (as published on 12 October 2026):

• What the provider receives: the text of your thought, the language of the app and our instructions for the model. It receives no name, no account and no identifier of you or your phone.
• The provider does not use the text or the reframe to train AI models.
• The provider deletes inputs and outputs from its systems within 30 days.
• If the provider's automated safety systems flag a request as a violation of its usage policy, the provider keeps the input and the output for up to 2 years and the scores of those systems for up to 7 years.
• The provider can keep data for longer where the law requires it.

The provider stores data in the United States. The AI model can run on the provider's infrastructure in the United States or in another region where the provider operates. Your text is therefore processed outside the European Economic Area. For this transfer, the data processing agreement includes the European Commission's standard contractual clauses (controller to processor).

4. Device check

On iPhone, the app uses Apple's App Attest service to keep others from misusing our server. Apple confirms to our server that a request comes from a genuine copy of the Reframe app on a real Apple device. The attestation consists of a cryptographic key that is created on your device for this app and a statement signed by Apple. It contains no name and no Apple Account. It does contain an identifier of the key, which the app sends with each request; our server checks it and does not store it or keep a list of devices.

On Android, no device check is performed at this time.

5. Hosting

Our server and this website run on EAS Hosting, a service of Expo (650 Industries, Inc.) that runs on Cloudflare's network. To deliver the service, the host processes request metadata such as your IP address, the time of the request and technical details of the connection. See Expo's privacy policy.

6. Reframe Plus purchases

Reframe Plus is an optional subscription. You do not need an account with us to buy it.

• The purchase is processed by Apple (App Store) on iPhone or by Google (Google Play) on Android, under their own terms and privacy policies. We never see your payment details.
• To know whether Plus is active, the app uses RevenueCat (Revenue Cat, Inc., United States). RevenueCat receives the status of the purchase from the store (the product, the dates of purchase, renewal and expiry, the price and the currency), a random app user identifier that is created on your phone for this app; on iPhone also Apple's identifier for vendor, an identifier that is the same for all apps of our company on your phone; and technical details of the request: the app version, the platform, the operating system version, the device model, the country of your store account, your preferred languages and your IP address.
• No name and no email address are collected. The identifier is not linked to your journal or to the text of your thoughts, and the text of your thoughts is never sent to RevenueCat.

RevenueCat processes this data on our behalf, in the United States. See RevenueCat's privacy policy. If you start a free trial and allow notifications, the app shows one reminder notification two days before the trial ends. The reminder is created and stored on your phone; nothing is sent to a server for it and no push token is requested. If you never open a purchase and never subscribe, the app still contacts RevenueCat at startup to check whether a subscription exists; that request contains the random identifier and the technical details above.

7. Usage statistics

The app records how it is used, so that we can see what works and improve it. An event is recorded when, for example, the app is opened, a step of the introduction is shown, you agree or decline on the AI consent screen or withdraw that consent, you start writing or send a thought, a reframe arrives or fails, a result, a tab, the saved thoughts or the thinking trap library is opened, a replacement thought is saved or removed, a response is reported (with the reason you chose), the Reframe Plus screen is shown or closed, a plan is chosen, a purchase is started, completed (with the plan, its price and currency and whether it starts with a free trial), canceled, failed or restored, you answer the question about the trial reminder, the language is changed (and to which language), or a reframe or all data is deleted.

Some events carry a number, a range or a yes or no value, for example the length of the thought as a range (such as 51 to 150 characters), how long the analysis took, how many thinking traps the reframe named, the technical reason a reframe failed (no connection, timeout, service unavailable or server error), how many free reframes are left, a range for the number of journal entries or saved thoughts, whether your journal has entries and whether Reframe Plus is active. Each event carries its time, the app version, the platform (iPhone or Android), the language and the country set on your phone, and a session id.

The session id is a random value that the app creates in memory each time it starts. It is not saved on your phone and is replaced the next time the app starts. We have no identifier that connects events from different sessions with each other or with your phone, and we do not try to connect them. Within one session it does group the events together. It is not the RevenueCat identifier, not the key of the device check and not an advertising identifier. The app saves no usage events on your phone; it only saves whether you switched the statistics on or off.

The events never contain the text of a thought, a reframe or a replacement thought, your name, which thinking traps were found or which ones you looked at, or anything else you type. Nothing is recorded about the support and crisis resources: not whether they were shown and not whether you used them. We do not store your IP address with the events.

The events are sent over an encrypted connection (HTTPS) to our own server function and stored in our database at Supabase (Supabase, Inc., United States). The database is located in the European Union (Ireland), and the app asks for the server function to run in that same region. As the host, Supabase processes request metadata such as your IP address to deliver the service. We use no third-party analytics service for app usage. RevenueCat shows us totals about purchases. The data is not sold, not shared with anyone else, not used for advertising and not combined with data from other companies.

The usage statistics are on by default. You can switch them off at any time: open the You tab and turn off "Share usage data". After that nothing is recorded or sent. "Delete all my data" does not change the usage statistics: the app stores no identifier for them on your phone, so there is nothing to remove on your phone, and we have no identifier to find earlier events by.

8. This website

This website sets no cookies and uses no analytics. It loads its fonts from Google Fonts, which means your browser connects to Google's servers and Google receives your IP address when you open a page.

9. What we do not do

• No account and no login.
• No third-party analytics service for app usage.
• No advertising and no advertising identifiers.
• No tracking across apps or websites.
• No sale or sharing of your data for other purposes than those in this policy.

10. Legal basis

We process the text of your thought on the basis of your consent (GDPR article 6(1)(a) and, where the text reveals data about your health, article 9(2)(a)). You give that consent in the app before the first reframe. You can withdraw it at any time: open the You tab and choose "Withdraw AI consent". After that the app sends no thought until you agree again. The app also sends nothing unless you ask for a reframe. The device check, the handling of reports and the processing of request metadata by our host rest on our legitimate interest in running the service securely and preventing misuse (article 6(1)(f)). The processing of the purchase status for Reframe Plus is necessary to deliver the subscription you bought (article 6(1)(b)). For users without a subscription, the check at startup whether a subscription exists rests on our legitimate interest in knowing which features to unlock (article 6(1)(f)).

The usage statistics rest on our legitimate interest in understanding how the app is used so that we can improve it (article 6(1)(f)). The events contain no text you wrote, no name and no stored identifier, stay on our own server and are not used for advertising. You can object at any time by switching the usage statistics off in the app.

11. Retention

We do not keep the text of your thoughts or the reframes. Data on your phone stays there until you delete it. Section 3 describes what the AI service provider keeps and for how long. RevenueCat keeps the purchase status and the random identifier for as long as we use its service; you can ask us to have them deleted.

The individual usage events are deleted after 24 months.

12. Your rights

Under the GDPR you have the right to access, correct and erase your personal data, to restrict or object to its processing, to receive it in a portable format and to withdraw your consent. Because your journal is stored only on your phone and we keep no copy of your text, you exercise most of these rights in the app itself. For anything else, write to robin@easystreet.be.

The usage statistics contain no identifier that is stored on your phone or linked to you. We therefore have no means to look up the events of one person or one phone, and cannot provide or delete them on request. You stop them yourself by switching them off.

You can lodge a complaint with the supervisory authority. In Belgium this is the Data Protection Authority (Gegevensbeschermingsautoriteit), www.dataprotectionauthority.be.

13. Not a medical device

Reframe is a self-help tool. It is not therapy and not medical advice, it cannot make a diagnosis, and it is not a medical device. The reframes are written by an AI model and can be wrong.

14. Age

Reframe is meant for people aged 13 and older. It is not directed at children under 13, and we do not knowingly process their data. If you are under 13, do not use the app. A parent or guardian who believes that a child under 13 has used the app can write to robin@easystreet.be.

15. Changes

When this policy changes, the new version is published on this page with a new date.