Privacy Policy

Sinew (“we”) operates this website and mobile web app. This policy explains how we collect, use, and protect your data, and it applies to everything you do in Sinew.

(1) Anonymous usage — stays on your device

• Your setup profile: the stress sources and training goals you pick the first time you use Sinew.
• Drill records: results, tension ratings, check-ins, and growth points.

Before you sign in, this data lives only on your device (browser localStorage). It is not uploaded to our servers.

(2) Account data — after you sign in

• Through Google sign-in: your name, email, and avatar.
• Session details: sign-in time, device, and browser type (used for session security).

(3) Training data — synced after you sign in

• Once you sign in, your drill records, check-ins, and growth points sync to the server so we can show your resilience curve and level.
• Subscription status: your plan and its state.

(4) Mirror data

The raw journal you write in Mirror never leaves your device. We send and store only an anonymous summary (topic category, emotional tendency, word count) to the AI service, and that is what generates your reflection. Your raw text is never stored on our servers.

(5) Feedback

The category and suggestion you submit through “Send us feedback”, plus your email address if you choose to give one.

(6) Analytics (Google Analytics & Microsoft Clarity)

Page-visit statistics collected through Google Analytics (GA4): page views, device and browser type, and rough referring channel. This is anonymous, aggregate data — it doesn't include your drills, Mirror journal, or anything that identifies you personally. Microsoft Clarity records anonymized session replays and click-heatmaps so we can see how the interface is used and where it frustrates visitors. Clarity shows page layout and cursor movement, but never your Mirror journal, which never leaves your device.

• To run and improve the service, personalize drill recommendations, generate Mirror reflections, and handle subscriptions and payment.
• We process the minimum information needed, on the basis of our legitimate interest in providing and improving this service while protecting users' privacy and security.

• Google: sign-in authentication.
• Google Analytics (GA4) and Microsoft Clarity: anonymous analytics and session-replay statistics. Neither receives your drills, account, or Mirror content.
• AI providers (such as DeepSeek / Volcano Ark): they receive only Mirror's anonymous summary, to generate your reflection.
• Payment provider: processes subscription charges. We do not store full card details.
• Crisp (live chat): only loads when you open the chat window yourself, and carries your conversation with us. Crisp records a session identifier and IP to keep the conversation continuous. We do not push your account information to Crisp.
• Cloud hosting (database and audio storage): stores the data described above.

We do not sell your personal data.

Data is stored in a PostgreSQL database with row-level isolation between tenants, and encrypted in transit. We keep data as long as the service requires it, and you can request deletion at any time (see section 6).

• View and correct: your account details are visible once you sign in, and you can cancel your subscription any time from the subscription page.
• Delete and export: write to [email protected] to request deletion or an export of your data. We handle requests within 30 days.
• Withdraw consent: you can sign out at any time, and cancelling a subscription takes effect immediately.

AI services and some cloud services may process data outside your country. We choose compliant providers and transfer only the minimum data needed to deliver the service (Mirror, for example, sends only the anonymous summary).

Sinew is for users aged 14 and over. We do not knowingly collect personal information from children under 14.

Sinew uses browser localStorage to keep your setup profile, subscription status, and drill records on your device, so you don't have to set things up again and can keep training offline.

Sinew sets two cookies required for basic function: a session cookie that keeps you signed in, and NEXT_LOCALE, which remembers the language you chose. Neither serves advertising.

Google Analytics (GA4) writes its own analytics cookies (such as _ga) to distinguish visitors and sessions and count visits; Microsoft Clarity sets a cookie and uses LocalStorage to record anonymized session replays and heatmaps. These statistics contain none of your drills, account, or Mirror content, and we do not use them for cross-site advertising tracking.

We may update this policy. For material changes we will notify you in a reasonable way.

Questions or requests about privacy? Write to [email protected]