Privacy
Last updated 3 October 2026
This app asks you to write down the parts of your week you would rather not repeat. That only works if you know where it goes. This page says so in plain language, and it describes the system that exists rather than one we intend to build.
The short version.
What you write is stored against your account so it can be read back to you and compared over time — that comparison is the entire product. It is processed by Anthropic's models to produce the reflection you see. It is not sold, not shared with advertisers, and not used to train anyone's models. There are no advertising trackers anywhere, and no third-party script runs in your browser at all. You can export everything, or delete your account, from Settings without asking anyone.
Who is responsible for this
Patternverse is the data controller for everything on this page: it decides what is collected and why, and it is the one answerable for it. It is operated from the United States, and these Terms and this policy are governed by United States law. Patternverse is being incorporated; the registered company name and address will be named here as soon as that is complete, and this page is dated so you can see when it was last true.
For anything about your data — a question, a correction, a complaint, a request to see what is held — write to patternverse.beta@outlook.com. There is no separate data protection officer; that address reaches the person responsible.
If you are in the UK or the EU, you keep your UK/EU GDPR rights even though we are in the United States, and the sections below are written to them. If you are in Washington State, the My Health My Data Act applies to what you write here and this page is also the consumer health data notice it requires.
Why we are allowed to hold it
What you write here is information about your mental health, which nearly every privacy law treats as a special category needing more than a good reason. Being useful to you is not enough on its own. So:
| Your explicit consent | The basis for storing your entries and analysing them — Article 9(2)(a) of the UK and EU GDPR, and the affirmative consent required before consumer health data is collected under Washington’s My Health My Data Act and the opt-in rules in Colorado, Connecticut, Texas and other states. Asked before you write anything, as two separate ticks rather than one bundled agreement, and recorded with the date and the version of what you were shown. |
|---|---|
| Your explicit consent to the transfer | A second, separate basis, because the first one does not cover it: your entries are processed in the United States. Article 49(1)(a) permits a transfer on explicit consent where you have been told the risk, and the risk is that US public authorities can reach data in ways your own country’s law may not allow. |
| Legitimate interests | Used for one thing only: counting that requests happened, so we know which parts of the product are worth building. Described in full below, and switchable off in Settings. Never used as a basis for anything you write. |
You can withdraw consent. Because there is no version of this product that stores nothing and calls no model, withdrawing it means deleting your account — Settings → Privacy & data does it immediately, and it erases the data rather than switching it off. If the description of what you agreed to changes in substance, you will be asked again rather than carried over.
Decisions the system makes on its own
Almost everything you see here is produced by a model with no person in the loop: what it took to be the trigger, what you made it mean, that a pattern recurs, and — the one that matters most — whether what you wrote looked like a crisis. Nobody reads your entries as a matter of routine.
None of it is a decision about your rights, your money, your care or your access to anything, so this is not the kind of automated decision-making the law prohibits outright. But a system that builds a picture of how your mind works can be wrong about you, and you are entitled to say so to a person.
Settings → Privacy & data → “Ask a person to review something” opens a message to us about any of it. A person reads it, and can correct a pattern, remove an analysis, or delete it entirely. You never have to argue with the app.
What is stored
Your account
An email address, and a display name if you give one. If you sign in with Google, we receive your email address, name and profile picture from Google — nothing else, and no access to your Google account beyond confirming who you are.
What you reflect on
The entries you write or speak, and the answers you give to follow-up questions. Voice input is transcribed and treated exactly like typed text.
What the system works out from it
Each entry produces structured analysis: what set something off, what you made it mean, how you reacted, what followed. Those are stored as fields rather than prose. Above that sit the patterns — when the same shape recurs, the system records that a loop exists, how often it has been seen, and which entries belong to it.
Operational records
Session and message timestamps, which model handled a turn, integrity checks that ran on the output, and safety events. These exist so the system can be audited and corrected, not to build a profile of you.
On verbatim text. Whether the exact wording of entries is retained beyond the current conversation is a system-level setting, not a per-account one, so assume your wording is stored. The pattern-finding itself does not depend on it — counts and qualifications are kept as structured values, not sentences.
If you turn on notifications
Which kinds you want, your reminder time and quiet hours, and your timezone, so "8pm" means your 8pm. For each device you allow, the delivery address its browser gives us. And a record of which kind of notification was sent on which day, so you are never sent more than one a day. Never the text of anything you wrote: notifications say the same fixed things to everyone, because they appear on lock screens.
Counting how the app is used
To know which parts of Patternverse are worth building, our server counts that a request happened: that the app was opened, that a reflection was sent, which screen was asked for, whether it succeeded and roughly how long it took. That is the whole list.
This is counted on our side rather than in your browser. Nothing is downloaded, no third-party script runs on any page, and no identifier is stored on your device for it. The code that does the counting never reads the contents of a request, so it cannot send what you wrote even by mistake.
Events carry a one-way code in place of your account — made by hashing your account id with a secret only our server holds — so our analytics provider receives no identifier that points back at you, your name or your email.
This is the one thing on this page that does not rest on your consent. It rests on legitimate interests: we need to know which parts of the product are used, it cannot be learnt another way, and the cost to you is as close to nothing as we could make it — no script, nothing on your device, and no identifier that leads back to you. If you disagree with that balance you can object, and the switch below is the objection.
Settings has a switch called Share anonymous analytics. It is on by default and turning it off genuinely stops it: your app then marks every request as one not to count, and the server records nothing for it. Turning it off stores nothing and leaves nothing behind.
Who else touches it
Patternverse is built on other companies' infrastructure, and being vague about which would defeat the point of this page. Each of these is a processor acting on our instructions.
| Anthropic | Runs the models that read your entry and compose the reflection. Your text is sent to their API to produce your response. |
|---|---|
| Supabase | Database and sign-in. Your account and everything above lives here, encrypted at rest. |
| Vercel | Hosts the site and the server that talks to the models. |
| ElevenLabs, OpenAI | Speech. Used only when you use a voice feature; text is sent to generate audio. |
| Only if you choose to sign in with Google, and only to confirm your identity. | |
| PostHog | Product analytics. It receives the counts described above, sent from our server, under a one-way code rather than your account. It never receives what you wrote, and its code never runs in your browser. |
| Push services | Only if you turn on notifications. Your browser's own push service — Google, Apple, Mozilla or Microsoft — delivers each one. The message is encrypted so they cannot read it, and it says nothing about what you wrote. |
All of them are in the United States, and so is the database. If you are reading this from the UK or the EU, that is an international transfer of health data, and you consented to it specifically at the gate before you started writing — that consent is the mechanism the transfer rests on. It is not the strongest mechanism available: the stronger ones are contractual clauses signed with each company, and we are working on putting them in place. Saying so is better than implying we already have.
Nobody else. No advertising networks and no data brokers. Neither this website nor the app loads a tracking script of any kind, which you can check by viewing the source of either one.
What is never done with it
- It is not sold, rented, or traded.
- It is not used to train models — not ours, not anyone's.
- It is not used to target advertising at you, here or anywhere else.
- It is not shared with a therapist, employer, insurer or family member. There is no such feature, and no back door for one.
Getting it back, and getting rid of it
Both live in Settings, and neither requires contacting us.
- Export gives you your profile, your entries and every result in one file — the actual content, not a summary of it.
- Delete account cannot be undone. Everything you wrote is erased: your entries, every reflection the app produced from them, your loops, your saved insights, your profile, your notification settings and your sign-in. The rows are deleted, not hidden or blanked, and a new account later with the same email starts empty because there is nothing left to find.
One thing is kept, and it is worth being exact about. If the app ever showed you crisis support, a record that this happened is kept: the date, the kind of trigger, which resources were offered, and whether it was escalated. That record has to stay reviewable, so before anything is deleted it is copied somewhere that has no link back to you — no account id, no conversation id, nothing you wrote. What survives is that it happened, not that it happened to you.
How long it is kept
While you are using Patternverse, your data stays. After 90 days with no activity, the account and everything in it is deleted automatically — the same deletion the button in Settings performs, with the same single exception described above. Nothing is archived, and there is no copy to restore it from.
Activity means anything that reaches us: a new entry, or a new conversation. Reading without writing does not, which is why the window is three months of complete silence rather than three months without typing. If you want to keep something beyond that, export it — Settings gives you both a readable copy and a machine-readable one.
This is not a tidying-up preference. Keeping someone's reflections years after they stopped using a thing is keeping them for no reason, and data held for no reason is data that can only ever be lost, subpoenaed or breached.
The person you name for a crisis
The crisis screen lets you write down someone you want reached. If you add one it is kept on your account, so it is there on another device and after clearing your browser — an emergency contact that is not there in an emergency is worse than none, because you believed it was saved.
It is the only thing here about somebody other than you, and somebody who was never asked. So it is kept exactly as you typed it and nothing more is done with it: it is never read apart into a name and a number, never matched against anything, never contacted by us, and never shown to anyone but you. Clearing the field removes it. Deleting your account removes it with everything else.
If you are in danger
If something you write suggests you may be at risk, the reflection stops and the screen shows crisis lines chosen for where you are, with an international directory alongside them. That check runs on your text like any other processing. Patternverse is not an emergency service and nobody is watching your entries in real time. In immediate danger, contact your local emergency number.
What this is not
Patternverse is not a medical device, not a diagnostic tool, and not a substitute for therapy or professional care. Nothing it produces is medical advice.
Cookies and what your browser keeps
No advertising cookies, and no analytics cookie or identifier of any kind. Your browser stores a sign-in token so you stay signed in, small preferences like your theme and whether the sidebar is open, a copy of the emergency contact if you add one, and a copy of your profile (your name, email, and the answers you gave when setting up) so the app can open straight away instead of waiting on the network. It never keeps your entries or anything worked out from them. Signing out clears the profile copy; clearing site data removes all of it and signs you out.
When you open the notification settings, the app installs a small service worker in your browser so that it can offer them. It shows notifications and opens the app when you tap one. It does not store, cache or read pages.
Children
Patternverse is not intended for anyone under 16, and accounts should not be created for them.
Changes
If what the system does with your data changes, this page changes first and the date at the top moves. Material changes will be surfaced in the app rather than quietly published.
What you can ask for
Two of these you can do yourself, right now, without asking anyone: Settings → Privacy & data has Export and Delete account. The rest are requests, and the address below is how to make them.
- A copy of what is held — the export gives you this immediately, in both a readable file and a machine-readable one.
- Correction — if something held about you is wrong, including anything in your profile.
- A person to look at it — for anything the system worked out rather than anything you typed. Settings → Privacy & data → “Ask a person to review something”, and you do not have to say why first.
- Deletion — Settings does this. Write to us if you cannot reach it.
- Restriction — ask us to keep your data but stop using it, while something is being worked out.
- Objection — tell us to stop a particular use. The one use that is not strictly necessary is the usage counting, and the switch for that is in Settings.
- Withdrawing consent — where something rests on your consent you can take it back, and that does not require deleting your account.
We answer within a month. If a request is refused we will say why, and refusing does not affect the right below.
If we get it wrong
You can complain to a regulator, and you do not need our permission or agreement to do it. In the United States that is the Federal Trade Commission or your state Attorney General’s office — and if you are in Washington State, the My Health My Data Act lets you bring a claim yourself. In the UK that is the Information Commissioner's Office. In the EU it is the authority in the country you live or work in — the European Data Protection Board lists them all. Elsewhere, your national regulator.
We would rather hear from you first, because we can usually fix it faster, but that is a preference and not a condition.
Asking about any of this
Write to patternverse.beta@outlook.com. A person reads it.