Privacy

← Back

Last updated 15 October 2026

Your writing stays with you.

Everything you write is stored only in this browser, in a PGlite database (a WebAssembly PostgreSQL). Your entries, connections and reflections are never sent to a server. There are no accounts and no logins.

Kept in this browser only:

  • Everything you write: entries, connections, reflections, ratings (in a PGlite database in IndexedDB)
  • Your settings, such as theme
  • A random ID created by the analytics sign-in (Google Firebase), stored in IndexedDB
  • Whether you first arrived from a search engine or directly

What is sent: usage signals

To see whether the tool actually works, Sophia sends small usage signals. They never contain what you wrote. Each one carries:

  • which event happened: session started, step reached, session completed, the Sophia button on a guide page clicked, the support button clicked
  • the time
  • the random ID above (it is not your name or email, but it is the same on every visit from this browser)
  • the page that sent you here (the referrer), and whether you came from a search engine
  • which guide page you came from, if any
  • your browser and operating system (the user-agent string)

The random ID makes these signals pseudonymous, not anonymous: they are not tied to your name, but signals from the same browser can be linked to each other.

The feedback box after a session is different: if you choose to send a message there, its text goes to the maintainer.

Who processes it

  • Google Firebase: anonymous sign-in and the database that receives the usage signals and feedback messages
  • Counter.dev: aggregate visit counts; a pinned copy of its script is served from this site and sends each page view to counter.dev

Why they are always on

Sophia is free and run by one person. These signals are how we learn where people get stuck and what to fix, so they are part of how the tool works rather than an option. They are about steps, not people: we never see your name, email or what you wrote, and nothing here is used for advertising or sold.

Data portability

You can export all your data as a JSON file at any time from the Settings page.

Right to erasure

You can permanently delete all data from the Settings page. This action is immediate and irreversible. You can also clear your browser's storage directly at any time.

GDPR & Sovereignty

Your journal content never leaves your device, so there is nothing of it for us to hold, process or hand over. The usage signals above are never linked to anything you wrote.