Privacy

What people write about their values and their lives is sensitive. This page covers everything Compasso does with it.

Without an account

Everything you write — answers, values, goals, habits, intentions, reflections — stays in this browser, on this device. It is not sent anywhere. Clearing the browser’s data deletes it, and the Journey page can download or erase it at any time.

With an account

The same entries are kept on our server so they open on your other devices, and photos you keep with reflections are stored there as files. Only your account can read them. There is no public profile and no feed of other people. The operators’ admin page shows totals, such as how many accounts exist, and never what anybody wrote. Your password is stored only as a slow, salted hash. If you sign in with Google, we receive your email address and an identifier from Google, and nothing else. Each sign-in is logged with its IP address for 90 days.

The companion

The guided reflection companion runs inside the app. It picks questions from a fixed set using simple rules, and does not send what you write to any AI or model provider.

Email

We email you when something about your account needs it. The Sunday review email is off until you turn it on, and every one of them has a link that stops it.

Payments

If you subscribe to Plus, Stripe handles the payment. We store the Stripe customer id and the state of the subscription, never your card.

Measurement

We count visits and signed-in users with lytics, an analytics service run by the same people as Compasso. It records which account signed in by its internal id, never by email address, and never anything you wrote. There are no ads and no advertising trackers.

Taking it with you, or deleting it

Deleting an entry in the app deletes it everywhere it was synced. From your account page you can download everything as one file, or delete your account. Deleting your account erases every entry and photo in it straight away.