Privacy Policy
This policy covers Refrain specifically: the website at refrain.infinitumcor.org and the Android app com.infinitumcor.loom. Refrain was previously called The Loom; the app's identifier still carries the old name because Google Play identifiers cannot be changed after publishing. It is published by Infinitum Cor LLC, Minnesota, USA.
1 · What we collect, and why
| What | When | Why | Where it lives |
|---|---|---|---|
| Your email address | When you sign in | Sign-in works by a magic link sent to your email. There are no passwords. | Our database, run by Supabase |
| Your journal: entries, tags, moods, reflections, insights | As you write | So your journal follows you between devices | Our database, in a private space only your account can read |
| Files you attach to an entry | Only if you attach one | To keep them with the entry | Our file storage |
| Preferences | As you set them | So the app remembers your settings | Our database, tied to your account |
2 · What we never collect
- No analytics of any kind. We do not know which pages you visit, how often you write, or how long you stay.
- No advertising identifiers, no ad networks, no tracking across other apps or sites.
- No location data, contacts, microphone, or camera.
- No payment details. Refrain has no purchases.
3 · Who can read your journal
You. Entries are stored under access rules that bind them to your account alone; another user's account cannot query them. We do not read your journal, and we have no feature that shares it with anyone. The honest limits: entries are not end-to-end encrypted, so we are technically capable of accessing the database that holds them, and we would only ever do so if the law compelled us or to investigate abuse of the service itself.
4 · How long we keep it
- Your journal, attachments, preferences, and account are kept for as long as you keep your account.
- Deleting an entry removes it immediately. Deleting your account removes your journal, insights, and account data immediately.
- If anything ever remains that you want gone, email us and we will erase it within 30 days.
- Beyond the above, we do not store or retain user data. There are no analytics records to keep.
5 · Erasing everything
Open Settings in the app. Delete all data erases every entry and insight and keeps your account. Permanently delete account erases everything, including the account itself, and cannot be undone. Both run immediately, no email, no ticket. Full instructions: refrain.infinitumcor.org/delete-my-data.html
If you would rather not use the app to do it, email contact@infinitumcor.org from the address you sign in with and we will do all of it for you.
6 · Who else touches your data
We use two service providers to run Refrain. They process data on our instructions and do not get to use it for their own purposes:
- Supabase · the database and file storage holding your account and journal
- Netlify · hosting for the app itself
We do not sell your data, we do not share it with data brokers, and we do not disclose it to anyone else except where the law requires it.
7 · Your rights
Depending on where you live, you may have the right to see what we hold about you, correct it, have it erased, get a copy of it, or object to how we use it. We honor all of these for everyone, regardless of where you live. Write to contact@infinitumcor.org.
8 · Children
Refrain is not directed at children under 13, and we do not knowingly collect anything from them. If you believe a child has given us their information, write to us and we will erase it.
9 · This is not health care
10 · Changes
If this policy changes we will update the date below, and material changes will be announced in the app.
Contact: contact@infinitumcor.org
Delete my data · Ecosystem Privacy & Terms · Back to Refrain