Privacy Notice

Data controller

Psic. Gabriela del Pilar Esquitín González (Professional License No. 13525558) is the data controller for your personal data within Reframeside. You can reach her at psic.gabrielaesquitin@gmail.com.

Who can use Reframeside

Reframeside is intended for people 16 years of age and older. If you're under 16, you shouldn't create an account or use the platform.

What data we collect

Using Reframeside, we collect:

• ·Account data: your email address (no passwords — you sign in with a code we send to that email).
• ·Subscription data: whether your plan is active, which one you chose, and your customer ID in Stripe, our payment processor. Reframeside doesn't receive or store your card number — it's entered directly on Stripe's payment page.
• ·Your progress: which workbooks you started, which module you're on, which ones you finished and when.
• ·Your answers inside exercises: what you write in reflections, logs, and inventories in each workbook.

Not all of these answers necessarily count as sensitive personal data. However, some may contain information that could be considered sensitive, particularly if it reveals aspects related to your health, emotional well-being, personal life, or other information protected by applicable law.

Consent for sensitive data

When you create your account, we ask you to check a specific box, unchecked by default, confirming that you accept the processing of sensitive personal data you choose to voluntarily share through the exercises and reflections. We record the date you gave your consent and the version of this notice you accepted.

What we use your data for

• ·Give you access to your account and save your progress, tied to your email rather than a device.
• ·Process your subscription and renewals through Stripe.
• ·Send you access emails (sign-in codes) and administrative notifications about your account.
• ·Provide technical support when something breaks.

We don't use your answers for advertising, we don't sell them, and we don't share them with anyone beyond what's described in this notice. To operate Reframeside, some technology providers may process certain data to the extent necessary to provide their services (see "Providers and data processors").

Advertising and selling data

We don't sell your answers, we don't use them for personalized advertising, and we don't share them with anyone for advertising purposes. Reframeside doesn't use advertising cookies or analytics tools within the app today.

Providers and data processors

We use these providers to run Reframeside:

• ·Supabase — database and account authentication.
• ·Vercel — application hosting.
• ·Resend — sending your access code by email.
• ·Stripe — payment and subscription processing.

These providers may process certain data to the extent necessary to provide their technical services, under their own applicable terms and policies.

Technical team access

Access to user content is limited, to the extent technically possible, to people who need that access to provide support, maintain, secure, or develop the platform.

Security

Your data travels encrypted in transit (HTTPS). At the database level, your answers are protected through Row Level Security: technically, only your account can read your own answers. No security measure is absolute.

What happens if you cancel your subscription

Canceling your subscription doesn't delete your account immediately. Your access continues until the end of the period you already paid for. After that, your data is kept for the period that corresponds to your plan and is then automatically deleted, except for anything we must keep under applicable legal obligations.

How long we keep your data

When your subscription ends, we keep the data tied to your account for a period that depends on the plan you had:

• ·Monthly plan: 3 months.
• ·Annual plan: 12 months.

The retention period starts when your paid access actually ends, not the day you request cancellation. Once that period is over, we automatically delete the data we're no longer required to keep, except for anything we must retain under applicable legal obligations. If you resubscribe before that period ends, the scheduled deletion is canceled and your account, progress, and answers remain intact.

Deleting your account

You can request deletion of your account and data at any time, independent of the retention period described above. Today this is a manual process: email us at psic.gabrielaesquitin@gmail.com to request it. We're working on offering this option directly from the app in the future.

Your privacy rights

You have the right to access your data, correct it, request its deletion, and object to its use, as well as withdraw your consent. To exercise any of these rights, email psic.gabrielaesquitin@gmail.com with your name and the email you use for Reframeside.

Reframeside is not therapy

Reframeside is a psychoeducation platform grounded in psychology and cognitive-behavioral therapy (CBT) principles. It is not psychological therapy, doesn't provide diagnoses, and doesn't replace evaluation or care from a mental health professional. It is not an emergency service. Your answers aren't automatically monitored for signs of crisis.

If you're in crisis

Reframeside is not an emergency service. If you're in crisis or need to talk to someone right now: in the US, call or text 988 (Suicide & Crisis Lifeline, 24/7). In Mexico, SAPTEL 55 5259 8121 (Spanish-language, 24/7, anonymous) or Línea de la Vida 800 911 2000 are also available. If you or someone else is in immediate physical danger, call 911 (or your local emergency number).

Changes to this notice

We may update this notice to reflect changes to the app. When the content changes in a meaningful way, we'll publish a new version on this same page.