Data protection
Privacy Notice
How your data is collected, used, and protected within Reframeside.
Data controller
Psic. Gabriela del Pilar Esquitín González (Professional License No. 13525558) is the data controller for your personal data within Reframeside. You can reach her at psic.gabrielaesquitin@gmail.com.
Who can use Reframeside
Reframeside is intended for people 16 years of age and older. If you're under 16, you shouldn't create an account or use the platform.
What data we collect
Using Reframeside, we collect:
- ·Account data: your email address (no passwords — you sign in with a code we send to that email).
- ·Subscription data: whether your plan is active, which one you chose, and your customer ID in Stripe, our payment processor. Reframeside doesn't receive or store your card number — it's entered directly on Stripe's payment page.
- ·Your progress: which workbooks you started, which module you're on, which ones you finished and when.
- ·Your answers inside exercises: what you write in reflections, logs, and inventories in each workbook.
Not all of these answers necessarily count as sensitive personal data. However, some may contain information that could be considered sensitive, particularly if it reveals aspects related to your health, emotional well-being, personal life, or other information protected by applicable law.
Consent for sensitive data
When you create your account, we ask you to check a specific box, unchecked by default, confirming that you accept the processing of sensitive personal data you choose to voluntarily share through the exercises and reflections. We record the date you gave your consent and the version of this notice you accepted.
What we use your data for
- ·Give you access to your account and save your progress, tied to your email rather than a device.
- ·Process your subscription and renewals through Stripe.
- ·Send you access emails (sign-in codes) and administrative notifications about your account.
- ·Provide technical support when something breaks.
We don't use your answers for advertising, we don't sell them, and we don't share them with anyone beyond what's described in this notice. To operate Reframeside, some technology providers may process certain data to the extent necessary to provide their services (see "Providers and data processors").
Advertising and selling data
We don't sell your answers, we don't use them for personalized advertising, and we don't share them with anyone for advertising purposes. Reframeside doesn't use advertising cookies or analytics tools within the app today.
Providers and data processors
We use these providers to run Reframeside:
- ·Supabase — database and account authentication.
- ·Vercel — application hosting.
- ·Resend — sending your access code by email.
- ·Stripe — payment and subscription processing.
These providers may process certain data to the extent necessary to provide their technical services, under their own applicable terms and policies.
Technical team access
Access to user content is limited, to the extent technically possible, to people who need that access to provide support, maintain, secure, or develop the platform.
Security
Your data travels encrypted in transit (HTTPS). At the database level, your answers are protected through Row Level Security: technically, only your account can read your own answers. No security measure is absolute.
What happens if you cancel your subscription
Canceling your subscription doesn't delete your account immediately. Your access continues until the end of the period you already paid for. After that, your data is kept for 3 months and is then automatically deleted, except for anything we must keep under applicable legal obligations.
How long we keep your data
When your subscription ends, we keep the data tied to your account for 3 months, regardless of whether your plan was monthly or annual.
The retention period starts when your paid access actually ends, not the day you request cancellation. Once that period is over, we automatically delete the data we're no longer required to keep, except for anything we must retain under applicable legal obligations. If you resubscribe before that period ends, the scheduled deletion is canceled and your account, progress, and answers remain intact.
Deleting your account
You can request deletion of your account and data at any time, independent of the retention period described above. Today this is a manual process: email us at psic.gabrielaesquitin@gmail.com to request it. We're working on offering this option directly from the app in the future.
Your privacy rights
You have the right to access your data, correct it, request its deletion, and object to its use, as well as withdraw your consent. To exercise any of these rights, email psic.gabrielaesquitin@gmail.com with your name and the email you use for Reframeside.
Reframeside is not therapy
Reframeside is a psychoeducation platform grounded in psychology and cognitive-behavioral therapy (CBT) principles. It is not psychological therapy, doesn't provide diagnoses, and doesn't replace evaluation or care from a mental health professional. It is not an emergency service. Your answers aren't automatically monitored for signs of crisis.
If you're in crisis
Reframeside is not an emergency service. If you're in crisis, having thoughts of suicide, or worried about someone else: call or text 988 (Suicide & Crisis Lifeline, 24/7) — it works the same in the United States and Canada. If you or someone else is in immediate danger or an attempt is in progress, call 911. Spanish-language support: in the U.S., call 988 and press 2, or text AYUDA to 988. In Canada, ask for language support when you call 988.
Changes to this notice
We may update this notice to reflect changes to the app. When the content changes in a meaningful way, we'll publish a new version on this same page.
Version 1.0 — September 2026.