Reframe (“the app”) is operated by NGN Consulting Corp. (“we”, “us”). This policy explains what we collect, why, who we share it with, and how long we keep it. We have tried to write it in plain language rather than legal boilerplate.
Reframe helps you understand messages in your relationship. That means you may share genuinely sensitive material with us — private conversations, feelings, and details about someone who is not a user of this app. We take that seriously, and the rules below are enforced in our code, not just stated here.
| What | Why we need it |
|---|---|
| Email address and password | To create and secure your account. Passwords are hashed by our authentication provider; we never see or store your plain-text password. |
| Screenshots you upload | To read the conversation you want analysed. See “Screenshots are deleted within 24 hours” below. |
| Message text and thread context extracted from those screenshots, or typed by you | To produce the analysis, and to power the memory and pattern features that look across your history. |
| Analysis results (interpretation, tone score, suggested replies) | So you can revisit past analyses and so the app can track patterns over time. |
| Milestones you add (label, date, importance, reminder preference) | To remind you about them and to give the AI relevant context. |
| Notification token and preferences | To send the push notifications you have enabled. You can turn these off at any time. |
| Subscription status | To unlock paid features. Payment itself is handled by Google Play — see section 3. |
We do not collect: your contacts, your location, your device identifiers for advertising, your other apps, or your general phone activity. Reframe contains no advertising SDKs and no third-party analytics or tracking SDKs.
Screenshots you upload will usually contain messages written by someone else. You are responsible for having a legitimate reason to share that content with us. We use it only to generate your analysis, we never contact that person, and we never build a profile of them. If they contact us to ask what we hold about them, we will act on the deletion rules in section 5.
We use it to operate the app: to authenticate you, generate analyses, remember relevant context, send reminders you asked for, enforce subscription limits, and keep the service secure and working.
We do not sell your data. We do not share it for advertising. We do not use your conversations to train AI models — see section 3.
We use a small number of processors to run the service. Each receives only what it needs.
| Provider | What it receives | Purpose |
|---|---|---|
| Supabase | Account, analyses, milestones, uploaded screenshots | Database, authentication and file storage |
| OpenAI | Message text and relevant context, at the moment of analysis | Generating the analysis |
| Railway | Data in transit through our backend | Server hosting |
| RevenueCat and Google Play Billing | A pseudonymous user ID and your subscription status | Managing subscriptions |
| Expo / Google Firebase Cloud Messaging | Your push token and the notification text | Delivering push notifications |
store: false, which instructs
OpenAI not to retain the request. We have also disabled data sharing at the account level. Your
conversations are not used to train OpenAI’s models or ours.
We may also disclose information if we are legally required to, or where necessary to protect someone’s safety or our legal rights. If our business is ever sold or transferred, your data may transfer with it; we will tell you before that happens.
This is a core rule of the product, not a courtesy. Every uploaded screenshot image is permanently deleted from storage within 24 hours of upload. A cleanup job runs every hour and again whenever our server restarts, so a restart cannot extend the deadline. Orphaned files — uploads whose analysis never completed — are swept on the same schedule.
The text extracted from a screenshot, and the analysis produced from it, are kept in your account so that your history, memory and pattern features work. If you do not want that text retained, delete the analysis or your account.
| Data | Retention |
|---|---|
| Screenshot images | Deleted within 24 hours, automatically and permanently |
| Analyses, extracted text, milestones, patterns, snapshots, account | Kept until you delete them or delete your account |
| Transaction records (what was bought, when, for how much) | Retained for as long as tax and accounting law requires — generally up to seven years — even after you delete your account. See below. |
You can delete individual milestones in the app at any time.
Open the app and go to Settings → Account → Delete my account. Your account, analyses, extracted message text, milestones, patterns, snapshots, notification token and any screenshot still within its 24-hour window are deleted immediately, and we instruct our subscription processor to delete its record of you at the same time. There is nothing to pay and no reason you need to give.
If you can no longer sign in, email firefly.express.sales@gmail.com from the address your account uses, with the subject line “Delete my Reframe account”, and we will do it for you within 30 days.
Deletion removes your data from the live service straight away. Three things survive it, and we would rather say so plainly than imply an erasure we cannot deliver:
Nothing else is kept. We do not retain a shadow copy, a hashed identifier, or an anonymised “derived” version of your conversations after you delete your account.
Depending on where you live, you may have the right to access the data we hold about you, correct it, delete it, export it, or object to how we use it. Residents of California, the EEA and the UK have these rights by statute; we extend the same handling to everyone. To exercise any of them, email us at the address above. We will not charge you or treat you differently for asking.
Data is encrypted in transit (HTTPS) and at rest by our infrastructure providers. Access to production data is restricted, database-level row security ensures one account cannot read another’s data, and our API is rate-limited against abuse. No system is perfectly secure, but we do not treat that as an excuse: if a breach affects your data, we will notify you promptly.
Reframe is not intended for anyone under 18, and is not directed at children. We do not knowingly collect information from children. If you believe a child has created an account, contact us and we will delete it.
We operate from the United States, and our providers process data in the United States and other countries. If you use Reframe from outside the US, you are sending your information to the US, where data protection law may differ from your own.
If we change this policy materially, we will update the date at the top and notify you in the app before the change takes effect. Continuing to use Reframe after that means you accept the updated policy.
NGN Consulting Corp.
6348 N Milwaukee Ave, Ste 330
Chicago, IL 60646-3728
United States
firefly.express.sales@gmail.com