Privacy Policy | 90-Second Solutions

Our approach

Your trust matters. We collect only what's essential to deliver your 90‑second resets, lessons, and insights — nothing more. This policy explains exactly what data we collect, how we use it, who we share it with, and how you can access, update, or delete your information at any time.

Data we collect

Account details (name, email address)
Authentication data (hashed passwords, OAuth tokens)
Usage data (lessons completed, resets completed, session timestamps)
Reflection inputs (selected values, journal entries, emotion tags, micro-actions)
Subscription and payment information (managed by Stripe — we store only subscription status and billing dates)
Device information (app version, platform type, timezone)

How we use it

To authenticate you and keep your account secure
To save your progress and personalize your experience
To generate weekly and monthly insights based on your reflections
To process payments and manage your subscription
To send you important updates about your account or service changes
To improve the app based on aggregated, anonymized usage patterns

Third-party services we use

We work with trusted third-party providers to deliver core features. Each provider is contractually required to protect your data with the same or greater level of security as we do:

Stripe — Payment processing and subscription management. Stripe is PCI-DSS Level 1 certified and does not share your payment information with us. We only receive subscription status and billing dates.
RevenueCat — In-app purchase management for mobile subscriptions. RevenueCat processes purchase receipts and subscription status but does not collect personally identifiable information beyond what's required for purchase validation.
Sentry — Error monitoring and crash reporting. Sentry collects anonymized error logs and device metadata to help us fix bugs. No personal reflection data or journal entries are sent to Sentry.
ElevenLabs — Voice synthesis for guided resets. We send only the script text to generate audio. No user data, reflection content, or personal information is shared with ElevenLabs.
Google Mobile Ads (AdMob) — Ad serving in the free tier of our mobile app. Ads are contextual and age-appropriate. We do not use sensitive health data, reflection content, or emotion tags for ad targeting. You can opt out of personalized ads in your device settings (iOS: Settings → Privacy → Advertising; Android: Settings → Google → Ads).

Voice guidance & data transmission

How voice guidance works

When you use a voice-guided reset, the text script for that session is sent from your device to our backend server, and then transmitted to ElevenLabs — a third-party voice generation service — to produce the audio you hear.

What is transmitted: Only the pre-written script text for the guided session. No personal information (name, email, journal entries, or reflection data) is ever included in these requests.

Why we do this: Real-time audio generation is required to deliver the voice guidance feature. The text is processed by ElevenLabs solely to convert it to speech. ElevenLabs does not retain this content for advertising or profiling purposes.

Retention: ElevenLabs processes the text in real time and does not store the generated audio on its servers beyond the immediate request. See the ElevenLabs Privacy Policy for full details.

Apple refund requests & consumption data

When you submit a refund request to Apple for an in-app purchase, Apple may request consumption data from us to assist in their decision. This data may include:

Whether your account has accessed premium content
How many resets or lessons you have completed
Your subscription status at the time of the refund request

Your consent: By using the app and making an in-app purchase, you consent to us sharing this limited consumption data with Apple solely for the purpose of evaluating refund requests. We never share personal content (journal entries, values, or reflection text) with Apple for this purpose.

Third-party services

We use trusted third-party services to deliver certain features. These services may collect and process data as described in their own privacy policies:

ElevenLabs (Voice Generation)

When you use voice-guided resets, we send text prompts to ElevenLabs to generate audio guidance. No personal information is included in these requests.

ElevenLabs Privacy Policy →

Stripe (Payment Processing)

All payment and subscription data is processed securely by Stripe. We never store your full credit card information on our servers.

Stripe Privacy Policy →

RevenueCat (Mobile Subscription Management)

Our mobile app uses RevenueCat to manage in-app purchases and subscriptions on iOS. RevenueCat may collect your Apple ID purchase history, subscription status, device identifiers (such as IDFA/IDFV), and app usage data to validate and track entitlements. This data is used solely to determine your subscription status and is never used for advertising. We store only whether your subscription is active — we do not store payment card information.

Data collected by RevenueCat: App user ID, purchase receipts, subscription status, device type, app version, and country. RevenueCat does not collect health data, location, or contacts.

Retention & deletion: You may request deletion of your RevenueCat data by deleting your account (see above), or by contacting us at our contact page.

RevenueCat Privacy Policy →

Local Storage (Mobile App)

The mobile app uses local device storage to remember your preferences (e.g., whether you've seen the welcome screen). This data never leaves your device.

Your rights and choices

Access: View all your data anytime in your profile and insights pages.
Update: Update your name and preferences in your profile settings.
Export: Premium members can export their reflection history. Contact support for data export requests.
Delete: Delete your account at any time from your profile page. This permanently removes all your data, reflections, and cancels any active subscriptions. See below for details.
Opt-out: Opt out of non-essential communications by contacting support.

Account Deletion

You have the right to delete your account and all associated data at any time. To delete your account, go to your Profile page and select "Delete my account." This action is permanent and cannot be undone.

What gets deleted: All your reflections, custom values, journal entries, emotion tags, usage history, subscription data, and account credentials. If you have an active subscription, it will be cancelled immediately with no refund for the current billing period.

Security

We use industry-standard security practices to protect your data, including encrypted connections (HTTPS), secure authentication, and reputable cloud infrastructure. Passwords are hashed using industry-standard algorithms (Argon2). While no system is perfect, we continuously review and improve our security measures.

Data retention and deletion

How long we keep your data

Active accounts: We retain your account data, reflections, and usage history for as long as your account is active.
Inactive accounts: If you haven't logged in for 24 months, we may send a reminder email. If there's no response within 90 days, we may delete your account and associated data.
Deleted accounts: When you delete your account, all personal data (reflections, journal entries, custom values, usage history) is permanently deleted within 30 days. Anonymized aggregated data (e.g., "X users completed a reset this week") may be retained for analytics.
Payment records: Stripe retains transaction records for tax and legal compliance (typically 7 years). We only store subscription status and billing dates.

How to delete your account and data

You have full control over your data. You can delete your account at any time:

In the app: Go to Settings → Account → Delete Account. This will permanently delete your account and all associated data within 30 days.
By email: Contact us at privacy@90-secondreset.com with the subject line "Account Deletion Request" and we'll process it within 7 business days.

What gets deleted: Your account, email, name, all reflections, journal entries, custom values, emotion tags, micro-actions, usage history, and subscription status.

What remains: Anonymized aggregated analytics (no personally identifiable information). Stripe retains payment transaction records for legal compliance.

Children's privacy

90-Second Solutions is designed for adults and is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

If you are a parent or guardian and believe your child has created an account or provided us with personal information, please contact us immediately at privacy@90-secondreset.com. We will delete the account and all associated data within 48 hours.

Our app is rated 12+ on the App Store and Google Play due to the mature themes of emotional regulation and self-reflection. We recommend parental guidance for users under 18.

Advertising practices

The free tier of our mobile app displays advertisements served by Google Mobile Ads (AdMob). Here's how we handle ads responsibly:

Age-appropriate content: All ads are filtered to be appropriate for our 12+ age rating. We do not allow ads for alcohol, gambling, adult content, or other sensitive categories.
No sensitive data targeting: We do not share your reflection content, journal entries, emotion tags, selected values, or any health-related data with ad networks. Ads are contextual (based on app category) or use Google's standard interest-based advertising (which you can control in your device settings).
Clear ad identification: All ads are clearly labeled as advertisements and include a visible close/skip button where applicable.
Opt-out options: You can limit ad personalization in your device settings:
- iOS: Settings → Privacy & Security → Apple Advertising → Turn off "Personalized Ads"
- Android: Settings → Google → Ads → Opt out of Ads Personalization
Ad-free option: Premium subscribers do not see any advertisements.

For more information about how Google handles ad data, see Google's Advertising Policies.

Changes to this policy

We may update this privacy policy from time to time. We will notify you of significant changes by email or through the app. The "Last updated" date at the top of this page shows when the policy was last revised.

Contact us

Questions about privacy, data ethics, or how to exercise your rights? Reach us anytime atour contact page.

Privacy & Data Ethics