Backsie Backsie ← Back to home

Privacy Policy

Effective and last updated: July 30, 2026

Backsie Inc.

Registered office in the State of Delaware

1811 Silverside Road, Wilmington, DE 19810

County of New Castle

1. Scope and who we are

Backsie Inc. ("Backsie," "we," "us," or "our") provides the Backsie mobile and web applications, websites, community features, communications, and related services (collectively, the "Service"). This Privacy Policy explains what information we collect, why we use it, when we disclose it, how long we keep it, and the choices available to you.

This policy applies to people who use the Service, create an account, join an early-access list, contact support, receive permitted communications, or visit our websites. It does not apply to third-party products governed by their own privacy notices.

Important: Backsie is a self-reflection and clarity tool, not therapy, medical care, diagnosis, treatment, or an emergency service. Backsie is not a health-care provider or a service covered by HIPAA. Please do not use Backsie as a substitute for professional care.

Because users may discuss wellbeing, emotions, sleep, relationships, or health, please also read our Consumer Health Data Privacy Policy.

2. Information we collect

2.1 Account and identity information

  • Name, email address, account identifier, verification status, and authentication provider.
  • Phone number when you choose to provide it for SMS, support, or early-access communications.
  • Information received from Sign in with Apple or Google, such as provider subject identifiers, name, email address, and verification status, according to your provider settings.
  • Authentication and account-control records needed to sign you in, secure your account, link identities, or process account deletion. Passwords are managed through Amazon Cognito; Backsie does not store plaintext passwords in its application database.

2.2 Profile information

Profile information may include your display name, date of birth, gender, age range, relationship status, profile photo, school, community, and community type. Some fields are required during onboarding and others are optional or may not be available in every version of the Service.

2.3 Conversations and generated reflection content

  • Your chat messages and conversation history.
  • Mental Checkpoints, Insight Cards, patterns, summaries, suggested next steps, conversation-memory summaries, and other content generated from your conversations.
  • Conversation status, safety classifications, and technical state used to continue or recover a conversation.
  • Feedback you provide about generated content, including "Helpful," "I relate," reports, saves, and optional written feedback.

Your private conversations and generated reflection content are private by default. They are not posted to the community unless you take an explicit sharing action.

2.4 Screenshots, images, speech, and audio

  • Text screenshots: When you attach a screenshot or text image, the image is transmitted to Backsie and an AI service to extract visible text. Backsie returns the extracted text for you to review and confirm. The submitted image is processed for that request; the extracted text may become part of your conversation if you send it.
  • Profile photos: A profile photo you choose is compressed on your device and stored with your profile.
  • Speech to text: Microphone audio is handled by the speech-recognition technology provided by your device or browser. Backsie receives the resulting transcript. Backsie's application servers do not store the raw microphone recording used for speech-to-text, but Apple, Google, your browser provider, or operating-system provider may process it under their own terms.
  • Read aloud: When you request neural read-aloud, the selected text is sent to Backsie and OpenAI to create audio. Backsie may cache the generated audio, a short text preview, a text hash, model and voice settings, and usage totals so playback is faster and quotas can be enforced.

2.5 Community and sharing information

If you choose to publish or share an Insight Card, we collect the card content and category, posting and moderation status, public-share link, saves, reactions, reports, opens, views, and share events. "Anonymous" means your identity is not displayed to other users; while your account is active, Backsie still maintains an internal account association for ownership, safety, moderation, and deletion.

Public share links can be opened by anyone who receives the link. Information copied or reshared outside Backsie may remain outside our control even after you remove it from the Service.

2.6 Support, feedback, early access, and SMS

  • Support subject, message, email address, optional phone number, status, and internal support notes.
  • Feedback, bug reports, feature requests, and related session or card references.
  • Early-access name, email, optional phone number, SMS consent records, campaign/referral information, and conversion status.
  • Inbound and outbound SMS/MMS content, delivery status, carrier identifiers, opt-in/opt-out history, and media metadata when you communicate with us by text.

2.7 Usage, device, network, and attribution information

We collect product and operational events such as account and onboarding completion, session and message activity, feature use, Insight Card and community interactions, notification scheduling and opens, notification-to-chat conversion, response performance, failures, and token or quota usage. Depending on the event, records may include:

  • User, session, card, lead, anonymous, and device identifiers.
  • IP address, user agent, browser, device type, operating system, platform, app version, locale, and time zone.
  • Referrer, source, referral code, campaign, partner, creator, campus, landing-page variant, and UTM parameters.
  • Event time and limited event metadata, such as message length or reminder-copy variant. Product analytics are designed not to include full private chat text unless the event or feature itself requires that content.

2.8 Information stored on your device

Backsie stores information locally for authentication, preferences, offline recovery, pending-message retry, cached conversations, notification inbox state, reminder schedules, anonymous analytics identifiers, and feature continuity. Operating-system controls determine access to notifications, microphone, photos, and local storage.

3. How we collect information

We collect information directly from you; automatically from your browser, device, and interactions; from Apple, Google, and Amazon Cognito when you authenticate; from people who view or interact with shared cards; and from service providers that help deliver, secure, measure, or support the Service.

4. How we use information

  • Provide conversations, reflection features, memory continuity, Mental Checkpoints, Insight Cards, patterns, read-aloud, screenshot text extraction, PDF export, community, and sharing.
  • Personalize responses and retrieve relevant prior context when needed.
  • Classify safety-related language and provide safety questions or resources. This processing is automated and is not a guarantee that Backsie will identify every risk.
  • Create and operate accounts, authenticate users, synchronize devices, recover interrupted messages, and process account deletion.
  • Schedule local reminders, maintain the notification inbox, and measure whether reminders are useful.
  • Moderate community content, investigate reports, prevent abuse, and enforce our Terms.
  • Respond to support, feedback, SMS, and early-access requests.
  • Measure performance, reliability, engagement, retention, and feature quality; debug errors; prevent fraud; and protect the Service.
  • Comply with law, respond to valid legal process, and establish or defend legal claims.

We do not use solely automated processing to make decisions that produce legal or similarly significant effects about you.

5. AI processing

Backsie uses automated systems to generate responses, detect possible safety concerns, organize conversation memory, extract text from screenshots, create Mental Checkpoints and Insight Cards, and produce read-aloud audio. Depending on the feature, relevant content and context may be processed by Anthropic, OpenAI, and LangChain's LangGraph/LangSmith services.

Backsie submits content through business/API services and authorizes providers to process it only to deliver and secure the contracted service, subject to our agreements and configured account settings. AI output can be incomplete, inaccurate, or inappropriate. Safety checks and generated content do not replace professional judgment or human care.

6. When we disclose information

We do not sell personal information or consumer health data. We do not share personal information for cross-context behavioral advertising, and we do not run third-party advertising in the Service.

We may disclose information in the following circumstances:

  • At your direction: when you publish a card, create or use a public share link, use your device's share sheet, or otherwise ask us to disclose content.
  • Service providers: Amazon Web Services (hosting, storage, databases, authentication, and email); LangChain/LangGraph/LangSmith (AI orchestration, thread state, and tracing); Anthropic and OpenAI (AI inference, image-text extraction, and/or audio generation); Twilio (SMS/MMS); and Apple, Google, browser, and operating-system providers for authentication, speech recognition, distribution, and device services.
  • Authorized personnel: staff and contractors with a need to support users, operate the Service, review reports, administer security, or analyze product performance, subject to access controls and confidentiality obligations.
  • Legal and safety reasons: when reasonably necessary to comply with law or valid legal process, protect rights or security, investigate fraud or abuse, or address a credible threat.
  • Business transactions: in connection with financing, due diligence, merger, acquisition, reorganization, bankruptcy, or sale of assets, subject to appropriate safeguards.

Our processors are required to handle information consistently with their agreements with us and applicable law. Their independent services remain subject to their own terms and privacy notices.

7. Legal bases for processing

Where applicable law requires a legal basis, we process information as necessary to provide the Service you request and perform our contract with you; with your consent for optional features or communications; for legitimate interests such as security, moderation, support, analytics, and improvement that are not overridden by your rights; and to comply with legal obligations. You may withdraw consent at any time, but withdrawal does not affect prior lawful processing.

8. Retention and deletion

We keep information only as long as reasonably necessary for the purposes described above, including these general periods and criteria:

  • Account, profile, conversations, checkpoints, cards, and cached read-aloud audio: generally while your account is active, unless you delete content or your account.
  • LangGraph thread copies: configured to expire after up to approximately 60 days for normal continuity. Account deletion also requests deletion of account-linked threads and LangSmith traces.
  • Support, feedback, SMS, and early-access records: for as long as needed to respond, maintain consent or suppression records, resolve disputes, prevent abuse, and meet legal obligations.
  • Analytics and operational logs: for the period needed to operate, secure, and improve the Service. Account-linked analytics are included in the application-data deletion flow; aggregated or de-identified statistics that no longer identify you may remain.
  • Deletion receipts: a minimal one-way account-reference hash and workflow status may remain to complete, prove, and recover the deletion process. It does not contain your conversation, email, provider token, or plaintext account identifier.
  • Backups: deleted information may remain temporarily in protected backups until those backups rotate, unless longer retention is required by law.

When you delete your account, you may choose whether already-published community Insight Cards are deleted or retained. If you choose retention, Backsie removes their account and private-source associations and keeps the published card and working public link without your account identity. Content copied by others outside Backsie cannot necessarily be recalled.

9. Security

We use administrative, technical, and organizational safeguards designed to protect information, including encryption in transit, encryption at rest where supported, access controls, authentication, environment separation, logging controls, and deletion workflows. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

10. Your choices and privacy rights

Depending on where you live, you may have rights to know or access information, correct it, obtain a portable copy, delete it, restrict or object to processing, withdraw consent, appeal a denied request, and opt out of certain disclosures. Backsie does not sell personal information or use it for targeted advertising.

  • Update supported profile information in the app.
  • Initiate account deletion in the app's settings. The flow verifies your identity and lets you choose what happens to published Insight Cards.
  • Disable notifications or microphone/photo permissions in your device settings. Core chat remains available when optional permissions are declined.
  • Reply STOP to opt out of SMS and HELP for assistance. Use the unsubscribe option in marketing email where provided.
  • Email hello@backsie.co for access, correction, deletion, portability, consent withdrawal, or an appeal.

We may need to verify your identity before fulfilling a request. Authorized agents may submit requests where permitted by law, subject to verification of their authority. We will not discriminate against you for exercising a privacy right.

11. Cookies and similar technologies

Our websites and web-based app may use cookies, local storage, session storage, and similar technologies for sign-in, security, preferences, attribution, anonymous identifiers, and analytics. We do not use these technologies for third-party behavioral advertising. You can control browser storage through your browser settings, though some features may stop working.

12. Local notifications and communications

Current re-engagement reminders are local notifications scheduled on your device after you grant permission. Notification copy, scheduling state, inbox state, and open attribution may be stored locally, and privacy-safe open/conversion events are sent to Backsie analytics. You can disable notifications in device settings.

If you opt in to SMS, message frequency varies and message/data rates may apply. We use your number and consent records for Backsie communications such as early-access instructions, product updates, support, feedback, and related follow-up. Reply STOP to unsubscribe or HELP for help. We do not provide phone numbers or SMS consent to third parties or affiliates for their own marketing.

13. Adults only

Backsie is intended only for adults aged 18 and older, and people under 18 are not permitted to create or use an account. If we learn that an account belongs to someone under 18, we will investigate and delete the account and associated information as appropriate. If you believe a minor has provided information, contact hello@backsie.co.

14. International transfers

Backsie is based in the United States. Information may be processed in the United States and other countries where our providers operate. Those countries may have different data-protection laws. Where required, we use recognized transfer mechanisms and contractual protections.

15. Changes to this policy

We may update this policy as the Service or law changes. We will post the updated policy, change the effective date, and provide additional notice or request consent when required. Material changes apply prospectively unless law permits otherwise.

16. Contact us

For privacy questions, requests, or complaints, contact:

Backsie Inc.
hello@backsie.co
1811 Silverside Road
Wilmington, DE 19810
County of New Castle, United States