Privacy

Policy version: 4 October 2026

What is stored

As a guest, your profile and explicitly saved reflections stay in this browser. They are not automatically added to an account. You can choose to import them after sign-in. Account profiles, saved guidance, optional context, outcomes and body observations are stored on Disha’s server.

Processing is not the same as keeping a draft

To answer what you write, Disha sends it to its server and self-hosted language model. No paid external AI provider is required for this path. If Keep original is unchecked, saved Pause cards omit your original draft and extracted facts; they can still retain a summary, suggestions and your chosen action. Do not include names, account numbers or information you do not want processed.

Email sign-in

One-time sign-in codes are sent through Gmail SMTP. Google processes email delivery. Your reflections are not included in sign-in emails. Codes expire and are not passwords.

Your controls and deletion

Use Your Disha to export account data, edit or remove remembered context, remove optional body records and delete your account. Saved reflections can be deleted individually; retained original drafts can be removed separately. Clearing this browser does not delete account records. Removing active records does not immediately erase recovery backups. Backups are retained for operational recovery and are not a personalization source; no instant backup-erasure promise is made.

Disha does not sell reflections or use them for advertising. For privacy requests, contact the project owner through your pilot invitation.