Your thinking is not the product.
Decision Replay does not sell your decision records. The current coaching analysis runs locally in your browser, and email delivery is not currently connected.
Scope and who to contact
This Privacy Notice explains how the Australian operator of Decision Replay (“we”, “us” or “our”) handles personal information when you use the Service.
Privacy enquiries can be sent to decisionreplaysupport@gmail.com.
What we collect
Depending on how you use the Service, we may collect:
- Account information — a verified email address and Firebase user identifier supplied by Google Firebase Authentication;
- Decision records — titles, context, choices, predictions, confidence, categories and review dates;
- Pulse records — short status updates and optional notes you save between capture and review;
- Review records — actual outcomes, scores and lessons you choose to save;
- Preferences — reminder settings, timezone and onboarding state;
- Feedback — messages you send through the feedback form; and
- Technical information — limited security, diagnostic and request information generated when the Service is accessed.
We collect most information directly from you when you create an account, sign in with Google or email, create a decision, save a pulse, review an outcome, change a preference, or submit feedback.
How we use information
We use personal information to:
- provide your private, account-linked workspace;
- save, retrieve, review, export and delete your records;
- operate requested reminders if email is connected in the future;
- respond to feedback and support requests;
- protect the Service, prevent misuse and diagnose faults; and
- comply with legal obligations.
We do not use your decision text for targeted advertising, and we do not sell it to data brokers.
How the Decision Coach works
At the effective date, the Decision Coach uses fixed, rule-based analysis in your browser. Your decision text is not sent to an external artificial intelligence provider for this feature.
A future AI feature would require updated product disclosures and this Privacy Notice before decision content is processed that way.
Storage, retention and security
The server verifies a signed Firebase identity token before each private request and separates decision records using the account's immutable Firebase user identifier. We use reasonable technical and organisational safeguards designed to protect information from unauthorised access, loss, misuse or alteration.
No online service can promise absolute security. Keep your sign-in method secure and avoid entering information that is not needed for your learning record.
To reduce automated abuse, the Service keeps short-lived request counters under an opaque one-way hash derived from the authenticated user identifier and action type. These counters do not contain decision text.
We retain information while your account is active or as needed to provide the Service, resolve disputes, maintain security and meet legal obligations. Deletion requests remove account-linked Service records from the active database, although short-lived backups or records required by law may remain for a limited period.
Your choices and controls
You can:
- view and edit active decision records;
- export your decision library, including pulse summaries, as a CSV file;
- turn optional reminders and digests off;
- sign out or reset an email/password sign-in;
- request access to or correction of personal information we hold; and
- permanently delete account-linked decisions, pulse history, reviews, preferences, delivery history and submitted feedback through the Service.
The Service also uses local browser storage to remember onboarding, your workspace name and your visual theme on that device. You can clear those values using your browser controls.
Questions, access requests and complaints
Contact decisionreplaysupport@gmail.com if you want to access or correct personal information, ask a privacy question, or make a complaint. Please include enough detail for us to understand the issue. We will acknowledge and investigate a complaint within a reasonable period.
If the Australian Privacy Act applies and you are not satisfied with our response, you may be able to complain to the Office of the Australian Information Commissioner.
Changes to this notice
We may update this Notice as the Service or applicable law changes. The effective date at the top shows when it was last updated. We will take reasonable steps to notify active users before a material change takes effect.
The Terms of Use contain the other conditions that apply to the Service.