Your data, plainly.

What Pivot stores

• An anonymous session cookie, so Pivot can recognize your browser without an account. It lasts up to a year.
• The pivots you create, their actions, and the tags you add.
• Each moment you check in: the pivot, the action you chose, the tag and intensity you picked, the suggestion shown, and how it went.
• If you connect GitHub, your GitHub username, account ID, and avatar link, so your data can follow you to another device.
• If you turn on check-in reminders, how often you want them, your timezone, and the push address your browser gives Pivot to deliver them.

What Pivot does not store

The optional note you type during an urge is never saved by Pivot. It is not in History, not in your data export, and not in our database.

Where your note goes

AI suggestions use Google's Gemini API on its free tier. When you ask for a suggestion, your note, the tag you picked, and your list of actions are sent to Gemini to choose one. Under the free tier's Gemini API terms, Google may use submitted text to improve its products, which can include review by people. Please leave names and other identifying details out of your note. If Gemini is off or unavailable, Pivot picks a suggestion on its own and nothing is sent.

Before anything is sent, Pivot checks the note on your device for crisis language. If it finds any, it shows crisis resources instead and does not send the note.

Who else handles data

No ads, no tracking or analytics scripts, and no selling or sharing your data. Pivot runs on Cloudflare Workers and stores data in a Turso database, and both process it only to run the app. Like most websites, Cloudflare keeps short-lived request logs (such as IP address, browser, and the page requested) for security and debugging. If you connect GitHub, GitHub handles that sign-in. If you turn on check-in reminders, they are delivered through your browser's push service (such as Google for Chrome or Mozilla for Firefox), which carries the reminder encrypted and cannot read it.

How long data is kept

• Your pivots, actions, tags, and History stay until you delete them in Settings. Deletion is immediate and complete.
• The anonymous session cookie expires after a year.
• If you clear your cookies without deleting first, Pivot can no longer connect that data to you, and it stays stored until it is removed. Pivot does not yet delete inactive data automatically.

Your control

In Settings you can download all of your data as JSON or delete it, along with your session or connected account.

Who Pivot is for

Pivot is meant for adults 18 and over. It is not designed for children and does not knowingly collect data from them.

Health and safety

Pivot is not medical or mental-health treatment, therapy, or an emergency service, and it is not crisis care. If you are in crisis in the US, call or text 988. If you are in immediate danger, call your local emergency number. Elsewhere, see findahelpline.com.

Questions

Open an issue on GitHub, and please do not include personal details there. Security problems can be reported privately through GitHub security advisories. If this policy changes, the date above will change too.