Reality Record

Privacy policy

Plain English. Last updated 2026.

What we store

When you use Reality Record we store: your email address; whatever you type into the incident log, contacts directory, and tag list; any files you upload as evidence; and basic subscription status so we know whether your account is on the free or paid plan. We do not store payment card details ourselves — that's handled entirely by Stripe.

Who can see it

No one but you. Your account can only ever see your own entries, contacts, and files — never anyone else's. Uploaded evidence is stored privately and is never published at a public web address; it's only ever accessed through a private link generated for you specifically.

Our own staff do not routinely look at your entries. We may need to access account-level data (like your email or subscription status) to provide support if you ask us to, or if legally required to.

No tracking inside the app

Pages that can contain your incident content carry no analytics, advertising, or tracking scripts of any kind. We don't sell or share your data with third parties for marketing.

How to export or delete your data

You can export a PDF summary of your logged entries at any time from the Export page (paid plan). You can permanently delete every entry, contact, tag, and file — and your account itself — from the Account page, with no need to contact us first. This cannot be undone.

Your rights (UK GDPR)

As a UK-based service, we process personal data under the UK GDPR. You have the right to access, correct, export, or delete your personal data, and to withdraw consent at any time. The in-app export and delete tools cover most of this directly; for anything else, contact us at privacy@gaslighting.co.uk. Third Option Group Ltd is the data controller for information processed through Reality Record.

Where data is processed

Application data is hosted with Supabase and Vercel, and payments are processed by Stripe. Both are contracted as data processors acting on our instructions and are not permitted to use your data for their own purposes.

This is not legal, medical, therapeutic, or crisis advice. If documenting creates risk, prioritise safety. If someone monitors your devices or accounts, store information carefully. In immediate danger, contact local emergency services or relevant support organisations.