• Account: a username and a PIN (stored only as a one-way hash), or, for facilities, a business email and password (also hashed) plus the business details you enter (name, EIN, address, contact). • Circle content you create: budgets, calendar events, gratitude notes, and messages. • Your private Today's Circle tracker, if you choose to use it: a chapter start date, daily response, hand-drawn mark, optional reflection, and reminder preference. • Resource questions you ask the AI guide, so we can answer them. • An Expo device token and short-lived delivery ticket when you enable notifications. • A mobile number and the time you opted in if you enable SMS reach-out backup. We verify the number before enabling it. • Privacy-minimized diagnostics: an error class, call-site label, one-way fingerprint, platform, and app version. We do not send raw error text, stack traces, URLs, account ids, or your circle content. • Basic technical data (IP address, device/browser) used to keep the service secure and rate-limited.

We don’t ask for your legal name, we don’t track you across other apps or the web, and we don’t run advertising. Notifications are written to reveal nothing about what this app is for.

Sharing is opt-in, one category and one person at a time. By default your entries are private to you. The circle owner grants access; nothing you mark private is shown to anyone else, not even the owner. These rules are enforced on our servers, not just in the app.

Today's Circle is available only to the circle owner. Its chapter dates, daily answers, drawings, and reflections are stored separately from shared circle content and cannot be granted to a member through circle permissions. If you tap “I need to talk,” only the message “Need to talk.” is sent to your circle; the tracker entry is not shared. The tracker is optional and is not medical monitoring or treatment.

To run the service you asked for: sync your circle, answer resource questions, process your private tracker and reminders, send opted-in reach-out texts, handle facility billing, and protect against abuse. We use trusted processors (our database host, our hosting and notification providers, our AI and search providers, and, for paid plans, Stripe) only to deliver these features, under agreements that limit them to that purpose.

SMS backup is optional and off by default. You must verify your own number and explicitly opt in before we send it a reach-out text. Messages are transactional, frequency varies, and carrier rates may apply. Reply STOP to opt out; you can also turn it off in Settings. Twilio processes these messages for us. We never include a private message, tracker entry, or clinical wording in the text.

When you ask the AI guide a question, your question is sent to a trusted third-party AI provider (Anthropic) to generate an answer, along with excerpts from our vetted resource library. It is used only to answer you, never to advertise to you or to train the provider’s models. Answers are informational only and are not medical advice, so please share no more than you need to, and always confirm details with the provider.

You can delete your account from Settings at any time. If you own a circle, deleting your account erases the entire circle and everything in it for every member. Deletion is immediate in the live service and permanent. Infrastructure backups expire under our providers' retention schedules. If you can't sign in, email help@ensoapp.help and we'll process your deletion request.

ensō is not an emergency service and does not provide medical or legal advice. If someone is in danger, call or text 988, or call 911.

Questions or requests about your data: help@ensoapp.help.