Last updated: October 8, 2026
Surfacing collects no data. There is no analytics, no telemetry, no crash reporting, and no usage tracking of any kind. The app contains no third-party SDKs that capture or transmit information.
All entries, settings, and logs are stored exclusively on your device in a local SQLite database encrypted with AES-256 via SQLCipher. Nothing is transmitted to any server. Surfacing has no backend and works fully offline. Its only network request asks the App Store or Google Play whether an update exists, and it sends none of your data.
When you choose to export, a self-contained HTML file is generated on your device. The file is encrypted with AES-256 using a one-time password generated locally on your device. The file is only shared when you explicitly tap "Send Report." No export occurs automatically.
Your data is protected by a device key stored in the iOS Keychain or Android Keystore, accessible only when the device is unlocked. Biometric or device-PIN authentication is required before any export. All exported files are AES-256 encrypted.
Because there is no cloud backup, losing or resetting your device will permanently delete your data. Store exports somewhere safe and never together with the decryption password.
Surfacing does not require an account, email address, name, or any personally identifying information.
Surfacing is a personal tracking tool. It does not replace clinical care, diagnosis, or treatment. Share exports with your provider to support - not substitute - professional sessions.
Surfacing also offers a separate, optional MCP server that AI assistants (such as Claude or ChatGPT) can connect to for the Surfacing feelings list and body map. This section covers only that server. The app itself is unchanged: it still sends nothing anywhere.
What it receives. When your AI assistant uses a tool, the server receives the tool name and its input, such as a search word ("heavy") or a category name ("Sadness"). It never receives your Surfacing entries, and it has no connection to the app or your device.
What it stores. Nothing. The server has no database or storage of any kind, and request logging is turned off. Each request is answered from a built-in word list and then forgotten. There is no account, no tracking, and no profile.
Third parties. The server runs on Cloudflare, which processes each request to deliver it and may keep standard network data (such as IP addresses) under Cloudflare's privacy policy. Surfacing does not sell or share any data. Your conversation itself is held by your AI provider under that provider's own policy, not by Surfacing.
Retention. Surfacing retains nothing from the server, so there is nothing to delete or request.
Not therapy or crisis support. The server provides words, not advice or diagnosis. If you are in crisis, in the US call or text 988; elsewhere, contact local emergency services.
Questions about this policy can be emailed to service@surfacingapp.com, sent through the Contact Us form inside the app, or submitted via the contact section on surfacingapp.com.