Privacy, in plain words
Your journalis yours.
Here's what we keep, who can see it, when AI is involved, and how to take everything with you or delete it. No legal maze.
Last updated [DATE]. The full privacy policy [link to formal policy, to confirm] has the formal version.
Six things worth knowing.
If you only read one part of this page, read this one.
-
Encrypted on the way and at rest.
Everything travels over an encrypted connection and is stored encrypted on our servers and in storage.
-
Not end-to-end encrypted.
We chose this so search, sync and AI work on every device. We'd rather tell you plainly.
-
Our team doesn't read your journal.
Staff have no access by default. Rare emergency access is logged and audited.
-
AI is your call.
AI is Premium only. Turn it off in one switch, or leave any journal out of it.
-
No training on your entries.
The companies behind our AI features don't use your entries to train their models.
-
Yours to take, or to delete.
Export everything whenever you like, or delete your account right from the app.
What we keep, and why.
Only what it takes to keep your journal in sync on every device you use.
- Your entries
- The words, photos, video, drawings and files you add, and the journals they live in.
- Your voice recordings
- The audio and its transcript. The first, live transcript is made on your own device.
- Details you choose to add
- Location, weather, steps and State of Mind, only when you turn them on. Health data is never used for ads or shared.
- Your account
- Your email address. You sign in with a one-time code, so there's no password to leak.
- Your subscription
- Whether you have Premium. Payment goes through the App Store, Google Play or Stripe, so we never see your card.
Who can see your journal.
Everyone who ever touches your entries, what they see, and when.
| Who | What they can see | When |
|---|---|---|
| You | Everything in your account: entries, media, recordings and settings. | Always, on any device where you're signed in. |
| People you share a journal with | Entries and comments in that shared journal. Nothing else. | Only for journals you share or join. You can leave at any time. |
| OpenAITranscripts and AI search | Your voice recordings, to make a more accurate transcript. Your entry text, to build your AI search. | Premium only When AI is on. Never for journals you've left out. |
| AnthropicClaude: writing help and reflections | The entries a feature needs: for a title, a summary, a reflection, or an answer to your question. | Premium only When you use an AI feature, or turn on an automatic one. Never for journals you've left out. |
| Our team | Nothing, by default. | Only in a rare emergency, and every access is logged and audited. |
| Hosting, storage and email providers | Your data, stored encrypted. Your email address, to send sign-in codes. | To run the service, under signed data protection agreements. |
On the Free plan, nothing is ever sent to OpenAI or Anthropic.
AI only works when you let it.
AI features are part of Premium. Your entries are sent only when one of them runs, and only to the two companies that power them.
- No training. OpenAI and Anthropic don't train their models on your entries.
- One switch. "Use AI on my entries" turns every AI feature off.
- Leave a journal out. It's never sent to AI or added to AI search.
- On your device first. The live transcript is made on your phone or computer.
- Free means no AI. Free accounts never reach an AI provider.
Take it with you, or delete it all.
Your journal is never locked in. Export whenever you like, in formats other apps can read.
- Export anytime. JSON, Markdown with media, PDF or plain text. One journal, or everything.
- Delete your account in the app. Everything goes from our servers, and backups are cleared within 30 days.
- No password to lose. You sign in with a one-time code sent to your email.
Still wondering?
Straight answers to what people ask most.
Why isn't it end-to-end encrypted?
Search, sync and AI all need our servers to read your entries. Instead, everything is encrypted in transit and at rest, and our team has no access by default.
Can I lock the app with a passcode?
Not yet. For now, your device's own lock keeps the app private.
Where is my data stored?
[Storage region, to confirm]. Wherever it lives, it's encrypted at rest and covered by data protection agreements.
Who do I contact about my data?
Email us at [privacy contact email].