Your data, your rules
How we protect what you say.
Plain-English explainer
Journaling only works if you can be honest. Honesty only works if you trust where your words go. So here is the whole picture — no legal language, just the truth about what happens to what you say.
Four promises
- Encrypted in transit and at rest. Transcribed on your device via WhisperKit. Sent over HTTPS. Stored encrypted with row-level security, so no other account can read your entries.
- Never used to train AI models. Anthropic (reflections) and OpenAI (audio) process your entries under API terms that prohibit training on your data. We don't train on it either.
- Export or delete anytime. Download your full archive as PDF or text, or delete everything with one tap. No ghost copies.
- Apple or Google sign-in only. No passwords stored. Authentication handled by providers you already trust.
Questions people ask
Is this end-to-end encrypted?
No, and we think it's important to say that plainly. Your entries are encrypted at rest and in transit, but our servers can access them to generate your reflections. True end-to-end encryption would mean we can't read anything you write — which would also mean the AI can't. We chose useful AI over marketing-friendly encryption. Anthropic and OpenAI both process your entries under API terms that prohibit training on your data.
Who can see my journal entries?
You. And the services required to deliver the app — Supabase (storage), Anthropic (reflections), OpenAI (audio generation). All bound by contracts prohibiting data retention or training. Every service is named in the privacy policy.
Can I correct or delete what the AI remembers?
Yes. Memory editing is a first-class feature. Review, correct, or forget anything the AI has stored about you.
Will my journal content train AI models?
Never. Your entries are processed for your reflections only — they never enter our training, Anthropic's, or OpenAI's training datasets.
The short version
Your voice is transcribed on your device — never in the cloud. Your text is stored encrypted and only you (through your signed-in account) can read it. The AI services that generate your reflections do not train on your data. You can export everything, or delete everything, any time. That is the whole contract.
If you want the full legal document, read the Privacy Policy. Questions about any of this are welcome at matthewericesposito@gmail.com.