Your data, your rules
How we protect what you say.
Plain-English explainer
Journaling only works if you can be honest. Honesty only works if you trust where your words go. So here is the whole picture, no legal language, the plain truth about what happens to what you say.
Four promises
- Encrypted in transit and at rest. Transcribed on your device by default via WhisperKit. Sent over HTTPS. Stored encrypted with row-level security, so no other account can read your entries.
- Never used to train AI models. Anthropic (reflections) and OpenAI (audio) process your entries under API terms that prohibit training on your data. We don't train on it either.
- Export or delete anytime. Download your full archive as PDF or text, or delete everything with one tap. No ghost copies.
- Apple or Google sign-in only. No passwords stored. Authentication handled by providers you already trust.
Questions people ask
Is this end-to-end encrypted?
No, and we think it's important to say that plainly. Your entries are encrypted at rest and in transit, but our servers can access them to generate your reflections. True end-to-end encryption would mean we can't read anything you write — which would also mean the AI can't. We chose useful AI over marketing-friendly encryption. The AI providers we use — Anthropic, Google, and OpenAI — all operate under API terms that prohibit training on your data.
Who can see my journal entries?
You. And the services required to deliver the app — Supabase (storage), Anthropic (reflections), OpenAI (audio generation). All bound by contracts prohibiting data retention or training. Every service is named in the privacy policy.
Can I correct or delete what the AI remembers?
Yes. Memory editing is a first-class feature. Review, correct, or forget anything the AI has stored about you.
Will my journal content train AI models?
Never. Your entries are processed for your reflections only — they never enter our training, Anthropic's, or OpenAI's training datasets.
The short version
Your voice is transcribed on your device by default; longer recordings may use secure server transcription. Your text is stored encrypted, and only you, through your signed-in account, can read it. The AI services that generate your reflections never train on your data. Export everything or delete everything, any time. That’s the whole contract.
If you want the full legal document, read the Privacy Policy. Questions about any of this are welcome at matthewericesposito@gmail.com.