Privacy Policy
Effective November 15, 2026
1. Personal data we collect
None. You do not create an account, and we never ask for your name, email, phone number, or age. Your entries, moods, activities, photos, and usage log are stored only on your device and are never sent to us.
2. Network use — downloading art packs
When connected to Wi‑Fi, the app downloads art packs (cat animations, letter paper, room and outdoor scenes, and their index) as static files. If you leave “Download on cellular too” on in Settings › Privacy, the app may also download an outdoor-scene pack of 5 MB or less over cellular while it is in the foreground and you open that place. Each request carries nothing but the address of the file — no account, device identifier, diary content, mood, or setting. Files are installed only if their size and SHA‑256 fingerprint match.
As with any internet request, the hosting provider (Cloudflare) may process standard access data such as your IP address for operation and security. We do not use it to identify you.
3. Purchases
Packs are bought through the Apple App Store (or Google Play). Payment details are handled by Apple/Google; we never see them. Purchases are verified on your device through the store. See the Apple Privacy Policy and Google Privacy Policy.
4. Permissions and why
A permission is requested only when you first use the feature that needs it. If you decline, every other feature keeps working.
| Permission | When | Purpose |
|---|---|---|
| Notifications | When you turn on a reminder | Reminders scheduled on your device. They never include diary content |
| Face ID / fingerprint | When you turn on App Lock | Unlocking. The OS handles biometrics; the app only learns success or failure |
| Calendar | When you tap to import events | Reads that day's events on your device to show them. Nothing is stored except lines you choose to attach |
| Send to Calendar | When you tap “Send to Calendar” | Places a title, and only if you choose it, the first diary line in iOS’s add-event screen. It is saved to your device calendar only if you confirm there. Calendars are not encrypted and may sync through your calendar provider, such as iCloud or Google. Your mood is never sent |
| Add photos | When you save a share image | Saves the card you made to your photo library. The app does not read your library |
5. On-device storage and protection
Entry text is encrypted with AES‑256‑GCM in an on-device database; the key is protected by the iOS Keychain (Android Keystore). Dates, moods, and the search index needed for the calendar and search stay on the device. The on-device usage log is kept for up to 90 days and does not contain moods, entry text, activity names, or dates. It is never sent automatically; it leaves only if you first review all of it in Settings › Privacy › “Send usage log yourself” and then choose to send it through the OS share sheet.
The home-screen widget reads one room image prepared on your device and the small amount of metadata needed to choose it. To make that possible, the app and its widget extension from the same developer share App Group storage; this sharing does not send data off your device.
6. Export and deletion
- Export all your entries as Markdown or JSON from Settings at any time — free, with or without a subscription.
- In Settings › Deleted entries, you can restore a deleted entry within 30 days or delete it permanently at once.
- Deleting the app deletes its installed on-device data. We hold no copy and cannot restore it. Export files you made and copies in device or cloud backups follow those services’ own retention practices. Your recovery code is stored nowhere, so please keep it yourself.
7. Sharing with third parties
We do not sell personal data. Processing of the art-hosting access data described in section 2, payments, and a calendar or share destination that you choose yourself follows each service’s own policy. The app does not automatically send personal data to a third party without that choice.
8. Children
The app is not directed at children under 14 (or the applicable age in your region) and collects no age information.
9. Changes
For important changes, we will update this page’s effective date and change history, and also note it in the “What’s New” text of the app update that includes the change. If the app ever needs to send data off your device, we will update this policy before that feature ships.
10. Contact
Change history
- 2026-11-15 — Clarified Send to Calendar, cellular art downloads, usage log, widget sharing, deleted entries, and backups to match the app
- 2026-11-10 — First published