What happens to your words

A numeric account, personal data

We do not ask for your name, email address or phone number to sign in. A secret 20-digit code gives you access to your space; it is different from the numeric identifier linking entries to your account.

This does not make your journal anonymous. Activities, mood, energy, state of mind and notes say something about you. Names, places or other identifying details you write also become part of your entries. You decide how much to share.

Where entries are stored

Your journal, personal activities and preferences are stored in the service and linked to your account. This is not a journal kept only on your phone. A connection is needed to load and save entries; offline synchronization is not yet available.

Your device keeps the access code in secure storage. Some preferences, including language and local reminders, stay on the device; activity preferences are synchronized with your account.

Who can view the journal

You can sign in with your code on another device. Authorized administrators can view users and journals in the service’s management console. We therefore do not describe the journal as readable exclusively by you.

The project does not sell journal content or use ads, advertising trackers or commercial profiling. Our ethical manifesto explains these commitments.

What is sent to AI services

The data used depends on the feature.

• Essential rereadings: the server prepares counts, original notes and a curated question without AI models or sending the period’s data to OpenAI.
• With AI rereadings: activities, mood, energy, state of mind and notes from the period are sent to OpenAI. We do not send your account identifier. Your notes may still contain identifying details.
• Activity suggestions: the service may use Typesafe AI to select available ideas, considering period counts, a recent check-in, declared activities and preferences and, when available, aggregate historical observations. It does not send free-form notes, your access code, account identifier or the full journal.
• Check-in responses: Typesafe AI may select a curated text using mood, energy, state of mind, date, check-in phase and language. Free-form notes and journal history are not sent for this selection.

The mode in Settings → Rereadings applies only to rereadings and does not change the separate preference for monk suggestions. Switching to Essential or Off does not withdraw AI requests already sent or change saved history. Compare rereading modes.

Take a copy with you

In Settings → Your data → Export my data, save a JSON file in a location you choose. Export is available for Standard and Plus and includes confirmed entries, personal activities, preferences and data used for suggestions, together with this device’s reminders.

It does not include your access code or unsaved drafts. The file contains your personal notes: choose where to keep it and whom to share it with. Exported copies are not removed if you later delete your account.

Delete your account

Request deletion from the same screen. After you confirm and the service accepts the request, access is blocked and app data is removed. Identity deletion continues automatically if the identity service is unavailable. The old code cannot reopen your journal.

A minimal technical reference remains for 30 days after identity deletion to prevent access from being restored. Service backups follow an administrator-managed retention and removal process; deleting an account does not make every backup copy disappear at the same instant.

AI requests already sent follow the respective provider’s terms and cannot be withdrawn by the app. Export your entries before confirming deletion if you want to keep them.

Keep your access code safe

Keep a copy somewhere safe. If you still have access to the app, display the code in settings. Your code is not included in the JSON export: keep what you need to sign in separately. Without the code or a device you can retrieve it from, email recovery is not available.