Privacy policy · effective July 13, 2026

Private does not mean mysterious.

Plain language first. No buried privacy promise.

What we collect

Your account identifier, encrypted journal entries, AI-generated quality scores and abstract vectors, profile information you choose to share, subscription status, encrypted messages, safety reports, and device push tokens.

How the journal works

Your sentence is encrypted on your device before storage. The plaintext travels over TLS to the analysis service for one request and is not logged or retained by our backend. We store ciphertext and an abstract mathematical vector used for matching.

Device-bound key

Your journal key stays in secure storage on this device. A new or restored phone cannot decrypt old cloud ciphertext, so use the in-app export before changing devices if you want a readable copy.

Matching

Matching is off by default and cannot begin until you complete 21 ritual days with 20 sentences each. Internal compatibility scores and reasons are never shown to either person. You can withdraw consent at any time.

AI processors

We use OpenAI to assess feasibility and produce abstract semantic vectors, and an image processor only when you request a transformed portrait. The app never blocks you from keeping a sentence because AI refuses or fails.

Other processors

Supabase provides authentication, database, storage, and realtime infrastructure. RevenueCat processes subscription status. Apple, Google, Expo, APNs, and FCM may process purchases or notifications when those features are used.

Your choices

You can export your data, delete your account in the app, withdraw matching consent, remove entries, block another person, or submit a safety report. If you explicitly report a chat message, only that selected decrypted message is shared with the safety team; the rest of the room stays encrypted. Account deletion removes app data subject to fraud-prevention and legal retention duties.

What we do not do

We do not sell personal data, run behavioral advertising, or track you across other companies’ apps and websites.