Privacy, in plain language.

What is true today

• Your entries are private by default. There is no public feed, no social layer, and nothing is shared unless you choose to share it.
• The AI features read your entries back to you. Search, summaries, echoes and briefings quote what you wrote. They do not add facts that are not already in your record.
• Your entries are not used to train models.
• No ads. No sale of data. No third-party trackers, in the app or on this website.
• Your originals stay read-only. Editing an entry creates a new record. The original remains, with its timestamps, so the record can always be checked against itself.
• You can export your data and delete your account. Export is fully functional today. If storage ever needs to be reclaimed, we notify you first. We never delete your data without warning.

What is planned, and labelled as planned

• Photo encryption on your device before upload. Designed, not yet built. Until it ships, photos are stored with the same access controls as the rest of your account, not with end-to-end encryption. We do not call this “zero knowledge”, because it is not.
• Bring-your-own storage. Designed, not yet built. The plan is for your record to live in storage you control.

This website

This site sets no cookies and runs no analytics trackers. If that changes, it changes here first, with the same plain labelling.

Two named exceptions, both tied to the beta signup forms and nothing else. The forms load Cloudflare Turnstile, a bot check that runs without cookies, and the address you submit is stored with Buttondown, the service that sends our emails (Buttondown’s privacy policy). Your IP address at the moment you sign up is sent to Buttondown with it, for abuse prevention and as a record of consent. No other third party receives anything from this site.

Questions

Ask anything: [email protected]. Answers come from the person who built it.