Privacy Policy
Version 2025-01-01
The plain-language version is on the privacy page, and it is the better description of what we intend. This document is the formal one.
What we collect
- Account data — email address, display name, timezone, locale.
- Content you create — check-ins, entries, messages, goals, debriefs, and voice recordings where you use them.
- Relationship structure — which spaces you belong to, when you joined, and consent records.
- Technical data — hashed IP address, user agent, device labels, session timestamps.
- Product analytics — that an action happened, never its content.
- Plan interest — if you ask to be told when a plan that is not open yet opens, we store your email address and which plan you asked about. Nothing else, and it is not joined to an account. It is used once, to tell you it has opened.
How content is protected
Entries, notes, transcripts and safety excerpts are encrypted at the application layer with per-purpose keys before they reach the database. Access is enforced server-side on every read, not by hiding things in the interface.
Privacy levels
Every record you author carries one of three levels — shared, private, or never shared. The third is additionally excluded from counts, aggregates, exports, notifications and any AI output visible to another member.
Processors
We use third-party processors for AI inference, speech-to-text, email delivery, payments and hosting. They receive only what is necessary, and content sent for AI processing is restricted by the privacy classification of that content. Each one is named individually, with what it receives and whether it is optional, on the subprocessors page.
Your rights
You can export your data, correct or delete individual records, delete your account, and revoke sharing. Deleting your account does not delete another member’s independently authored content.
Retention
Voice recordings are deleted after transcription unless you choose otherwise. Safety excerpts are retained only for cases that reach human review. Audit logs are retained longer than product analytics for security reasons.