The short version: JournalMind is built on the belief that your journal entries are deeply personal. We collect only what's necessary to run the service, we never sell your data, and your entries are encrypted. Read on for the full details.
1. Introduction
JournalMind ("we," "our," or "us") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the "Service").
Please read this policy carefully. If you disagree with its terms, please discontinue use of our Service. Questions or concerns? Reach us at privacy@journalmind.app.
2. Information We Collect
Information You Provide Directly
- Account information: Name, email address, and password when you register.
- Journal entries: All text, mood tags, and metadata you create within the app.
- Profile information: Optional profile photo and personal preferences.
- Payment information: Billing details processed securely through our payment provider (Stripe). We never store full card numbers.
- Communications: Messages you send to our support team.
Information Collected Automatically
- Usage data: Features used, screens visited, session duration, and interaction patterns.
- Device information: Device type, operating system, app version, and unique device identifiers.
- Log data: IP address, browser type, pages visited, and timestamps (for our website).
- Crash reports: Technical error logs to help us fix bugs and improve stability.
Information We Do Not Collect
- We do not collect location data unless you explicitly grant permission for a feature that requires it.
- We do not access your contacts, photos, or other device data beyond what is needed for features you activate.
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the JournalMind Service
- Power the AI Coach and Insights features — your entries are analyzed to generate personalized reflections and mood summaries
- Send you notifications you've opted into (daily prompts, streak reminders)
- Process payments and manage your subscription
- Respond to your support requests
- Improve and develop new features based on aggregated, anonymized usage patterns
- Detect and prevent fraud, abuse, and security incidents
- Comply with our legal obligations
We do not use your journal entries to train general AI models that serve other users. Your content is processed to power your own personalized experience only.
4. AI Processing of Your Journal Entries
The AI Coach and Insights features analyze your journal entries to generate insights, prompts, and mood summaries. This processing occurs in a secure, isolated environment. Specifically:
- Your entries are processed by our AI systems to generate responses and insights for you only.
- Your entries are never used to train AI models for other users or shared with third parties for AI training purposes.
- AI-generated summaries are stored in your account as part of your journal history and are subject to the same encryption and privacy protections as your entries.
5. Data Security
We take the security of your data seriously and implement industry-standard measures:
- Encryption at rest: All journal entries and personal data are encrypted using AES-256 encryption in our databases.
- Encryption in transit: All data transmitted between your device and our servers uses TLS 1.3.
- Biometric lock: The optional biometric lock in the app is enforced at the device level using your device's secure enclave — we never receive your biometric data.
- Access controls: Employee access to user data is strictly limited, logged, and audited. Support staff can only access account metadata necessary to resolve your issue — not your journal entries.
- Security audits: We conduct periodic third-party security audits of our infrastructure.
No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. If a data breach occurs that affects you, we will notify you as required by applicable law.
6. Sharing Your Information
We do not sell, trade, or rent your personal information to third parties. We may share your information in limited circumstances:
- Service providers: Trusted vendors who help us operate the Service (e.g., cloud hosting, payment processing, customer support software). These partners are contractually bound to protect your data and may only use it to provide services to us.
- Legal requirements: When required by law, court order, or governmental authority.
- Protection of rights: To protect the rights, property, or safety of JournalMind, our users, or the public.
- Business transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred. We will notify you before your information becomes subject to a different privacy policy.
7. Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:
- Journal entries and account data are retained while your account exists.
- When you delete your account, we permanently delete your journal entries and personal data within 30 days, except where retention is required by law.
- Aggregated, anonymized usage data may be retained indefinitely as it cannot be linked back to you.
8. Your Rights and Choices
Depending on your location, you may have the following rights regarding your personal information:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your account and personal data.
- Portability: Export your journal entries in a machine-readable format (available in-app via Settings → Export).
- Opt-out: Unsubscribe from marketing communications at any time via the link in any email or through app settings.
- Restriction: Request that we restrict processing of your data in certain circumstances.
To exercise any of these rights, contact us at privacy@journalmind.app. We will respond within 30 days.
9. Third-Party Services
Our Service integrates with certain third-party services. These services have their own privacy policies:
- Stripe — Payment processing. Stripe Privacy Policy
- Apple / Google — App distribution and in-app purchases processed through App Store and Google Play.
- Analytics provider — Anonymized, aggregated usage analytics to help us improve the app.
We do not include advertising SDKs or sell data to advertisers.
10. Children's Privacy
JournalMind is not intended for children under the age of 13 (or 16 in the European Union). We do not knowingly collect personal information from children under these ages. If you believe we have inadvertently collected such information, please contact us immediately at privacy@journalmind.app and we will delete it promptly.
11. International Data Transfers
JournalMind is based in the United States. If you access our Service from outside the United States, your information may be transferred to and processed in the United States or other countries where our service providers operate. We use standard contractual clauses and other appropriate safeguards to protect your data when it is transferred internationally.
12. California Privacy Rights (CCPA)
California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and disclose, the right to delete personal information, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your CCPA rights, contact us at privacy@journalmind.app.
13. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and/or through a prominent notice in the app before the changes take effect. The "Last updated" date at the top of this page reflects the most recent revision. Your continued use of the Service after the effective date of the updated policy constitutes acceptance of the changes.
14. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: