Privacy Policy
Ex:mens of relations
This policy explains how this application handles information and how to contact us about privacy.
Information we process
The app stores your optional local name, journey start date and chosen emoji, journal entries with dates, emotions, themes and bookmarks, mood ratings and comments, ritual answers and progress, personal and saved affirmations, and dates of completed release rituals on your iPhone. Release-ritual names and final messages exist only on that screen and are cleared when released or when the screen is left; they are not saved or backed up. Reminder preferences stay on the device. A random installation identifier, secret and encryption key are stored in this device’s Keychain. Automatic backup is enabled initially and can be disabled in Settings. Backup sends the installation identifier, an authentication secret over HTTPS, and an AES-GCM encrypted snapshot of the saved journal data. The server stores the identifier, a bcrypt hash of the secret, encrypted snapshot and timestamps, not the encryption key. Hosting receives network metadata such as IP addresses and request times when the app or privacy website is used.
How we use information
Local data supports writing, searching, reflection practices, mood charts, factual progress and daily affirmations. On-device mood reflections compare your own check-ins; no external analytics or automated clinical assessment is used. Encrypted server storage supports backup and restoration on the same device when the original Keychain keys remain available. Network and limited server operational logs support service operation, security, rate limiting and diagnosis. The service does not provide accounts, advertising or email delivery.
Service providers and sharing
The backend and PostgreSQL database are hosted on Railway, which processes encrypted backup data and infrastructure request information to provide hosting. Cloudflare terminates public HTTPS and proxies requests to the Railway origin over HTTPS. Cloudflare therefore processes connection metadata such as IP addresses, request times and headers, including installation authorization headers, and the encrypted backup request content as needed to deliver and protect the service. The device-held encryption key is not sent to either provider. Application operational logs contain request identifiers, route names, methods and response status codes; the app server does not intentionally log journal text, secrets, encrypted payloads or installation identifiers. Railway and Cloudflare infrastructure may process additional connection metadata under their applicable hosting and network practices. There are no advertising, analytics, social login or messaging SDKs. Data is not sold. Disclosure may occur when required by applicable law.
Data retention
Local journal data remains until you delete records, clear device data in Settings, or remove app storage. The server keeps the most recent encrypted snapshot per installation until it is replaced or deleted. The installation authorization record remains while backup is in use. Rate-limit counters are temporary in-memory data with one-minute windows. Operational, Railway hosting and Cloudflare network logs follow the relevant provider’s applicable retention; this app does not promise a fixed deletion period for infrastructure logs. We have not configured scheduled database backups or a separate archival service. Any infrastructure snapshots or backups retained by the host may persist under the host’s retention and are not immediately erased by an application deletion request.
Deleting your information
You can delete journal pages and clear all local journal data in Settings. Clearing local data disables automatic backup and does not itself remove a server copy. Delete server backup in Settings removes the encrypted snapshot and installation authorization record from the live database, disables automatic backup, and replaces the device’s backup credentials before backup can be used again. Local journal data remains unless you also clear it. Previously retained infrastructure logs or host backups may persist under host retention. The public contact for privacy and deletion questions is val.sotheran@icloud.com; do not send sensitive journal content. Without the device’s installation secret we cannot identify or authorize access to a particular anonymous installation.
Permissions and your choices
Notifications are optional and requested only when you enable a daily reminder. Notification scheduling and generic reminder text are local; your journal text is never placed in a reminder. You can turn reminders off in the app or withdraw notification permission in iPhone Settings. The app does not request location, contacts, microphone, camera or photo-library access. Core journaling works without internet; backup requires a connection.
Your privacy rights
Depending on your location, you may have rights to access, correct, delete, restrict or object to processing and to complain to your local data protection authority. You can view and edit your records in the app and delete local and server copies using Settings. Contact val.sotheran@icloud.com for privacy questions or rights requests. Requests may require appropriate verification without requiring an account. Because backup content is encrypted with a device-held key, we cannot read it or restore it without that key. Recovery is not promised if the installation secret or encryption key is lost; Keychain survival after reinstallation is not guaranteed.
Security
The app uses iOS file protection for its saved journal and Keychain device-only access for installation credentials and encryption keys. Snapshots are encrypted on the device with AES-GCM before transmission over HTTPS. Public HTTPS terminates at Cloudflare, which forwards requests over HTTPS to the pinned Railway service origin; neither provider receives the snapshot encryption key. The backend verifies an installation-specific secret against its bcrypt hash and restricts backup access to that installation. Request sizes, database connections and request rates are bounded. No system is completely secure, and anyone able to unlock and use your device may be able to view the journal; the app does not add a separate passcode lock.
Children’s privacy
This reflection journal is intended for adults aged 18 and over and is not directed to children. It is a personal wellbeing tool, not diagnosis, treatment or emergency support. If you believe a child has provided data, contact val.sotheran@icloud.com without including sensitive journal details.
Changes to this policy
This policy may change when the app’s processing or hosting changes. The updated policy and effective date will be published at this address and linked from Settings. Review it when considering whether to use backup or after an app update.