Privacy Policy

By default, stories, photos, and writing settings stay only on your device. Journal text is never included in analytics events.

Sync is off by default. If you turn it on, stories are encrypted on your device with a recovery key only you hold, then uploaded as ciphertext. We cannot read your moments, photos, or recovery key — and we cannot reset a lost key. Sign-in identifies which encrypted vault is yours; it does not give us access to plaintext.

Signing in (Apple, Google, or email) is optional and exists only to manage your subscription and identity. Your sign-in is handled by Supabase; we store your email address and a user ID — never your journal entries.

Purchases are processed by the App Store, Google Play, or RevenueCat Web Billing. We receive subscription status only — never full payment card details.

We use Google Analytics 4 on the marketing site and web app to understand traffic and product usage (page views, button clicks, sign-in, checkout started/completed). Events never include journal text, photos, or email addresses. IP anonymization is enabled. You can block analytics with a browser extension or OS-level tracking controls.

On iOS and Android, daily reminders are scheduled entirely on your device. On the web app, if you enable push reminders, your browser's push subscription, reminder time, and time zone are stored so the reminder can be delivered — no journal content included.

Your phone's own backup (iCloud Backup or Android Auto Backup) may carry the app's data to your next device under your Apple/Google account. We have no access to it.

Delete individual stories in the app anytime, or delete your account from your Profile. Removing the app deletes everything permanently — there is no server copy to erase.

Questions? Email onestorymoment@920four.com.