Privacy Policy

Last updated: February 25, 2026

Overview

JournAI is operated by Wonderlively ("we", "our", or "us"). This Privacy Policy explains how we collect, use, store, and protect your information when you use the JournAI application ("the App", "the Service").

Information We Collect

• Account Information: Your name and email address, collected during registration or via OAuth providers (Sign in with Apple, Google).
• Journal Content: Messages and conversations you create within the App.
• Personal Context: Optional background information you choose to share to personalize your experience.
• AI Memories: Automatically extracted insights from your sessions to maintain conversation continuity.
• API Keys: Third-party API keys you optionally provide (Anthropic, Google, ElevenLabs, OpenAI) for AI and voice functionality.
• Audio Data: Voice recordings captured temporarily during voice input sessions; these are processed for transcription and not stored permanently.
• Purchase History: Subscription status, transaction identifiers, and billing period information for managing your subscription.

How We Use Your Information

• To provide, maintain, and improve the journaling Service
• To authenticate your identity and secure your account
• To personalize your AI-guided journaling experience
• To send transactional emails (login codes, account notifications)
• To process and manage your subscription

How We Do NOT Use Your Information

• We do not sell your personal data to third parties
• We do not use your journal content for advertising or marketing
• We do not use your data to train AI models
• We do not track you across other apps or websites

Data Security

We take the security of your data seriously:

• Encryption at Rest: All sensitive data (API keys, messages, personal context, AI memories) is encrypted using AES-256-CBC encryption.
• Secure Authentication: We use token-based authentication with industry-standard security practices.
• Transport Security: All data in transit is encrypted via HTTPS/TLS.
• Rate Limiting: API endpoints are protected against abuse.

Third-Party Services

Your data may be processed by the following third-party services when you use corresponding features:

• Anthropic (Claude): For AI-powered conversations. Subject to Anthropic's Privacy Policy.
• Google (Gemini): For AI conversations and voice features. Subject to Google's Privacy Policy.
• OpenAI: For AI conversations. Subject to OpenAI's Privacy Policy.
• ElevenLabs: For text-to-speech. Subject to ElevenLabs' Privacy Policy.
• Stripe: For payment processing (web subscriptions). Subject to Stripe's Privacy Policy. We do not store your credit card information.
• Apple: For in-app purchases and Sign in with Apple. Subject to Apple's Privacy Policy.
• Google Sign-In: For authentication. Subject to Google's Privacy Policy.

We only share information with these services to the extent necessary to provide the functionality you have requested. When you provide your own API keys, your journal content is sent directly to the respective AI provider for processing.

On-Device Processing

Certain features may process data entirely on your device without sending it to our servers or third parties, including Apple Intelligence features (where available) and native text-to-speech. On-device processing is governed by your device manufacturer's privacy policies.

Your Rights

You have the right to:

• Access: View your personal data through the App settings.
• Correction: Update your personal context and preferences at any time.
• Deletion: Delete your account and all associated data from the Settings page. Deletion is permanent and irreversible.
• Data Portability: Export your conversations using the export feature in the App.

Data Retention

Your data is retained for as long as your account is active. When you delete your account, all associated data (conversations, messages, personal context, AI memories, and API keys) is permanently deleted from our systems. We do not retain backups of deleted account data.

Children's Privacy

JournAI is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will promptly delete that information.

International Data

Your data may be processed and stored in the United States. By using the Service, you consent to the transfer of your information to the United States and other jurisdictions where our service providers operate.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the "Last updated" date at the top of this page. Your continued use of the Service after changes constitutes acceptance of the revised policy.

Contact Us

If you have any questions about this Privacy Policy, please contact us at support@journai.ing.