Privacy Policy

Your journal entries, moods, tags, voice notes and attachments are end-to-end encrypted on your device before they leave it. Only you hold the keys. We cannot read your entries, and neither can anyone else — including our staff, our hosting providers, or anyone who gains access to our servers.

All data in transit is protected with TLS, and all data we store is encrypted at rest.

• Waitlist: your email address and the date you joined.
• Account: your email address and the minimum needed to sign you in and sync your encrypted data.
• Encrypted content: stored only in encrypted form we cannot decrypt.
• Basic technical data: limited logs (such as IP address) used only for security, abuse prevention and keeping the service running, kept for a short period.

• We never sell, rent or trade your personal data.
• We never show ads or use advertising trackers.
• We never use your journal content to train AI models.
• We never read your entries — we technically can't.

Reflections are off by default. If you turn them on, the relevant content is processed privately to generate your reflection, is not stored by any third party, and is never used for training. You can turn them off at any time.

We use your email only to send your invite, important account and security notices, and occasional product updates. Every non-essential email has a one-click unsubscribe.

We use a small number of trusted providers (for example, hosting and email delivery) strictly to operate Journol. They only receive what they need, are bound by confidentiality and data-protection obligations, and never receive your journal in readable form.

We keep data only as long as needed to provide the service. You can export your journal at any time and delete your account whenever you like; deletion permanently removes your data from our systems within 30 days, except where the law requires us to keep limited records. To leave the waitlist, email hello@journol.life.

Depending on where you live (for example under GDPR, UK GDPR, CCPA or India's DPDP Act), you may have the right to access, correct, export, delete or restrict the use of your personal data, and to object to processing. Email hello@journol.life and we will respond within 30 days. You may also complain to your local data-protection authority.

Journol is not intended for children under 13 (or the minimum age required in your country), and we do not knowingly collect their data.

If we make meaningful changes to this policy, we will update the date above and, where appropriate, notify you by email. Questions? Write to hello@journol.life.