Privacy Policy

• Account information — your name, email address, and profile photo when you sign up.
• Journal entries — the text, images, mood, and dates you write in the app.
• Usage data — basic analytics like which screens you visit, used only to improve the product.
• Device token — a push notification token if you enable reminders (optional).

We use your data only to provide the Dear Diary service to you. Specifically:

• To display your journal entries to you.
• To run the AI pipeline that turns your draft into a polished entry (processed transiently — not stored by the AI provider beyond the request).
• To generate your “Story So Far” summary and mood insights.
• To send you daily reminders if you opt in.

Every journal entry you write is encrypted before it is saved to our database. We use AES-256-GCM — the same standard used by banks and governments — so that even if our database were ever accessed without authorisation, your entries would be unreadable without the encryption key.

• Your entry text is encrypted on our servers the moment you save, and decrypted only when you read it back.
• The encryption key is stored separately from the database, in Google Cloud Secret Manager, and is never written to disk alongside your content.
• Images are stored in Google Cloud Storage with server-side encryption enabled by default.
• All data in transit is protected by TLS (HTTPS).

We do not sell, rent, trade, or share your personal data or journal content with any third party for commercial purposes. Your diary is yours. We will never use your entries to train AI models, build advertising profiles, or provide data to data brokers.

We use a small set of trusted third-party services to operate the app:

• Google Cloud — database hosting and image storage.
• Google Gemini — AI processing of your draft to generate polished entries. Requests are not used to train Google's models under our API agreement.
• Expo / EAS — mobile app delivery and push notifications.
• Resend — transactional email (OTP codes, password resets).

Each of these providers is contractually bound to handle data securely and not use it for their own purposes.

• Access — you can view all your journal entries and profile data in the app at any time.
• Delete — you can delete any individual entry from within the app. To delete your entire account and all associated data, email us.
• Export — if you'd like a copy of all your data, contact us and we'll prepare an export.
• Opt out — you can turn off push notification reminders at any time in the app settings.

Questions or requests about your data? Email us at hello@deardiary.world. We aim to respond within 48 hours.