Privacy Policy
Last updated: July 25, 2026
MindJournal ("we", "our", or "the app") is a private journaling and self-reflection app. Protecting your personal data is our highest priority. This policy explains what data we collect, how we use it, and your rights.
1. Data Stored on Your Device and Optional iCloud Sync
By default, MindJournal stores journal data only on your device. If you turn on iCloud Sync, Apple synchronizes the app's data through your private iCloud database so it can appear on your other Apple devices signed in to the same iCloud account.
Journal text, AI reflections, and weekly summaries are encrypted on-device using AES-GCM before storage or synchronization. The encryption key is stored in the iOS Keychain and, when iCloud Sync is enabled, synchronized through iCloud Keychain. We cannot access, read, or recover your encrypted journal content or encryption key.
Operational metadata—including entry dates, update dates, word counts, moods, mood intensity, tags, deletion status, and settings—may be synchronized through your private iCloud database. Search index words are not synchronized as plain text; the app stores keyed cryptographic digests instead. This iCloud data is processed by Apple under your iCloud account, not stored on MindJournal-operated servers.
2. Data Transmitted to Our Servers
We transmit data only when you explicitly request an AI reflection. In that case:
- The plain text of the selected journal entry is sent over an encrypted (TLS) connection to our relay server
- The relay server forwards it to an AI provider to generate reflective questions
- The content is not stored, logged, or used for training on our servers
- Only the generated questions are returned to your device and re-encrypted before storage
3. Data We Do Not Collect
- We do not collect your name, email address, or any personally identifiable information
- We do not use analytics SDKs or third-party tracking
- We do not sell or share your data with advertisers
- We do not store your journal content on MindJournal-operated servers
4. iCloud Data Controls
iCloud Sync is optional and can be turned off in MindJournal settings. Turning it off stops future synchronization after the app restarts, but does not automatically delete data already stored in iCloud. Deleting an entry permanently while sync is enabled removes that record through the normal iCloud synchronization process. Deleting the app from one device does not by itself delete an existing iCloud copy.
5. Subscription
Subscription purchases are handled entirely by Apple through the App Store. We do not receive or store your payment information.
6. Crash Reports
If you have opted in to share crash data with developers via Apple's privacy settings, anonymized crash reports may be shared with us through Apple's standard crash reporting system. These reports do not contain journal content.
7. Face ID / Touch ID
Biometric authentication is handled entirely by iOS. MindJournal never accesses or stores biometric data.
8. Children's Privacy
MindJournal is not directed at children under the age of 13. We do not knowingly collect information from children.
9. Wellness and Safety Notice
MindJournal is for journaling and self-reflection only. It does not provide medical advice, diagnosis, therapy, crisis counseling, or emergency services. If you may be in immediate danger, contact local emergency services or a qualified professional.
10. Changes to This Policy
We may update this policy from time to time. Continued use of the app after changes constitutes acceptance of the updated policy.
11. Contact
If you have any questions about this privacy policy, please contact us at vshia98@163.com.