Privacy Policy

Account Information: When you create an account, we collect your email address and authentication credentials. We use Supabase Authentication to manage user accounts securely.

Voice Recordings & Microphone Access: The app requires microphone permission to record voice journal entries. Audio recordings are processed for transcription and mood analysis. Audio files are stored securely in encrypted cloud storage (Cloudflare R2) and are only accessible by you through your authenticated account.

Journal Content: Your journal entries, including transcripts, AI-generated summaries, mood/emotion data, sentiment scores, tags, and timestamps are stored in our secure database. This content is private and only accessible by your authenticated account.

Camera & Photos: The app requests camera permission for the photo journal feature, which allows you to photograph handwritten diary pages. The camera is activated only when you explicitly choose to take a photo. Images are processed to extract text via AI and are stored securely. Camera access can be revoked at any time through your device settings.

Mood & Emotion Data: Our AI analyzes your voice tone and words to detect emotions and mood patterns. This includes emotion scores, sentiment analysis, and mood classifications. This data is stored with your journal entries to provide mood tracking and insights.

Device & Technical Information: We collect basic device information including device type, operating system version, timezone, and app version for functionality and debugging purposes.

Usage Data: We may collect information about how you use the app, including feature usage, session duration, and interaction patterns to improve the app experience.

We use your information solely to provide and improve the app's functionality:

• To provide voice-to-text transcription of your journal entries
• To analyze mood and emotions from your voice recordings and text
• To generate AI summaries, tags, and insights about your emotional patterns
• To maintain your journaling streak and provide personalized features
• To authenticate your account and keep your data secure
• To send optional local notifications (journal reminders, streak alerts)
• To create consolidated day journals from your daily entries
• To provide search functionality across your journal entries
• To improve app performance and fix bugs

The app requests the following device permissions:

• Microphone (RECORD_AUDIO): Required for voice journal recordings. Used only when you actively record an entry.
• Camera (CAMERA): Optional, for photographing handwritten diary pages. Used only when you explicitly open the camera.
• Internet (INTERNET): Required for syncing data, AI processing, and authentication.
• Notifications (POST_NOTIFICATIONS): Optional, for journal reminders and streak alerts. Can be disabled in settings.
• Biometric (USE_BIOMETRIC/USE_FINGERPRINT): Optional, for PIN lock and biometric app lock.
• Storage (READ/WRITE_EXTERNAL_STORAGE): For saving and accessing audio recordings.
• Alarm (SCHEDULE_EXACT_ALARM): For scheduling notification reminders.
• Advertising ID (AD_ID): May be used in future for serving advertisements. Currently not actively used.

All permissions are requested at the time of use, not at installation. You can revoke any permission at any time through your device settings.

We take data security seriously and implement industry-standard measures:

• All data is encrypted in transit using TLS/SSL encryption
• Authentication is handled by Supabase with Row Level Security (RLS), ensuring users can only access their own data
• Audio files are stored in Cloudflare R2 with time-limited signed URLs for access
• Database access is protected by authentication tokens and RLS policies
• The app supports PIN lock and biometric authentication for additional on-device privacy
• Passwords and PINs are stored using secure hashing (never in plain text)

While we implement robust security measures, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security but strive to use commercially acceptable means to protect your data.

We use Google Gemini AI to process your voice recordings and generate mood analysis. When you create a journal entry:

• Your audio recording is sent to Google Gemini AI for transcription and emotion analysis
• The AI generates a transcript, mood classification, sentiment score, summary, and tags
• This processing happens on secure servers and the data is not retained by the AI service beyond the processing request

We do not use your personal data to train AI models. The AI processing is used solely to provide you with mood detection, summaries, and journal insights. Your data may be transferred to and processed in countries outside your country of residence where our service providers operate.

We do not sell, trade, rent, or share your personal data with third parties for their marketing purposes.

Your journal entries, recordings, and mood data are strictly private. We only share data with the following service providers who are necessary for app functionality:

• Supabase (supabase.co): Authentication, database hosting, and user management
• Cloudflare R2 (cloudflare.com): Secure audio and image file storage
• Google Gemini AI (google.com): Voice transcription, emotion analysis, and mood detection
• Railway (railway.app): Backend API hosting

These providers process data on our behalf and are contractually obligated to protect your information. We may also disclose your data if required by law, court order, or governmental regulation.

Your data is retained as long as you maintain an active account. You have full control over your data:

• Delete individual entries: Swipe or long-press any journal entry to delete it permanently
• Delete your entire account: Go to Settings > Delete Account to permanently remove all your data including journal entries, recordings, mood data, and personal information
• Request data deletion: Contact us at mubarisfly@gmail.com and we will delete all your data within 30 days

When data is deleted, it is permanently removed from our active systems. Backups may retain deleted data for up to 30 days before being purged.

Regardless of your location, you have the following rights regarding your personal data:

• Right to Access: You can view all your journal data within the app at any time
• Right to Rectification: You can edit your journal entries at any time through the app
• Right to Deletion: You can delete individual entries or your entire account
• Right to Data Portability: You can request a copy of your data by contacting us
• Right to Withdraw Consent: You can revoke permissions and stop using the app at any time
• Right to Object: You can object to certain processing by contacting us
• Right to Restrict Processing: You can request we limit how we use your data

To exercise any of these rights, contact us at mubarisfly@gmail.com. We will respond within 30 days.

With your permission, the app may send local notifications for:

• Journal reminders (customizable time)
• Streak alerts (when your streak is at risk)
• Inactivity reminders (after extended periods without journaling)

All notifications are local (generated on your device, not from our servers). You can disable notifications at any time through your device settings or the app's settings page. We do not send marketing emails or push notifications.

AI Diary is intended for users aged 18 and above. We do not knowingly collect personal data from children under the age of 18 (or the applicable age of consent in your jurisdiction). If you are a parent or guardian and believe your child has provided us with personal data, please contact us at mubarisfly@gmail.com and we will promptly delete the data and associated account.

The app currently does not display advertisements. However, we may introduce advertisements in the future. If ads are implemented:

• We may use the Android Advertising ID for ad personalization
• You can opt out of personalized ads through your device settings (Settings > Google > Ads)
• Ad networks may collect device information for ad serving purposes
• We will update this privacy policy before implementing any advertising features

The mobile app does not use cookies. Our website (landing page) may use essential cookies for basic functionality. We do not use tracking cookies or third-party analytics cookies on our website.

Your data may be transferred to and processed in countries other than your country of residence, including the United States, where our service providers (Supabase, Cloudflare, Google) operate. These transfers are necessary to provide our services. We ensure appropriate safeguards are in place to protect your data in accordance with this privacy policy.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes:

• The “Last updated” date at the top will be revised
• Material changes will be communicated through the app
• Continued use of the app after changes constitutes acceptance of the updated policy

We encourage you to review this policy periodically.

AI Diary provides AI-generated mood analysis and summaries for personal journaling and self-reflection purposes only. This is not a medical device and should not be used as a substitute for professional mental health advice, diagnosis, or treatment. We make no warranties regarding the accuracy of mood detection or emotional analysis. Always seek the advice of a qualified healthcare provider for mental health concerns.

This Privacy Policy shall be governed by and construed in accordance with applicable laws. Any disputes arising from this policy shall be resolved through appropriate legal channels in the jurisdiction where the app operator is located.

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: