World of01What we collect
Account information. Your email address and a password (stored as a secure hash by our authentication provider). If you choose to provide a name, we store it to personalize the App.
Your creative work ("Your Work"). The text, photos, video, voice notes, links, and files you create or attach as part of your daily practice, and the drafts of them. This is the most sensitive data we hold and we treat it accordingly (see Section 3).
Assessment answers and practice data. Your responses to the onboarding assessment and in-app reflections (used to build your creative path and readings), your journeys, runs, day completions, and preferences such as reminder time and reduce-motion.
Purchase information. Subscription status and entitlement (trial, active, lapsed), plan, and transaction identifiers, processed by Apple and our subscription provider (RevenueCat). We never see or store your full payment card details.
Usage and device information. Behavior-level analytics events (for example: onboarding step completed, day finished, share opened), app version, device model, OS version, language, timezone, and crash/diagnostic reports. Analytics events never include the content of Your Work.
We do not collect precise location. We do not access your contacts. Camera, microphone, and photo library are used only when you actively capture or attach something, with iOS permission prompts.
02How we use information
- To provide the Service: authenticate you, build your creative path, deliver daily content, save and sync Your Work across your devices, and restore it if you reinstall or change phones.
- To operate subscriptions, trials, and restore purchases.
- To send the notifications you asked for (for example, a daily reminder at the time you chose). You can turn these off anytime.
- To understand and improve the product through behavior-level analytics, and to diagnose crashes.
- To communicate with you about your account, security, and material changes.
- To comply with law and enforce our Terms.
We do not: sell or rent personal information; use Your Work or your assessment answers for advertising; use Your Work to train AI or machine-learning models; or share Your Work with other users (Journey has no public feed).
03How Your Work is stored and protected
Journey is built local-first: Your Work is saved on your device immediately, then synced to our cloud so it is backed up and available if you change devices. In the cloud, Your Work is stored with our infrastructure provider (Supabase) in access-controlled databases and private storage buckets, protected by row-level security so that it is accessible only to your authenticated account. Data is encrypted in transit (TLS) and encrypted at rest on our provider's infrastructure and on your device by iOS device encryption. Our staff do not browse Your Work; access to production systems is restricted and used only for operating the Service (for example, debugging a fault you report) or as required by law.
No method of storage is 100% secure, and we do not promise absolute security — but protecting Your Work is our highest engineering priority, and we test that one user's work is never accessible to another.
04Service providers (subprocessors)
We share data only with providers who help us run Journey, under agreements limiting their use of it:
- Supabase — authentication, database, and file storage (account data, practice data, Your Work).
- Apple — payment processing and app distribution.
- RevenueCat — subscription management and entitlements (purchase/subscription data).
- Sentry — crash and error reporting (diagnostic data; configured to exclude the content of Your Work).
- Product analytics is first-party: behavior-level events are collected and stored on our own infrastructure (with Supabase, above) — we use no third-party analytics provider.
- Meta Platforms & TikTok — advertising measurement and attribution only, as described in Section 5 below (limited campaign/event data; never Your Work or assessment answers).
We may disclose information if required by law, to protect the rights and safety of users or the public, or as part of a merger, acquisition, or sale of assets (in which case this policy continues to apply to previously collected data and we will notify you of material changes).
05Advertising measurement and attribution
We advertise Journey on platforms such as Meta (Facebook/Instagram) and TikTok. To measure whether those campaigns work, we use Apple's SKAdNetwork — a privacy-preserving system that reports campaign results in aggregate, not tied to you individually — and the platforms' measurement tools, which may receive limited app-event data (for example: app installed, trial started, subscription purchased) together with device-level advertising identifiers only if you grant permission through Apple's App Tracking Transparency prompt, where that applies. What we send for measurement never includes Your Work, your assessment answers, or anything you make in Journey.
Your controls: you can decline or revoke tracking permission anytime in iOS Settings → Privacy & Security → Tracking, and you can turn off analytics and advertising-measurement events entirely in the App under Settings → Privacy & Data ("Product analytics"). Our marketing website uses standard advertising pixels and cookies, governed by the cookie notice on the site.
06Data retention
Your account data and Your Work are retained while your account exists so your archive stays intact — including if your subscription lapses (you keep access to your archive and export). Drafts, sync queues, and diagnostic logs are retained only as long as operationally needed. When you delete your account, Journey removes your account, saved work, and uploaded media from its active systems. Residual database records may remain in encrypted rolling backups for up to 7 days and are removed as those backups expire. Uploaded media is not included in those database backups. We may retain limited records where the law requires it (for example, transaction history).
07Your rights and choices
- Export. You can export Your Work from the App at any time.
- Delete. You can delete individual pieces, proofs, or your entire account from within the App.
- Correct. You can update your account information in the App.
- Notifications can be disabled in the App or iOS Settings; analytics can be limited via iOS settings.
- Depending on where you live (including the EEA/UK under GDPR and California under CCPA/CPRA), you may have legal rights to access, correct, delete, port, or restrict processing of your personal information, and to object to certain processing. We honor these requests for all users where feasible. To exercise any right, use the in-App tools or contact us at the address below. We will not discriminate against you for exercising privacy rights. California residents: we do not "sell" personal information. Sending limited event data to advertising-measurement partners (Section 5) may qualify as "sharing" under the CPRA; you can opt out at any time via Settings → Privacy & Data in the App or the iOS tracking controls, and we honor those choices.
- Legal bases (EEA/UK): we process your data to perform our contract with you (providing the Service), for legitimate interests (improving and securing the Service, behavior-level analytics), with your consent where required (notifications, optional permissions), and to comply with legal obligations.
- International transfers: we are based in the United States and process data there and in our providers' regions, using appropriate safeguards (such as standard contractual clauses) where required.
08Children
Journey is not directed at children under 13, and we do not knowingly collect personal information from children under 13 (or under the applicable age of digital consent where you live). If you believe a child has provided us personal information, contact us and we will delete it.
09Changes to this policy
If we make material changes, we will notify you in the App or by email before they take effect. The "Last updated" date at the top reflects the current version.