privacy

last updated 25 october 2026

your notes belong to you. signing in keeps personal projects in sync; sharing stays your choice. no ads. usage analytics never include your notes or photos.

on your phone

your projects, notes, photos, goals and preferences are saved on your device. new setup asks you to sign in; you can keep writing offline afterward. your phone’s backups may include this data, depending on your backup settings.

widgets can show your saved projects. reminders are delivered by your phone. on iphone, pinning shows your project title and a preview of your next step or last note. ios may show it on your lock screen and other devices it supports. unpin it in the project menu, and ios removes it within 12 hours; archiving, finishing, deleting or signing out ends it sooner.

sign-in and sync

sign in with google, or apple on ios, to create your account. your provider shares account information such as your email address; apple lets you hide your email. we never receive your password or ask for access to google drive.

personal sync saves your personal projects, notes, goals, photos and backgrounds online so you can open them on your signed-in devices. appearance and reminders stay on each device. private group memberships belong to your account too. on another signed-in device, open settings → private groups to recover shared projects you joined.

signing out pauses sync and hides that account’s shared projects. saved data stays on the device for recovery.

sharing with your group

nothing is shared until you choose to share a project or join one. only people in your private group can join. other group members, including the person who pays, can’t see a project unless they join it.

people in that project can see its title, description, shared goal and background, your display name, and the notes, next steps, photos and progress you share there. your latest checkpoint is included when sharing starts. new checkpoints are then shared automatically while the project stays shared. earlier private checkpoints and your other projects stay private.

you can leave a shared project or group, or the subscriber can remove you from the group. your shared updates and checkpoint photos are removed from its projects. a project owner can stop sharing for everyone, which clears its shared content. if a plan lapses, existing members can still read its history while new updates pause.

when sharing ends for you, your own contributions become a personal project. we keep a private recovery copy of your shared entries and media until your account confirms they were saved. this lets you recover them even after leaving or removal, including on another signed-in device. other people’s entries aren’t copied. if recovery cannot finish, the original data is kept for retry.

photos

we resize photos and remove location and camera details before saving them. photos go online only through personal sync or sharing, and are available only to people with access to that project.

payments

apple or google handles payments. we never see your card details. revenuecat helps us manage subscriptions using purchase information and a random customer id, without your journal or photos.

manage or cancel a subscription in your apple or google account. deleting the app or sync account doesn’t cancel it.

keeping and deleting your data

• export a backup from settings whenever you want. you choose where it goes.
• deleting a synced project removes it from your synced journal. some recovery copies and uploaded images stay with your account until you delete the sync account.
• choose “delete sync account” in settings to remove your sign-in and all personal cloud copies, including recovery copies and images. it also removes your group memberships, shared contributions and private sharing recovery copies. local notes stay on your devices. signing in again starts fresh sync.
• leave or stop sharing to remove your shared entries while keeping your own private recovery copy.
• removing the app alone does not delete online copies, end sharing or cancel a subscription.

limited records remain to prevent old sharing links from being reused. removed information may remain in routine backups until those backups expire.

usage analytics

posthog helps us understand which features work and where people get stuck. we count app opens, onboarding, projects and checkpoints saved, pricing visits and purchase steps. events never include your notes, photos, project names, email address or sharing links. we don’t record your screen or look up your location.

a random id lets us count returning devices or browsers. it isn’t linked to your sign-in account. test purchases are counted separately from paid purchases.

turn this off in the app under settings → about → usage analytics, or use the website control below. turning it off stops future events. deleting a sync account doesn’t delete anonymous analytics already received.

choose whether this browser shares basic website usage analytics. turn on usage analytics

services and this website

we use supabase for sign-in and online storage, revenuecat for subscriptions, posthog for usage analytics, and vercel to run this website and the app service. they process the information needed for those features.

these services receive basic connection information, such as an ip address, when your device contacts them. hosting services may keep connection logs for security and operation. apple or google may also provide crash reports if you’ve allowed that in your device settings.

changes and contact

we update this page and its date when our privacy practices change. questions or help with your data: hey@ryanaque.com.