Skip to main content

Privacy Policy

Last updated: September 25, 2026

The Core Promise

Your journal is encrypted and private.

Your entries are encrypted. We don’t sell data.

How does encryption work?

All journal entries are encrypted using AES-256, the same standard used by banks and governments. How your encryption key is managed depends on how you signed up:

  • Email/password users: Your encryption key is derived from your password. We never see your password, so we cannot decrypt your entries. This is zero-knowledge encryption.
  • Apple/Google sign-in users: Your entries are encrypted at rest with AES-256-GCM, using a key our service derives from your account. Biometric unlock (Face ID, Touch ID or fingerprint) adds a lock on your device; it does not change how your entries are encrypted on our servers.

Because Calmplot provides AI insights, your journal text, voice recordings or transcriptions, and any images you choose to attach may be securely processed by Calmplot’s third-party AI providers, currently including OpenAI, during use of AI features. We request zero retention from those providers.

At Calmplot, privacy isn’t a feature — it’s the foundation. We believe your thoughts belong to you alone.

We make money from subscriptions, not by selling your data. We prioritize edge encryption and zero-retention AI processing. We don’t sell your personal information.

1. How we protect your data

  • Encryption Model: Your entries are encrypted using AES-256-GCM. Email/password users have zero-knowledge encryption by default. Apple and Google sign-in users are encrypted at rest, using a key our service derives from their account.
  • Secure Transmission: All data is transmitted over secure SSL/TLS connections.
  • AI processing: When AI features are used, your text is temporarily decrypted in memory and sent to our AI providers for processing. Calmplot keeps the results in your journal, such as reflections and the people and themes they mention, along with numeric search representations (embeddings) of your entries that do not contain your text. We request zero retention from our AI partners, currently including OpenAI, so they do not store your data or use it for training.

2. Data Collection & AI Processing

We only collect the data necessary to provide the Calmplot service to you:

  • What data we collect & how: We collect journal text, voice recordings, voice transcriptions, optional images you attach to entries, and related media metadata when you directly write, speak, or upload content in the app. We also collect your email address and account credentials during signup, subscription and billing status via our payment provider, basic functional metadata (entry dates, timezones, and device IDs) automatically to power syncing, reliability, and usage limits, and anonymous usage analytics (feature usage, screen views, and app performance metrics).
  • How we use your data: To store and sync your journal entries across your devices, generate personalized reflections and insights, transcribe voice notes, process subscription payments, and improve app reliability. We also use anonymous analytics to understand feature usage and fix bugs. We do not use your personal data for advertising.
  • Third-Party AI Services: When you consent and use AI features, your journal text, voice recordings or transcriptions, and optional attached images are securely sent to Calmplot’s third-party AI providers, currently including OpenAI, to provide reflections, voice transcription, title generation, insight summaries, and related AI features. We require the same or equal protection for your personal data as stated in this privacy policy. Specifically, we request zero-retention API processing, and your personal data is not used to train public models. No personal data is sent to any AI provider without your explicit consent.

We never sell your data to advertisers or third parties.

3. Your rights & consent

  • Access: You can view all your data at any time.
  • Export: You can download all your entries in standard formats (JSON/Markdown).
  • Deletion: You can permanently delete your account and all associated data. Deleted entries are moved to Trash and automatically purged after 30 days, or you can empty Trash immediately.
  • Revoke AI consent: You can disable AI features at any time in Settings > Privacy & Trust. When disabled, no journal data is sent to Calmplot’s third-party AI providers.
  • Data retention: Your account data is retained while your account is active. If you delete your account, all data is permanently removed. We request zero-retention API processing from our third-party AI providers, currently including OpenAI, so journal content is not retained or used for public model training.

4. Children’s privacy

Calmplot is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13.

  • If we discover we have collected data from a child under 13, we will delete it immediately.
  • If you believe a child under 13 has provided us with personal information, please contact us at privacy@calmplot.com.

5. Third-party services

We use trusted providers to keep Calmplot running. Each provider receives only the minimum data required for its function and provides the same or equal protection for your personal data:

  • Supabase: Secure database hosting, authentication, and server functions. Receives account data, encrypted journal entries, and functional metadata.
  • AI providers (currently OpenAI): Generate reflections, transcribe voice notes, generate titles, and analyze optional attached images — only when you consent and use AI features. We request zero-retention processing and do not allow journal content to be used for training.
  • RevenueCat: Manages subscription billing and purchase validation. Receives your anonymous user ID and subscription status. Does not receive journal content.
  • PostHog: Anonymous product analytics (feature usage, screen views, app performance). Does not receive journal content or personal identifiers.
  • Sentry: Error and crash monitoring to fix bugs. May receive device metadata and stack traces. Does not receive journal content.

Contact Us

If you have questions about your privacy, please email us at privacy@calmplot.com