Privacy Policy

1. Introduction

Journolog ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Journolog mobile application.

2. Information We Collect

• Account: Your email address, provided by Google when you sign in. We never see or store a password — sign-in is through Google only.
• Travel Data: Trip records, diary entries, tickets, expenses, and reminders you create inside the app. We receive these only if you subscribe; otherwise they stay on your device and we never see them.
• Crash Reports: Anonymous diagnostic data collected via Sentry to improve app stability. No personally identifiable information is included.
• Device Info: Limited device identifiers used solely for crash reporting.

3. How We Use Your Information

• To provide, operate, and maintain the app and its features.
• To back up and sync your trips and diary entries across your devices — only if you subscribe. Without a subscription, nothing you write in the app is sent to us.
• To process and manage your subscription payments.
• To identify your account across your devices.
• To diagnose crashes and improve performance.

4. Third-Party Services

• Supabase — Authentication for everyone, and encrypted storage of trips and diary entries for subscribers only, on servers located in India.
• Cloudflare — Holds the secret that locks your encryption key, kept deliberately apart from the database so that neither can be used without the other.
• RevenueCat — Subscription and in-app purchase management.
• Sentry — Crash reporting and performance monitoring.

Each third-party service has its own privacy policy governing how it handles your data. We are not responsible for their practices.

5. Data Security

If you do not have a subscription, your trips and diary entries never leave your device. There is no cloud copy to protect.

If you subscribe, sensitive fields are encrypted on your device with AES-256-GCM before they are sent anywhere, and stay encrypted on our servers. The key is generated by the app, never by you, so there is nothing to remember and nothing to lose. A copy is stored so your journal follows you to a new phone — but that copy is itself locked, using a secret held on separate infrastructure (Cloudflare) from the database that holds your entries. Neither one opens anything without the other.

This is not end-to-end encryption, and we will not call it that. Because we hold both halves, we could in principle read your entries. We do not, and nothing in the app does — but you should be told that rather than reassured.

Photos and voice notes are never uploaded at all. They stay on your device whether you subscribe or not.

All communication uses TLS. No method of transmission over the internet is 100% secure.

6. Data Retention

We retain your personal data for as long as your account remains active. You may permanently delete your account and all associated data at any time from Settings → Account → Delete Account. Deletion is irreversible and takes effect immediately.

7. Your Rights

• Access: View all your data through the app at any time.
• Deletion: Permanently delete your account and all data via Settings → Account → Delete Account.
• Correction: Update your account information within the app.
• Contact: Reach us with any privacy request at husain.slatewala@gmail.com.

s Privacy",

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through an in-app notification or a notice within the app. Continued use of the app after changes become effective constitutes your acceptance of the updated policy. The effective date at the top of this page reflects the date of the latest revision.

10. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us at:

Email: husain.slatewala@gmail.com