Privacy policy

Who we are

Diary is made by Ideon Labs, the data controller for the purposes of the GDPR. Contact us at support@ideonlabs.org.

What we hold

Your account. Your email address and an account identifier, handled by our authentication provider, Clerk. We use these to sign you in and to link your devices.

Your encrypted entries. Entry text, titles, tags, journal names, moods and photos are encrypted on your device with XChaCha20-Poly1305 before they leave it. We hold the ciphertext. We do not hold your passphrase, and we do not hold any key derived from it.

What we can see, even though we cannot read your entries

Because we store and sync your encrypted entries, our servers can observe:

• How many entries you have, and when each was created or last changed
• A rounded size band for each entry, not its exact length
• How many devices you sync with, and when they last connected
• Your account identifier

We cannot see what any entry says, what it is called, which journal it is in, what mood you recorded, or what is in your photos.

What we never collect

• Your location. The app requests no location permission, and location data is stripped from photos on your device before they are stored.
• Your advertising ID. The app does not request it.
• Analytics, behavioural or usage data. There is no analytics SDK in the app.
• Your search terms. Search runs entirely on your device and is never transmitted.
• Your contacts, calendar, call logs or messages.

Your passphrase

Your encryption passphrase is not your account password, and it never reaches us in any form. It is used on your device to derive a key, and that key never leaves it.

This has a consequence we state plainly: if you lose both your passphrase and your recovery code, nobody can recover your entries, including us. There is no reset, no support override and no back door.

Who we share with

We do not sell your data, share it for advertising, or use it to train any machine learning model. We use these processors, and only for the purpose stated:

• Clerk: authentication. Can read your email address and account identifier.
• Convex: encrypted storage and sync. Can read the encrypted bytes and the metadata listed above.
• Google Play: distribution of the app, under Google's own policy.

We will disclose data if legally compelled. For your entries, that means handing over ciphertext we cannot decrypt, because we do not have the key.

How long we keep it

Entries stay until you delete them. Deleted entries sit in Trash for 30 days, then are permanently removed. If you delete your account, your data is removed from your device immediately and from our servers within 30 days.

A record that you asked for deletion is kept for 12 months, so we can show the request was honoured.

Where your data is processed

Clerk and Convex are based in the United States, so your account data is processed there. For users in the EEA and UK we rely on the European Commission's Standard Contractual Clauses with each processor. Your entries are encrypted before they leave your device, so what crosses a border is ciphertext.

Your rights

You can, at any time and without contacting us:

• Export everything as JSON, Markdown or PDF, free. The JSON is documented and opens without this app.
• Delete any entry, or all of them.
• Delete your cloud copy while keeping everything on your device and continuing to write.
• Delete your account and all data, from Settings → Account in the app, or from our account deletion page without installing the app.

If you are in the EEA or UK, you have rights of access, rectification, erasure, restriction, portability and objection under the GDPR. Export and deletion are built into the app so you do not have to ask us. For anything else, email support@ideonlabs.org; we respond within 30 days. Our lawful basis for processing account data is performance of our contract with you.

If you are in California, you have rights under the CCPA/CPRA. We do not sell or share personal information as those terms are defined.

Children

Diary is rated for users aged 18 and over. It is not directed at children, and we do not knowingly collect data from anyone under 13.

Changes

If we change this policy in a way that affects what we can see or who we share with, we will tell you in the app before it takes effect, not by quietly updating this page. If paid features are added, this policy will be updated first.

Contact and complaints

Email support@ideonlabs.org. If you are in the EEA or UK and are not satisfied with our answer, you may complain to your local data protection authority.