Privacy
Your journal and saved conversations are stored on your device. We don't keep a cloud database of your private life.
On your device
- Journal entries
- Saved conversations
- Saved decisions
- Your settings and name
- Encryption keys
Everything is encrypted with AES-256-GCM using a key protected on this device. If you enable a passcode, it also protects that key. The key is never uploaded.
Sent for AI processing
The AI runs in the cloud, so Talk and Decide messages do leave your device. Only what the current request needs is sent: your new message plus a short window of recent messages from Talk, or the decision you just described in Decide.
It goes through our server to Google Gemini to generate a reply. Our server doesn't store or log the content. Google processes it under its API terms.
Your journal is never sent to the AI. There's no hidden AI memory between sessions.
What we don't do
- No advertising, ever
- No selling personal data
- No personalized ads
- No social feed
- No cloud journal database
- No streaks or guilt notifications
The trade-off
Because your data lives only here, losing this device means it can't be recovered without a backup. If you enable a passcode, forgetting it also locks you out. Export an encrypted backup from Profile to keep a copy.
AI limitations
The companion is an AI, not a person, therapist, or doctor. It can be wrong. It can't diagnose. If you're in danger, contact local emergency services or someone you trust nearby.