Privacy Policy

Last updated: May 2026

The English legal text below is the authoritative version.

Plain summary

MyJournalPal is a personal journaling app powered by AI. We store your journal entries securely in our database so you can come back to them. To generate AI responses and insights, we send your conversation text to third-party AI providers (Anthropic and/or OpenAI). We never sell your data and we never use it to train any models.

What we collect

• Account info: email and password hash (handled by Supabase Auth).
• Profile: display name, occupation, communication style, and what you tell Pal during onboarding.
• Journal content: the messages you send during journaling sessions, AI replies, summaries, tasks, habits, goals, and review reports.
• Uploaded images: stored in a private Supabase storage bucket. Access is restricted to your account via signed URLs.
• Operational logs: timestamps, request counts, error logs. No journal content in logs.

How AI processing works

When you write a journal entry, we send the conversation context (your profile, recent entries, and your current message) to a third-party AI provider — currently Anthropic (Claude) and/or OpenAI (GPT) — over an HTTPS API connection. The provider returns a response which we stream back to you and store with your session.

These providers process your data only to generate that specific response. They do not use it to train their models (per their enterprise API terms). After the response is generated, the provider does not retain a copy beyond their own short-term operational windows. See:

• Anthropic data usage: anthropic.com/legal/commercial-terms
• OpenAI API data usage: openai.com/enterprise-privacy

Where data is stored

We use Supabase (Postgres, Auth, Storage) hosted in AWS us-east-1. Data in transit is encrypted via TLS. Data at rest is encrypted by Supabase. Row-level security ensures only you can access your data — no other user can read your entries.

Your rights

• Export: Download all your data as JSON from Settings → Export My Data.
• Delete: Delete your account and all associated data from Settings → Delete account and all data. Deletion is permanent and cannot be reversed.
• Edit: Update or delete individual journal entries from the History page.
• Privacy toggle per entry: Mark a session as Private so it is excluded from AI context-building (still stored for your own reference).

What we don't do

• We do not sell your data to anyone.
• We do not use your data to train AI models.
• We do not show ads.
• We do not share your journal content with anyone except the AI providers needed to generate responses.

Cookies

We use cookies only for authentication (keeping you signed in) and a non-personal A/B preference for which landing page version you see. No tracking, no advertising cookies.

Children

MyJournalPal is not directed at children under 13. We do not knowingly collect data from anyone under 13.

Changes

If we make material changes to this policy, we will notify signed-in users by email and update the "Last updated" date above.

Contact

Questions? Email support@kanverse.app.