Privacy Policy

Last updated: May 28, 2026

Private AI Journal ("the App") is published by Bulpara Inc ("we", "us", "our"). This policy describes how we collect, use, and protect information when you use the App. The short version: your journal entries never leave your iPhone, and we operate no server that sees your content.

1. Journal Entries & AI Content

• Your entries never leave your device. All AI features — daily prompts, weekly reflections, mood detection, voice transcription, title suggestions — run on-device using Apple Intelligence (Foundation Models) and Apple’s on-device Speech framework.
• The App does not upload, transmit, stream, or store your journal text, mood data, voice recordings, or transcriptions on our servers.
• Entries, photos, and voice recordings live in the App’s sandbox on your iPhone, and (if you opt in) in your personal iCloud private CloudKit zone — which Apple cannot read and we have no access to.
• If you choose to share or export an entry (markdown, PDF, image, iOS share sheet), you control where it goes — we do not see it.

2. Data We Store Locally

• Journal entries: Title, body text, mood, themes, attached photos, timestamps, optional weather and location. Stored locally via SwiftData and (if enabled) synced through your iCloud private zone.
• Voice recordings & transcripts: Stored locally with the corresponding entry. Transcription runs on-device.
• Preferences: Theme, default editor mode, prompt frequency, Face ID toggle, notification settings.
• Streak & usage data: Daily streak counter, last-entry timestamp, daily prompt counter for free-tier limits. Stored locally only.
• Purchase status: Subscription state is managed by Apple’s StoreKit and cached locally for feature gating.

3. Permissions We Request

• Microphone: Only when you tap the voice-entry button to record a new entry. We do not record in the background or while the App is closed.
• Speech Recognition (on-device): Only while you are dictating a voice entry. Transcription happens on your iPhone; no audio is sent to Apple servers.
• Photos (read-only): Only when you choose to attach an image to an entry. We access only the photo you select via the iOS PhotosPicker — we do not enumerate your library.
• Location (optional): If you enable "Capture location with entry", a coarse location is stored with the entry. Off by default and disabled at any time in iOS Settings.
• Face ID / Touch ID: Used only to unlock the App when biometric lock is enabled in settings. Biometrics never leave your device — iOS handles authentication.
• Notifications (optional): Used to remind you of your daily journaling habit and to notify you when a Sunday reflection is ready. Disable in iOS Settings.

4. iCloud Sync

• iCloud sync is optional and uses your personal CloudKit private database. Entries are encrypted at rest by Apple and tied to your Apple ID.
• We do not operate a CloudKit container that sees user data; sync happens device-to-device through your private iCloud zone.
• Disable iCloud sync at any time in the App’s Settings. Disabling sync does not delete the data already in your iCloud account — manage that through iOS Settings → Apple ID → iCloud → Manage Storage.

5. Third-Party Services

The App uses the following third-party services:

• Apple App Store / StoreKit: Manages subscriptions and purchases. Governed by Apple’s privacy policy.
• Apple Intelligence (Foundation Models): On-device AI for prompts, reflections, mood detection, and title suggestions. Runs entirely on your iPhone — no prompts or completions are sent to Apple servers.
• Apple Speech framework: On-device transcription for voice entries.
• Google AdMob (free tier only): Displays banner ads to free-tier users. AdMob may collect device identifiers for ad personalization. Journal entries, voice recordings, mood data, and AI content are never shared with AdMob. See Google’s Privacy Policy.

Premium subscribers see no ads and trigger no AdMob requests.

6. Data Storage and Security

• All entries, voice recordings, transcripts, mood data, and preferences are stored locally on your device, and optionally in your personal iCloud private zone.
• No journal content, transcripts, or device-identifiable user content is transmitted to or stored on our servers. We have no servers that hold user data.
• Purchase verification uses Apple’s secure StoreKit framework.
• The App’s core features — writing, AI prompts, voice transcription, mood detection, weekly reflections — work completely offline. Verifiable: toggle airplane mode and confirm every feature still works.
• Optional Face ID / Touch ID lock gates access to the App.

7. Data Sharing

We do not sell your personal data. We do not share your journal entries, voice recordings, mood data, or AI-generated content with any third party. AdMob may collect device-level data for ad personalization (free tier only); journal content is excluded.

8. Your Rights

You can:

• Delete individual entries from the Library inside the App
• Export your entire journal as markdown or PDF before deletion
• Delete the App to remove all local entries, voice recordings, and preferences from this device
• Manage or delete iCloud-synced data via iOS Settings → Apple ID → iCloud → Manage Storage
• Disable Notifications, Microphone, Photo, and Location permissions from iOS Settings at any time
• Request information about data handling by contacting us at privacy@bulpara.com

9. Children’s Privacy

The App is rated 4+ and is not intended to collect data from children under 13. Because the App does not collect personal data on our servers, this is enforced by design.

10. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated "Last updated" date.

11. Contact Us

If you have questions about this privacy policy, contact us at:

privacy@bulpara.com