Privacy Policy

Developer: Pranav Ambwani

Last Updated: February 27, 2025

AutoJournal ("we," "our," or "the app") is privacy-first. Your photos never leave your device. All Vision analysis (scene classification, face detection) happens on-device. Only anonymized metadata is sent to generate journal narratives.

Information Stored on Your Device (Never Leaves)

All photos and thumbnails
Vision analysis results (scene labels, face counts)
GPS coordinates from photo EXIF data
Journal entries (narrative text, titles, captions)
Subscription status
All SwiftData persistence

Information Shared with Third-Party Services

AI Narrative Generation (Anthropic Claude via Cloudflare Worker)

What is sent: Day names, time-of-day labels (e.g., "morning," "around 2pm"), scene classification labels (e.g., "outdoor," "food"), neighborhood/city-level location names (e.g., "Mission District, San Francisco"), face counts, photo counts. This is assembled into a structured weekly summary.
What is NOT sent: Photos, thumbnails, GPS coordinates, filenames, face recognition data, personal identifiers.
How: Sent via HTTPS to a Cloudflare Worker proxy (anthropic-proxy.arkanaventerprises.workers.dev) which forwards to Anthropic's API. The Worker does not log or store user content.
Anthropic API data policy: Data sent via API is not used to train models.

Analytics (PostHog)

Anonymous usage events (e.g., "scan completed," "entry viewed," "paywall shown"), feature engagement metrics, app performance.
PostHog assigns an anonymous device UUID. Not linked to name, email, or Apple ID.
No journal text, photo content, or personally identifiable information is collected.

Subscriptions (StoreKit 2 / Apple)

Subscription verification handled entirely via Apple's StoreKit 2 framework. No third-party subscription SDK. Apple manages purchase receipts and entitlements.

Information We Do NOT Collect

No accounts, no login, no name/email/contact info
No location data transmitted
No photo uploads
No data sold, rented, or traded
No advertising or ad targeting

Data Security

All photo and journal data stored locally, protected by device passcode/Face ID/Touch ID
All network communication uses HTTPS
No database of user content maintained

Children's Privacy

AutoJournal is rated 4+ on the App Store. We do not knowingly collect personal information from children under 13. No personal information is collected from any user.

Your Rights

Access and deletion: Delete entries in-app or delete the app to remove all local data.
Analytics: Contact us to request deletion of anonymous analytics data associated with your device.

Third-Party Service Policies

Anthropic: https://www.anthropic.com/policies/privacy
PostHog: https://posthog.com/privacy
Cloudflare: https://www.cloudflare.com/privacypolicy/

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected by updating the "Last Updated" date above. Continued use of the app after changes constitutes acceptance of the revised policy.

Contact Us

If you have questions about this Privacy Policy or your data, contact us at:

Email: support@autojournal.app
Website: https://autojournal.app