Account information: Your name and email address. Your password is securely hashed and never stored in plain text.
Journal content: Your journal entries, the prompts you responded to, and entry dates.
Error and performance data: Crash reports, error logs, and performance metrics to keep the app working. Error reports may include your IP address and device information to help diagnose issues.
Local device data (not sent to us): Theme preference and notification settings are stored on your device only.
What we don't collect: Location, advertising IDs, contacts, photos, health data, browsing history, or payment information.
We do not sell your data. We do not use your journal content for advertising, marketing, or AI training. The app is free and does not monetize your data.
Your data is stored on third-party infrastructure. As the operator of this app, we have administrative access to the database and can view stored data when necessary for support or troubleshooting. Journal content is not end-to-end encrypted.
We use third-party service providers for authentication, database hosting, email delivery, error monitoring, and app distribution. These providers process data on our behalf under contractual obligations and maintain industry-standard security certifications. All data is encrypted in transit (TLS) and at rest by our providers. Data is processed in the United States.
We use mobile session replay for debugging. All text content is masked by default — journal entries appear as asterisks in replays. Media elements are blocked. We have not disabled these default protections.
Your data is kept as long as your account exists. You can delete your account at any time from Settings — this permanently removes all your journal entries and profile data from our servers. This is immediate and irreversible.
You can also delete individual entries or all entries for a specific date.
We may delete accounts that have been inactive for more than 12 months. We will attempt to notify you by email before doing so.
Error data is retained for up to 90 days regardless of account deletion.
The app can send local push notifications as journaling reminders. These are scheduled on your device, not sent from a server. They are never promotional. You can turn them off in Settings.
You must be at least 13 years old (16 in the EU) to use this app.
You can access, edit, and delete your journal entries directly in the app. To request a data export, email support@one-line-journal.com. If you are in the EU, you have additional rights under the GDPR (access, rectification, erasure, portability). We do not sell personal information (CCPA).
We may update this policy. When we do, we'll update the effective date and ask you to review it in the app.
support@one-line-journal.com — we respond within 30 days.