Last updated: 02.07.2026 Developer: Sakine Koç Contact: subhuti.tech@gmail.com
1. Overview
MindJournal (“the App”) is a personal notes and journal app. We prioritize your privacy, and the vast majority of your data remains strictly on your local device.
2. Data We Process
Notes: Titles, text, tags, priority, and task status are stored locally.
Voice Recordings: Stored locally on your device.
Attachments: Photos and PDFs remain on your device (with an optional copy saved to your local Documents/MindJournal folder).
Reminders: Dates and times for scheduled alerts.
Security: We only store a hash of your PIN; the plain PIN is never saved. Biometric authentication (FaceID/TouchID) is handled entirely and securely by your device's operating system.
Preferences: UI theme, language, and speech recognition settings.
3. Third-Party Services & Backend Architecture
Cloudflare Workers (Backend Proxy): To ensure the security of our API keys when utilizing optional AI features, your requests are routed through Cloudflare Workers. Any note text, transcripts, or attached files pass through this server to reach the Google Gemini API. Cloudflare acts strictly as a proxy and relay service; your notes and data are never permanently stored on Cloudflare servers.
Firebase Anonymous Authentication: To grant you seamless access to AI features, the App utilizes Firebase Anonymous Authentication without requiring an email address or password. This is strictly used to authenticate requests sent to the server and prevent abuse; your note content is never backed up or saved to Firebase.
Google Gemini (AI): Data forwarded to the Gemini API is used solely to provide the requested AI feature (such as text analysis or document OCR) and is not used to train Google's foundation models.
Google Play Integrity / App Check: To ensure the App is an official, unmodified version running on a trusted device, cryptographic integrity signals are exchanged with Google. No personal notes or journal content are transmitted or processed by this service.
Cloud Firestore: Used strictly to maintain daily AI quota counters by tracking anonymous user identifiers and usage metrics.
Cloud Storage: Audio files requiring AI transcription may be uploaded temporarily to secure cloud storage. These files are permanently deleted automatically immediately after the transcription processing is complete.
Apple Siri: Voice commands utilized for hands-free journaling are routed through Siri, processed securely by your device's operating system, and governed by Apple's privacy policies.
Google AdMob (Ads): Non-premium users may see advertisements. AdMob may collect device identifiers and usage data per Google’s policies. On iOS, personalized advertising is governed by your App Tracking Transparency (ATT) selection. On Android, you can manage ad personalization via your device settings.
Google Drive (Optional Backup): If you choose to enable cloud backups, your data is uploaded securely to your personal Google Drive account.
Google Account (OAuth): Used strictly for authentication if you enable Google Drive backups.
Firebase Crashlytics: We collect anonymous crash and stability reports (such as device model and OS version) to help identify and fix bugs.
4. Data Storage & Retention
Main Database: All journal entries are stored locally on your device (Room database).
No Automatic Cloud Sync: We do not automatically sync or mirror your personal notes to any persistent cloud servers.
Server Retention Period: Any temporary operational data or server logs processed on our secure backend are stored temporarily and automatically purged within 30 days, or deleted instantly upon completion of the requested transaction (e.g., temporary audio files are deleted immediately after transcription).
Uninstallation: Deleting the app removes all local data. Backups you have manually exported or synced to Google Drive will remain until you delete them.
5. Permissions
We request access to device features only when necessary to provide core functionality:
Camera: To take photos for note attachments and scan physical documents for OCR.
Microphone: To record voice notes and enable audio transcription.
Notifications & Exact Alarms: To deliver your scheduled journal reminders.
Calendar: To link journal entries to specific calendar events.
6. Children's Privacy
The App is not directed at children under 13, and we do not knowingly collect personal data from children.
7. Your Rights and Data Deletion
You maintain full control over your data. You can delete individual entries or all data directly within the app, and you may export your data as JSON or encrypted backups at any time.
If you have uninstalled the app and wish to request the deletion of any residual analytics or crash data associated with your device, please contact us at the email below.
8. Changes to This Policy
We may update this policy periodically. Significant changes will be announced via an in-app notice or within the app store release notes.
9. Contact
For any privacy-related questions or data deletion requests, please contact: subhuti.tech@gmail.com