Revisit Privacy Policy
Effective date: 9 October 2026 (updated 5 November 2026: Revisit no longer sells anything)
Revisit is a private diary and goals app by Lanternly. Everything you write is encrypted on your phone, and only you can read it.
Revisit uses the internet for three things, all provided by Google: signing in with Google, backing up to Google Drive, and showing ads. Signing in and Drive backup are optional. Everything else works offline. Lanternly has no servers, and Revisit sends nothing to us.
What stays on your phone
• Your diary entries, goals and check-in answers, notebook pages, drawings, photos, tags and settings.
• A protected form of your PIN and recovery code (not the PIN or code itself).
All of it is encrypted on the phone, with keys protected by the phone's secure hardware (Android Keystore). Photos are re-saved without location or camera details before they are encrypted. Neither we nor Google can read any of it. Your writing and photos only leave the phone inside an encrypted backup you choose to make, or in a PDF you choose to export.
What is collected
Google's Mobile Ads SDK in Revisit collects:
• Device or other IDs: the Android advertising ID and app set ID.
• IP address and approximate location: Google estimates a rough location from the IP address. Revisit never asks for your location.
• App interactions: for example, when the app opens and when you tap an ad.
• Diagnostics: how well the app and the ad SDK are working.
The SDK sends this to Google, which uses it and shares it with its ad partners for advertising, analytics and fraud prevention. Ads never see what you write.
Apart from this, Google receives only what it needs to sign you in and keep your encrypted backup in your Drive. Lanternly receives nothing, and Revisit has no analytics or crash reporting of its own.
Ads
Small banner ads from Google AdMob at the bottom of the Home, Diary, Goals and Notebook lists. No ads on the lock screen, while writing an entry or a page, or during check-ins, and no full-screen ads.
In the European Economic Area, the UK and Switzerland, Revisit shows Google's consent form. People can change their choice at any time in Settings → Ad privacy choices.
Purchases
None. Revisit is free and sells nothing: no in-app purchases and no subscriptions, so it never handles payment details.
Sign in with Google
Optional. Used to link the Google account for Drive backup, to bring the diary back on a new phone, and as one way to reset a forgotten PIN (the others are the phone's screen lock and the recovery code). Revisit keeps only the account's email address and Google's ID for it, on the phone. Nothing is sent to us.
Sign out at any time on the Backup screen, or remove Revisit's access in the Google Account under Security → Your connections to third-party apps & services.
Google Drive backup
Daily if you like, and whenever you ask. Each backup is encrypted on the phone (AES-256-GCM) before it is uploaded to the hidden app folder of your own Google Drive, which only Revisit can use. Revisit can't see your other Drive files. Neither Google nor we can read the backup.
The key that opens it stays with you:
• On the phone, it is protected by the Android Keystore.
• When you set up a new phone from your Google backup, Google Block Store carries the key across, end-to-end encrypted with the old phone's screen lock, so Google can't read it.
• Your recovery code, or your backup password if you set one, also opens the backup.
To restore on a new phone, set it up from your Google backup and sign in to Revisit with the same Google account. If the key couldn't come across (for example, the old phone had no screen lock), the recovery code or backup password opens the backup instead.
Backup files
You can also save an encrypted backup file anywhere you choose with Android's file picker. It is encrypted on the phone too, so only you can open it. A cloud service you save it to stores a file it can't read, under its own privacy policy. Android's automatic cloud backup is turned off for Revisit.
All three online features come from Google, and Revisit includes no other company's services. Google handles this data under its own privacy policy: https://policies.google.com/privacy
How Google uses information from sites or apps that use its services, and the choices you have: https://policies.google.com/technologies/partner-sites
Permissions
• Internet access: only for signing in with Google, Google Drive backup and ads.
• Advertising ID: read by Google's ad SDK.
• Fingerprint or face unlock: only if you turn it on.
• Notifications: goal check-ins, letters to your future self, and an optional daily writing nudge. They never show what you wrote.
• Run at startup / keep awake briefly: so scheduled reminders survive a restart.
Photos are added with Android's photo picker, which shares only the photos you choose.
PDF export
A PDF of the diary, an entry or a notebook page is saved where you choose. It is not encrypted, and Revisit warns about that before saving it.
Deleting your data
• On the phone: delete any entry, page or tag in the app. Uninstalling deletes the diary, notebook, photos and settings from the phone.
• Google Drive backup: Backup screen → Delete Google Drive backup (this also removes the backup key from Block Store). Or in Google Drive on the web: Settings → Manage apps → Revisit → Options → Delete hidden app data.
• Google sign-in: Backup screen → Sign out of Google, or remove Revisit's access in the Google Account. Signing out doesn't delete the Drive backup.
• Ad data: held by Google. Reset or delete the advertising ID in the phone's settings; Google's page above explains its other controls.
• Backup files and PDFs saved elsewhere stay until you delete them.
Revisit sends nothing to us, so we have no copy of your diary, your backups or your ad data to look up or delete.
Children
Revisit is for people aged 13 and over. It is not directed at children under 13.
Changes
If Revisit starts collecting anything new, or sending data to anyone new, this policy is updated before that version is released, and the change is described in the release notes.
Terms of Use
Your use of Revisit is also covered by the Revisit Terms of Use, on the Terms of Use page of this site.
Contact
Lanternly, lanternlyapps@gmail.com
Revisit Privacy Policy
Effective date: 9 October 2026 (updated 5 November 2026: Revisit no longer sells anything)
Revisit is a private diary and goals app by Lanternly. Everything you write is encrypted on your phone, and only you can read it.
Revisit uses the internet for three things, all provided by Google: signing in with Google, backing up to Google Drive, and showing ads. Signing in and Drive backup are optional. Everything else works offline. Lanternly has no servers, and Revisit sends nothing to us.
What stays on your phone
• Your diary entries, goals and check-in answers, notebook pages, drawings, photos, tags and settings.
• A protected form of your PIN and recovery code (not the PIN or code itself).
All of it is encrypted on the phone, with keys protected by the phone's secure hardware (Android Keystore). Photos are re-saved without location or camera details before they are encrypted. Neither we nor Google can read any of it. Your writing and photos only leave the phone inside an encrypted backup you choose to make, or in a PDF you choose to export.
What is collected
Google's Mobile Ads SDK in Revisit collects:
• Device or other IDs: the Android advertising ID and app set ID.
• IP address and approximate location: Google estimates a rough location from the IP address. Revisit never asks for your location.
• App interactions: for example, when the app opens and when you tap an ad.
• Diagnostics: how well the app and the ad SDK are working.
The SDK sends this to Google, which uses it and shares it with its ad partners for advertising, analytics and fraud prevention. Ads never see what you write.
Apart from this, Google receives only what it needs to sign you in and keep your encrypted backup in your Drive. Lanternly receives nothing, and Revisit has no analytics or crash reporting of its own.
Ads
Small banner ads from Google AdMob at the bottom of the Home, Diary, Goals and Notebook lists. No ads on the lock screen, while writing an entry or a page, or during check-ins, and no full-screen ads.
In the European Economic Area, the UK and Switzerland, Revisit shows Google's consent form. People can change their choice at any time in Settings → Ad privacy choices.
Purchases
None. Revisit is free and sells nothing: no in-app purchases and no subscriptions, so it never handles payment details.
Sign in with Google
Optional. Used to link the Google account for Drive backup, to bring the diary back on a new phone, and as one way to reset a forgotten PIN (the others are the phone's screen lock and the recovery code). Revisit keeps only the account's email address and Google's ID for it, on the phone. Nothing is sent to us.
Sign out at any time on the Backup screen, or remove Revisit's access in the Google Account under Security → Your connections to third-party apps & services.
Google Drive backup
Daily if you like, and whenever you ask. Each backup is encrypted on the phone (AES-256-GCM) before it is uploaded to the hidden app folder of your own Google Drive, which only Revisit can use. Revisit can't see your other Drive files. Neither Google nor we can read the backup.
The key that opens it stays with you:
• On the phone, it is protected by the Android Keystore.
• When you set up a new phone from your Google backup, Google Block Store carries the key across, end-to-end encrypted with the old phone's screen lock, so Google can't read it.
• Your recovery code, or your backup password if you set one, also opens the backup.
To restore on a new phone, set it up from your Google backup and sign in to Revisit with the same Google account. If the key couldn't come across (for example, the old phone had no screen lock), the recovery code or backup password opens the backup instead.
Backup files
You can also save an encrypted backup file anywhere you choose with Android's file picker. It is encrypted on the phone too, so only you can open it. A cloud service you save it to stores a file it can't read, under its own privacy policy. Android's automatic cloud backup is turned off for Revisit.
All three online features come from Google, and Revisit includes no other company's services. Google handles this data under its own privacy policy: https://policies.google.com/privacy
How Google uses information from sites or apps that use its services, and the choices you have: https://policies.google.com/technologies/partner-sites
Permissions
• Internet access: only for signing in with Google, Google Drive backup and ads.
• Advertising ID: read by Google's ad SDK.
• Fingerprint or face unlock: only if you turn it on.
• Notifications: goal check-ins, letters to your future self, and an optional daily writing nudge. They never show what you wrote.
• Run at startup / keep awake briefly: so scheduled reminders survive a restart.
Photos are added with Android's photo picker, which shares only the photos you choose.
PDF export
A PDF of the diary, an entry or a notebook page is saved where you choose. It is not encrypted, and Revisit warns about that before saving it.
Deleting your data
• On the phone: delete any entry, page or tag in the app. Uninstalling deletes the diary, notebook, photos and settings from the phone.
• Google Drive backup: Backup screen → Delete Google Drive backup (this also removes the backup key from Block Store). Or in Google Drive on the web: Settings → Manage apps → Revisit → Options → Delete hidden app data.
• Google sign-in: Backup screen → Sign out of Google, or remove Revisit's access in the Google Account. Signing out doesn't delete the Drive backup.
• Ad data: held by Google. Reset or delete the advertising ID in the phone's settings; Google's page above explains its other controls.
• Backup files and PDFs saved elsewhere stay until you delete them.
Revisit sends nothing to us, so we have no copy of your diary, your backups or your ad data to look up or delete.
Children
Revisit is for people aged 13 and over. It is not directed at children under 13.
Changes
If Revisit starts collecting anything new, or sending data to anyone new, this policy is updated before that version is released, and the change is described in the release notes.
Terms of Use
Your use of Revisit is also covered by the Revisit Terms of Use, on the Terms of Use page of this site.
Contact
Lanternly, lanternlyapps@gmail.com