Last Updated: January 18, 2026
Secret Diary ("we," "our," or "the App") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our mobile application. We utilize industry-standard encryption and secure third-party services to ensure your personal thoughts remain private and accessible only to you.
We collect the following categories of information to provide and maintain the App's functionality:
Registration Data: To create an account, we collect your Email Address, First Name, and Last Name.
Authentication Data: We use Email One-Time Passwords (OTP) for registration and login to verify your identity.
Encrypted Notes: Any diary entries, titles, or content you create are stored in our database. Crucially, these notes are encrypted on your device using your password as a key before being transmitted. We cannot read your notes.
Device Information: We may collect basic information such as device model, OS version, and unique identifiers (e.g., Android ID) for security and troubleshooting purposes.
We use the collected data for the following purposes:
Authentication: To manage your account, verify your identity via OTP, and facilitate secure logins.
Service Delivery: To store and synchronize your encrypted diary entries across devices.
Security: To protect against unauthorized access and maintain account integrity.
Communication: To send essential account-related emails (e.g., verification codes or password reset instructions).
We use Supabase (a backend-as-a-service provider) to host our database and manage authentication. Your data is stored on secure servers maintained by Supabase, which complies with high-level security standards.
Your privacy is reinforced by our "Zero-Knowledge" architecture:
Local Encryption: Your notes are encrypted using AES-256 bit encryption on your mobile device.
Master Password: Your password is the key to this encryption. Because we do not store your raw password on our servers, we cannot decrypt or access your diary entries.
No Sale of Data: We do not sell, trade, or rent your personal information to third parties.
Legal Compliance: We may disclose your information if required by law or to respond to valid legal processes, such as a subpoena or court order.
Depending on your location (e.g., GDPR in Europe or CCPA in California), you have the following rights:
Access and Portability: You can request a copy of the data we hold about you.
Correction: You can update your account details (First/Last name) within the App settings.
Deletion: You may delete your account and all associated data at any time through the App. Once deleted, your encrypted notes are permanently removed from our servers.
Secret Diary is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13.
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy within the App and updating the "Last Updated" date at the top of this document.
If you have any questions or concerns about this Privacy Policy, please contact us at:
Email: shobhitprajapati48@gmail.com
Developer: Shobhit Prajapati