Privacy Policy

• Account. Your email address and a securely hashed password (or, if you use Google/Apple sign-in, the identifier they return). We never see your raw password.
• Your entries. The text, voice transcripts, photos, and videos you log, plus the structured fields we extract from them and any corrections you make.
• Health & fitness data (only if you connect it). If you enable Health sync in the mobile app, we read the specific categories you authorize — sleep, steps, and body weight — from Apple Health (HealthKit) on iOS or Health Connect on Android. We read only what you grant, only to create journal entries for you. We never write to Health, and we do not access any other health categories.
• Billing. If you purchase a subscription or credits, payments are processed by Stripe. We store a Stripe customer reference and your plan/credit status, never your full card number.
• Limited diagnostics. Standard server logs (e.g. request timing, errors) to keep the service running and secure.

• To provide the core features: storing your entries and extracting structured data from them.
• To generate your summaries, correlations, insights, and answers to your questions about your own log.
• To process payments and apply your plan/credits (via Stripe).
• To secure the service, prevent abuse, and fix problems.

We do not sell your data, we do not use it for advertising, and we do not use your health data for anything other than the journaling features you ask for.

To turn your notes into structured data and to generate summaries, insights, and answers, the relevant entry text (and, for photo entries, the image) is sent to our AI provider, OpenRouter, which routes it to a large-language-model provider to compute the result. This processing happens only to produce features for you. Health metrics are stored as structured numbers and are not sent to the AI provider unless they are part of a summary or question you request.

We share data only with the service providers needed to run the app:

• OpenRouter (and the model providers it routes to) — AI text/image processing for extraction, summaries, and answers.
• Stripe — payment processing (only if you buy a subscription or credits).
• Telegram — only if you choose to link the optional Telegram bot to log from chat.
• Hosting — our application server and database, which we operate on a private cloud host.

We do not share your data with anyone else, and we never sell it.

Your data is stored on our private server and database and is transmitted over encrypted (HTTPS) connections. On your phone, your login token is stored in the device’s secure keystore (iOS Keychain / Android Keystore). We keep your data for as long as your account exists. When you delete your account, your entries and associated data are deleted.

• Export. You can export all of your entries as CSV or JSON at any time.
• Delete. You can delete individual entries, disconnect Health sync, or request deletion of your entire account and data by emailing us.
• Health permissions.You can revoke the app’s Health access at any time in the iOS Health app or Android Health Connect settings; revoking it stops all future syncing.
• Disconnect devices. Rotating or revoking your mobile token signs the app out of every device.

Bellariva Journal is not directed to children under 13, and we do not knowingly collect their data.

We may update this policy; we’ll revise the “Last updated” date above and, for material changes, notify you in the app.

Questions, or a data-deletion request? Email [email protected].