Privacy Policy - Journoo

Last Updated: August 20, 2026

1. Introduction

This Privacy Policy explains how Journoo AI, LLC (“Journoo,” “we,” “us,” or “our”) collects, uses, and discloses your personal information when you use our website, our applications, and any related services (collectively, the “Services”).

Your privacy is our top priority. Our services are designed to be a private and secure digital space. This policy will inform you about your privacy rights and how the law protects you. We comply with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and the California Privacy Rights Act (CPRA).

2. Information We Collect

We collect several different types of information for various purposes to provide and improve our Services to you.

a. Information You Provide to Us

Contact Information: This includes your name and email address.
Account Information: This includes your a unique user ID.
Financial Information: When you subscribe to our Services, payments are processed by Apple, Google, or our payment processor; we receive transaction and subscription status but never your full card number.
Journal Content: Your journal entries, voice recordings (processed for transcription, then deleted), photos you attach, and locations you tag. This content is encrypted and used only to provide the service — see Sections 3 and 5.
User-Generated Content: This includes any feedback, ratings, or reviews you choose to provide about our Services — see Section 3.
Communications with Us: We collect information you provide when you contact us for support, provide feedback, complete surveys, or participate in reviews. This includes your comments and any associated metadata.

b. Information We Collect Automatically

Device and Usage Information: We automatically collect information about how you access and use our Services. This includes your IP address, browser type, operating system, device identifiers, the pages you visit, the features you use, and the timestamps of your interactions.
Location Information: With your explicit consent, we may collect precise geolocation data from your device to enable location-based features. You can enable or disable location services when you use our Services at any time through your device settings.
Cookies and Tracking Technologies: We use cookies and similar tracking technologies to track the activity on our Services and hold certain information. This includes essential, performance, and advertising cookies. You have the ability to control the use of cookies at the individual browser level.

3. How We Keep Your Data Safe

a. Who Can Access Your Data (only You)

Your journal entries are private to you.
Each user’s data is completely isolated from other users.
Administrative access is restricted and audited.

b. Encryption Protocol

We encrypt your data in three ways:

1. Storage Encryption

All data is scrambled when saved to our database.
Like storing your diary in a locked safe.
Uses military-grade encryption (AES-256).
Automatic and always active.

2. Transfer Encryption

Data is scrambled when moving between your device and our servers.
Like sending letters in locked boxes instead of postcards.
Uses the latest security standards (TLS 1.3).
Same technology banks use.

3. Extra Protection for Sensitive Content

Journal content gets an additional layer of encryption.
Each user has their own unique encryption key.
Even if a bad actor accesses the database, your entries look like random gibberish.
Voice recordings are deleted as soon as they are processed.

4. How We Use Your Information

We use the collected data for various purposes:

To provide, operate, and maintain our Services.
To process your payments and manage your subscription.
To personalize your experience, including AI processing of journal content to generate responses/insights.
To improve our services, we use your feedback, ratings, and reviews.
For our marketing and promotional efforts, such as measuring ad-campaign effectiveness.
To monitor and analyze the use of our Services for technical administration and to improve our Services’ functionality and user-friendliness.
To communicate with you about your account, and to send you information about features on our Services and other news and information about Journoo.
To enhance the security of our Services and for fraud prevention.

5. Sharing and Disclosure of Information

We require all service providers to protect your data to the same or equal standard described in this policy. We may share your information with third-party service providers under the following circumstances:

Hosting and Infrastructure: We use third-party cloud infrastructure and database providers to host our API, store data, and run application services securely.
Payment and Subscription Management: We use third-party subscription and payment processors to manage in-app purchases, validate receipts, and track subscription status. These services process transactional data (such as billing status and purchase history) to manage your account and deliver premium features.
AI Features: Journoo relies on third-party AI providers to power features including prompts, responses, suggestions, transcription, image analysis, and memory. Relevant data is shared with these providers strictly to process your request and deliver the service. Your data is kept secure and never used to train AI models.
Maps & Location: When you add a location to an entry or search for a place, coordinates and search text are sent to a third-party service to look up place names.
Email & Marketing Communications: A third-party service receives email address and engagement events to send product and marketing emails.
Analytics: We use third-party analytics tools to understand how people interact with Journoo (such as feature usage and app performance). This telemetry data helps us improve the app. We never use your private content for advertising or analytics.
Advertising Attribution: With your permission (via the tracking prompt on iOS; on Android, using the Google advertising ID, which you can reset or delete at any time in your device settings), we share device identifiers with an attribution partner to measure which ad campaigns bring people to Journoo. This is never linked to your journal content.
Error Monitoring & Diagnostics: We use crash-reporting services to help us detect, diagnose, and fix bugs within the app.
Customer Support: If you reach out for help, we may use third-party support platforms to manage and respond to your communications.
Legal Requirements: We may disclose your information if required to do so by law, regulation, or valid legal process (such as a court order or subpoena).

6. Your Data Rights and Choices

Depending on where you live, you may have some or all of the following rights:

Right to Access: You have the right to request copies of your personal data.
Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
Right to Erasure: You have the right to request that we delete your account and associated personal data.
Right to Data Portability: You have the right to request that we transfer the personal data we have collected to another organization, or directly to you, in a structured, commonly used, and machine-readable format.
Right to Object / Restrict Processing: You have the right to object to or request that we restrict the processing of your personal data under certain conditions.
Right to Withdraw Consent: You have the right to withdraw your consent at any time where processing is based on consent.
Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority if you believe your privacy rights have been violated.
Non-Discrimination: You have the right not to receive discriminatory treatment for exercising any of your privacy rights.
Marketing Communications: You can opt-out of receiving marketing emails from us by following the unsubscribe link in the emails.
Cookie Control: You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies.

To exercise any of these rights, please contact us at [email protected]

7. Data Security and Retention

We implement robust security measures to protect your information:

Data Encryption: All user data is encrypted at rest and in transit. Journal content is encrypted before storage and protected in transit.
Access Control: Administrative access is protected by two-factor authentication. We also employ strict access controls and full audit logging to safeguard your data.

We will retain your personal information for as long as your account is active. If your account is inactive for 2 years, we will notify you 30 days before deleting your account and associated data. If you initiate an account deletion, your data will be permanently deleted within 90 days.

8. International Data Transfers

Journoo is operated from the United States, and the service providers described in this policy may process your data in the United States and other countries whose data protection laws differ from those of your country of residence. Where we transfer personal data from the European Economic Area, the United Kingdom, or Switzerland, we rely on appropriate safeguards, including the European Commission’s Standard Contractual Clauses and, where applicable, our providers’ certification under the EU–U.S. Data Privacy Framework (including its UK and Swiss extensions). Wherever your data is processed, we apply the protections described in this policy.

9. Children’s Privacy

Our Services are not intended for use by children under the age of 18, and we do not knowingly collect personal information from children under 18.

10. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new policy on our website, and we may also notify you via email.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at: [email protected]