Privacy Policy
Last updated: April 17, 2026
1. Introduction
SpeakDiary ("we", "us", or "our") is a private journaling app that helps you capture thoughts through text and voice, with optional AI-powered features.
Local-first by default: Your journal data is stored on your device by default. Cloud Sync is optional and only occurs if you enable it.
Encryption: Journal entries are encrypted on your device before being stored or synced. We do not have access to your decrypted journal content.
Some features, such as transcription, AI insights, support replies, push notifications, and subscriptions, require selected data to be sent to our backend or service providers so the feature can work.
2. Information We Collect
We collect only the data necessary to provide and secure the app:
Account data: Email address and basic identifiers. Passwords are securely hashed and never stored in plain text.
Journal content (Sensitive): Text entries, voice recordings, future letters, goals, mood/check-in content, and related user-generated content. Stored locally by default. If Cloud Sync is enabled, encrypted versions are stored remotely.
Voice data: Audio recordings are stored on your device first. If you choose transcription or cloud sync for voice entries, selected audio is securely transmitted for processing or secure storage.
Usage & diagnostics: App performance data such as feature usage, crash data, and interaction patterns. This data is not linked to your journal content.
Device & security signals: Device type, OS version, language, push token, and short-lived IP or request metadata for security, delivery, and abuse prevention.
Payment data: Subscription and entitlement state are managed through the app stores and RevenueCat. We do not store full payment credentials.
3. Permissions & Device Access
- Microphone: Record voice entries.
- Photos / Media: Optional local avatar selection, where supported.
- Notifications: Send reminders and scheduled messages. A push token is stored only to deliver these notifications.
- Biometrics: Optional unlock and security flows on supported devices.
4. Storage & Sync
Your data is stored locally on your device using local app storage and a local database.
If Cloud Sync is enabled, encrypted data is synced through our backend and Firestore to allow access across devices.
Sync occurs only when enabled and when the app is active or performing a scheduled sync while connected to the internet.
Audio files that you choose to sync may be stored using secure object storage services. These files are linked to your account and used to support playback and sync across devices.
5. AI Features and Processing
AI features are optional and only activated when you choose to use them.
- Only the specific content required for the feature is processed
- Voice recordings may be sent for transcription when requested
- Text may be processed to generate summaries, insights, prompts, categorization, translations, or related AI outputs
When offline, requests are queued and processed once an internet connection is available.
We do not use your content to train AI models or for advertising purposes.
6. How We Use Your Information
- Provide journaling and sync functionality
- Process AI features you request
- Deliver notifications
- Maintain security and prevent abuse
- Improve performance and reliability
No selling of data: We do not sell personal data.
No ad tracking using journal data: Your private entries are never used for advertising.
7. Sharing & Disclosure
We share data only when necessary:
- Service providers: Authentication, cloud sync, AI processing, notifications, support delivery, subscription processing, and hosting
- Legal obligations: When required by law
- Business transfers: In case of merger or acquisition
8. Third-Party Services
- Firebase (Google): Authentication, encrypted sync storage, push messaging, analytics, and crash reporting
- RevenueCat: Subscription and entitlement management
- AI providers: OpenAI and Google Gemini for transcription and AI-assisted features you request
- Cloudflare R2: Secure storage of synced audio files
- Inbound: Customer support email delivery and reply handling
- Vercel: Backend hosting and application delivery
- Apple App Store / Google Play: Billing and store-managed subscriptions
9. Data Retention & Deletion
Data is retained while your account is active. You may delete your data at any time within the app.
Upon account deletion, account-linked cloud data is removed or anonymized within 30 days unless a shorter or longer retention period is required for security, fraud prevention, or legal compliance.
10. Your Rights
You may access, correct, or delete your data. Contact [email protected] for requests.