Privacy Policy

The short version

• Your journal is private to your account. We do not publish or sell it.
• The app does not include advertising or cross-app tracking SDKs.
• Journal entries are encrypted in transit and at rest, but they are not end-to-end encrypted.
• AI features send only the content needed for that feature. Personalized daily questions read short excerpts of your recent entries unless you turn them off.
• You can export your data and permanently delete your account.

Information we collect

Account and profile: Clerk user ID, email address, display name, session identifiers, and optional profile details such as a photo, birthday, gender, language, timezone, reminder hour, and journaling goal.

Journal and books: entry titles and text, dates, prompts, tags, drawings, uploaded photos, videos, audio, transcripts, optional place and weather context, book settings, generated images, and PDF files.

Operations: technical request logs such as IP address, device platform, push notification token when enabled, subscription state, and quota usage.

How we use information

We use this information to authenticate you, store and display your journal, provide the features you request, generate books, send reminders you enable, sync subscriptions, enforce quotas, secure the service, prevent abuse, provide support, and comply with applicable law. We do not sell personal information or journal content.

Optional AI processing

When you start an AI feature, the relevant entry text, prompt, audio, image, or selected book content may be sent to OpenAI or Replicate to produce the requested result. Voice transcription sends the selected recording. Book generation sends the entries and settings you selected. AI processing may occur outside Indonesia.

Personalized daily questions: once a day, at your reminder hour or when you open today's question, the first 300 characters of up to 10 of your most recent entries are sent to OpenAI to write one follow-up question. This is on by default and can be turned off in More → Personalized questions; when it is off, daily questions are written without reading your entries. Daily question notifications only say that a question is ready and never show the question or your journal text on the lock screen.

Apart from personalized daily questions, if you do not start an AI feature, that feature does not send your journal content to an AI provider.

Error diagnostics

We use Sentry to diagnose and fix failures in the app and its backend. Reports are sent automatically when a monitored error occurs. They contain error classes, locations in application code, and application version/build identifiers, together with a random report identifier and information needed to match code locations to the correct release.

Diagnostic reports exclude journal text, audio, photos, prompts, exception messages, account identifiers, request data, IP addresses, and location. Content is removed before reports are sent, and Sentry is configured to remove connection-derived IP and location information from stored reports. We do not enable session replay, performance tracing, profiling, or native crash reporting. These reports are used for service reliability, not advertising or cross-app tracking. There is currently no in-app switch to turn off this automatic diagnostic reporting.

Service providers

We use Clerk for authentication; DigitalOcean for application and database hosting; Cloudflare R2 for private file storage and encrypted application and database backups; OpenAI and Replicate for optional AI processing; RevenueCat and the relevant app store for subscriptions; Expo or Google FCM for push notifications; and Sentry for error diagnostics. These providers receive only the information needed to perform their role. Processing may take place outside Indonesia.

Security

We use HTTPS, encryption at rest, access controls, private object storage, and signed expiring media links. No online service can guarantee perfect security. Because the service is not end-to-end encrypted, our systems can process entry content to provide the features you request.

Your choices

You can export your information in the app, delete your application data, disable notifications, decline location access, revoke device permissions, and turn off personalized daily questions, and choose not to use AI features. Depending on applicable law, you may also request access, correction, restriction, portability, or deletion.

The current in-app deletion flow removes Book My Life application data but does not itself delete the authentication identity held by Clerk. See the account-deletion page to submit a complete deletion request covering both.

Retention and children

Journal content remains in live systems until you delete it or your application data, subject to limited retention required for security, legal, billing, and fraud-prevention purposes. Separately stored encrypted database backups can contain information that has since been deleted from live systems. These copies are managed manually and do not have automatic expiration. Contact us about removal from retained backup copies; we do not claim that deletion from the app immediately removes every backup copy. Technical error reports are retained under our Sentry project's retention settings to diagnose failures.

Book My Life is not directed to children under 13 or a higher minimum age required by local law.

Changes and contact

We may update this policy and will revise the effective date above. Material changes will be communicated in the app or by email when appropriate.

Privacy contact: kenaradipawinekas@gmail.com
Operator: Kenaradipa Danirmala Winekas
Address: Surabaya, Jawa Timur, Indonesia