Privacy Policy

The short version

• Your journal is private to your account. We do not publish or sell it.
• The app does not include advertising or cross-app tracking SDKs.
• Journal entries are encrypted in transit and at rest, but they are not end-to-end encrypted.
• Optional AI features send only the content needed for the feature you choose to start.
• You can export your data and permanently delete your account.

Information we collect

Account and profile: Clerk user ID, email address, display name, session identifiers, and optional profile details such as a photo, birthday, gender, language, timezone, reminder hour, and journaling goal.

Journal and books: entry titles and text, dates, prompts, tags, drawings, uploaded photos, videos, audio, transcripts, optional place and weather context, book settings, generated images, and PDF files.

Operations: technical request logs such as IP address, device platform, push notification token when enabled, subscription state, and quota usage.

How we use information

We use this information to authenticate you, store and display your journal, provide the features you request, generate books, send reminders you enable, sync subscriptions, enforce quotas, secure the service, prevent abuse, provide support, and comply with applicable law. We do not sell personal information or journal content.

Optional AI processing

When you start an AI feature, the relevant entry text, prompt, audio, image, or selected book content may be sent to OpenAI or Replicate to produce the requested result. Voice transcription sends the selected recording. Book generation sends the entries and settings you selected. AI processing may occur outside Indonesia.

If you do not start an AI feature, that feature does not send your journal content to an AI provider.

Service providers

We use Clerk for authentication; DigitalOcean for application and database hosting; Cloudflare R2 for private file storage; OpenAI and Replicate for optional AI processing; RevenueCat and the relevant app store for subscriptions; and Expo or Google FCM for push notifications. These providers receive only the information needed to perform their role.

Security

We use HTTPS, encryption at rest, access controls, private object storage, and signed expiring media links. No online service can guarantee perfect security. Because the service is not end-to-end encrypted, our systems can process entry content to provide the features you request.

Your choices

You can export your information in the app, delete your application data, disable notifications, decline location access, revoke device permissions, and choose not to use AI features. Depending on applicable law, you may also request access, correction, restriction, portability, or deletion.

The current in-app deletion flow removes Book My Life application data but does not itself delete the authentication identity held by Clerk. See the account-deletion page to submit a complete deletion request covering both.

Retention and children

Journal content is retained until you delete it or your account, subject to limited retention required for security, legal, billing, fraud-prevention, and backup-integrity purposes. Book My Life is not directed to children under 13 or a higher minimum age required by local law.

Changes and contact

We may update this policy and will revise the effective date above. Material changes will be communicated in the app or by email when appropriate.

Privacy contact: kenaradipawinekas@gmail.com
Operator: Kenaradipa Danirmala Winekas
Address: Apartemen Dian Regency, Sukolilo, Surabaya, Indonesia