A journal about anxious days is sensitive. Here is exactly what happens to it, in plain words. Version 1 · 19 July 2026.
By default your journal lives in your browser and nowhere else, and the app makes no requests to anyone. If you choose to sign in, your journal syncs to a database in the EU that only your account can read. We run no ads, no trackers, no analytics on your journal, and we never sell or share it. "Delete everything" deletes everything. That is the whole policy; the rest is detail.
Until you sign in, everything you type (check-ins, anxiety levels, sense notes, habits, settings) is stored in your browser's local storage on your device. It never leaves. The app loads no third-party scripts, fonts, or pixels: zero network requests to anyone but this site. There are no cookies. Close the tab, and nothing about you exists anywhere but your own machine.
Local storage can be cleared by your browser or lost with the device, so the app includes export and restore: your data → save the file → keep it wherever you keep things.
Signing in with Google is optional and exists for one purpose: your journal following you across devices. Because journal entries include anxiety levels and personal notes, they count as health-related data under GDPR article 9, and we only process them with your explicit consent, asked for in the app before your journal leaves the device. You can withdraw it any time: signing out stops sync, deleting everything removes it all.
What is stored when you sign in:
· your check-ins: anxiety levels before and after, the things you saw, felt,
heard, smelled and tasted, any wheel-of-life notes, and your one-line highlight
· your habits, streaks, learned suggestions and settings
· your Google account's basic identifiers: user id, email, display name
Where: a single document only your account can read, in Google Firestore, stored in the eur3 multi-region (EU: Belgium and the Netherlands). Access is enforced by server-side security rules; there is no admin dashboard where anyone browses journals.
When you use sign-in and sync (and only then), two Google services run in the background: Firebase Authentication, which handles the sign-in itself, and Firebase App Check with reCAPTCHA Enterprise, which quietly checks that requests come from this app and not from a bot. The abuse check is our legitimate interest in keeping the database from being spammed; it never sees your journal. In local-only mode neither runs.
No analytics service runs anywhere in the app. The shop and blog pages are static; the shop's notify-me form is currently a demo and stores nothing at all. If that changes, this policy changes first.
The optional daily nudge is scheduled and shown by your own device — there is no email, no push server, and nothing about it leaves your phone. Voice input, where you use it, goes through your browser's own speech recognition (some browsers use their vendor's servers for this — that is between you and your browser, not us); the app only ever sees the text that lands in the input field, and nothing is logged that you didn't add yourself.
AI reflections are a Pro feature, and they are off until you turn them on. When they are on, and only then, the words of a check-in — the things you saw, felt, heard, smelled and tasted, any wheel-of-life notes, your one-line highlight, and the two anxiety numbers — are sent to Anthropic (the makers of Claude) to write a short reflection, and a small suggestion for something to try, back to you. A trimmed few lines from your recent check-ins ride along as context, and the same lines are what the habit ideas on your Today screen are drawn from. Your name and email are not sent, nothing is stored there for training, and none of this happens in local-only mode or while the feature is off. You can turn it off any time, and the app goes back to the reflections it writes on your device.
GDPR gives you rights; the app tries to make them buttons rather than letters to a lawyer.
· See and take your data: your data → export gives you the
complete journal as a file (that is also portability)
· Restore it: the same sheet imports it back, on any device
· Erase it: "delete everything" wipes this device, the cloud
copy, and your sign-in account, immediately and permanently
· Withdraw consent: sign out, and nothing syncs anymore
· Complain: to the Lithuanian data protection authority (vdai.lrv.lt)
or your own country's, though we would appreciate an email first
For reliability the database is backed up daily, and each backup is kept for 7 days. Deletion is immediate in the live database; a deleted journal falls out of the last backup within 7 days, after which it exists nowhere.
Data controller: Lukas Visockas · lvisockas@gmail.com
Processor: Google Cloud EMEA (Firebase: Authentication, Firestore, App Check),
under Google Cloud's data processing terms, EU region as above.
Retention: until you delete it. No account activity requirement, no expiry.
Children: the app is not directed at children under 16.
Changes: this page is versioned and dated at the top; meaningful changes will
be visible in the app before they apply to you. The full history lives in the
open source repo, where
you can also read the code that does everything described here.