Privacy Policy

Your privacy matters. This policy explains what data AI Diary collects, how we use it, and the controls you have.

1. Data We Collect

• Account data: name, email address, hashed password, OAuth provider identifier.
• User Content: diary entries, tasks, calendar events, and uploaded media files.
• Usage data: page views, feature interactions, error logs (no keystroke logging).
• Device data: IP address, browser type, operating system, and timezone — collected automatically when you use the Service.

2. How We Use Your Data

• To provide and improve the Service.
• To send AI-generated nudges and insights derived from your entries.
• To authenticate your identity and keep your account secure.
• To respond to support requests.
• To comply with legal obligations.

3. Third-Party AI Processors

We use OpenAI (GPT-4o-mini) to generate diary nudges and text-embedding-3-small for semantic search. Relevant excerpts of your entries are transmitted to OpenAI solely to fulfil these features. OpenAI's data processing is governed by their Privacy Policy. We do not permit OpenAI to train on your data.

4. Data Storage & Security

Your data is stored in Cloudflare D1 (SQLite) and R2 (object storage) within Cloudflare's infrastructure. We use HTTPS for all data in transit and AES-256 encryption at rest. Access is restricted to authorised personnel on a need-to-know basis.

5. Data Retention

We retain your data for as long as your account is active. If you delete your account, all User Content is permanently deleted within 30 days. Anonymised analytics may be retained longer.

6. Your Rights

• Access: Request a copy of your personal data.
• Correction: Update inaccurate data via your profile.
• Deletion: Delete your account and all associated data.
• Portability: Request an export of your diary entries in JSON format.
• Objection: Object to processing based on legitimate interests.

To exercise any of these rights, email support@ai-diary.app.

7. Cookies

We use session cookies and local storage tokens for authentication. See our Cookie Policy for full details.

8. Children's Privacy

The Service is not directed to children under 13. If we become aware that we have inadvertently collected personal data from a child under 13, we will delete it promptly.

9. Changes to This Policy

We may update this policy periodically. We will notify you of material changes via email or in-app notification.

10. Contact

Privacy questions? Contact us at support@ai-diary.app.