Effective Date: August 8, 2026
By downloading, installing, or using WhisprJournal, you agree to this Privacy Policy. If you do not agree, do not use the App.
Account information: When you create an account, we collect your email address and a password (stored in encrypted form). We do not collect your full name unless you voluntarily provide it.
Voice entries and AI-generated insights — what we collect, how, and why: When you tap the microphone to record a voice journal entry, the App captures your voice through your device's microphone. Before the App ever sends anything to a third-party AI service — whether that's your first voice recording, or your first time opening a feature like Weekly Report, Monthly Report, My Plan, or your Nervous System Profile — it shows you a dedicated consent screen explaining this in plain language and requires you to affirmatively tap "I Agree" first. This consent is not assumed, pre-checked, or buried in onboarding text, and it gates every one of these features independently at the moment each is first used. Once you've agreed, the App sends data to OpenAI, a third-party AI provider, for the following purposes:
OpenAI processes this data and does not retain your audio after transcription is complete (per their API data usage policy). OpenAI provides the same or equal protection of your data as stated in this Privacy Policy, and does not use your data to train its models. You can revoke this consent at any time in the App under Settings → Privacy & Security → "AI voice processing" — doing so blocks all of the AI features listed above until you agree again; text journaling and all core journaling features never require OpenAI and remain fully available either way. Voice audio recordings are never stored anywhere — including on our servers. The raw audio exists only transiently on your device while it's being transcribed, and is deleted from your device immediately afterward, whether or not the upload/transcription succeeded.
Journal content — stored locally only: As of August 2026, journal entries and any AI-generated analysis, reports, or insights are stored only on your device, encrypted using AES-256-GCM, and are never uploaded to our servers or any other server. The encryption key (Master Encryption Key) exists only in your device's memory while the App is active and is never transmitted anywhere or stored in plaintext. Opening your journal requires unlocking this key with Face ID, Touch ID, fingerprint, or your device passcode every time the App is opened, since — unlike an account password check on a server — this on-device unlock is now the only thing protecting your entries. Because nothing is stored on our servers, we have no ability to help you recover your journal if this device is lost, damaged, wiped, or replaced. The App includes an optional, user-initiated "Export backup" feature (Settings → Backup) that lets you save an encrypted backup file to a location of your choosing (Files, iCloud Drive, email to yourself, etc.); restoring a backup on a new or reinstalled App is also user-initiated ("Import backup"). We strongly encourage using this feature, but it is your responsibility — we cannot create, access, or restore a backup on your behalf, and if a device is lost without one, that journal data is gone permanently.
Usage data: We may collect anonymous, aggregated usage data such as session frequency and feature usage to improve the App. This data cannot be linked to your identity.
Device information: We may collect device type, operating system version, and app version for diagnostic and compatibility purposes.
Crash reports: If the App crashes, diagnostic data may be collected to help us identify and fix bugs. This data does not include your journal content or voice recordings.
We do not collect, receive, or store your journal entries, transcripts, or AI-generated insights in any form — encrypted or otherwise. They exist only on your device. We do not store voice recordings in any form; audio is deleted from your device right after transcription and is never uploaded to our servers. We do not sell, rent, or share your personal data with third parties for advertising purposes. We do not use your emotional or health data for profiling, targeting, or any commercial purpose beyond providing the App's features to you.
We use the information we collect to: provide, maintain, and improve the App; authenticate your identity and secure your account; deliver AI-generated responses and nervous system regulation suggestions; send optional push notifications you have opted into; process subscription payments through our payment provider; and respond to support requests.
WhisprJournal stores journal entries and AI-generated analysis exclusively on your device — this data is never synced to, uploaded to, or stored on our servers or any third party's servers. Content is encrypted on your device (AES-256-GCM) using a key derived from your credentials and held only in your device's memory while the App is open. We do not have access to your encryption key and never receive your journal content at all, so we cannot read, access, or decrypt your journal entries under any circumstance, including if legally compelled to do so — the data simply isn't in our possession.
Because your journal lives only on your device, you are solely responsible for keeping access to it: this means keeping the App installed, being able to pass its biometric/passcode unlock, and — most importantly — using the in-App "Export backup" feature (Settings → Backup) if you want a way to recover your entries after losing, wiping, or replacing your device, or moving to a new one. We cannot recover journal content for you under any circumstances, since we never had a copy to begin with.
We use the following third-party services to operate the App. Each has its own privacy policy governing their data practices:
Supabase (supabase.com): We use Supabase to manage user authentication (your account email and encrypted password/wrapped encryption key material) and subscription status. As of August 2026, Supabase does not store your journal entries, voice recordings, transcripts, or AI-generated insights in any form — that content lives only on your device (see Section 3).
OpenAI (openai.com): With your explicit, affirmative consent (collected via an in-app consent screen before any of the AI features described in Section 1.1 are first used), your voice recordings are sent to OpenAI's Whisper API for transcription, and transcript summaries and pattern data are sent to GPT-4o-mini for nervous-system state analysis, reflection generation, Weekly/Monthly Report generation, personalized plan generation, and Nervous System Profile insight generation. OpenAI's data retention policies apply to data sent through their API (audio is not retained after transcription completes), and OpenAI provides the same or equal protection of your data as stated in this Privacy Policy. We do not send identifying information alongside your data. You may withdraw this consent at any time in Settings → Privacy & Security.
RevenueCat (revenuecat.com): We use RevenueCat to manage in-app subscriptions. RevenueCat may collect purchase history and subscription status. We do not share your journal content with RevenueCat.
ElevenLabs (elevenlabs.io): Pre-recorded audio guidance files in the App were produced using ElevenLabs text-to-speech technology. ElevenLabs does not receive any data from App users at runtime.
Google AdMob (admob.google.com): We display advertisements through Google AdMob to support the free tier of the App. On iOS, the App asks for your permission via Apple's App Tracking Transparency prompt before requesting personalized ads; if you decline, only non-personalized ads are requested. AdMob may collect device identifiers and usage data for ad personalization, subject to your choice in that prompt (iOS) or your device's ad tracking settings (Android). We restrict ad content categories to exclude alcohol, dating, gambling, and sensitive health topics, and ads are never shown alongside your journal content itself.
Journal entries (local, on-device): Journal entries and AI-generated analysis are stored only on your device and are automatically deleted from your device after 1 year. This local retention limit exists to keep the App from accumulating data indefinitely on your phone; it is not a server-side deletion, because there is no server-side copy to delete. If you'd like to keep entries longer than a year, use "Export backup" (Settings → Backup) before they age out. Deleting an entry yourself in the App, or the App's own 1-year auto-delete, removes it permanently from your device — there is no server copy to also remove.
Account data (servers): We retain your account data (email, authentication/encryption-key material, subscription status) for as long as your account is active. You may request deletion of your account and all associated data at any time by contacting us at the address below. Upon deletion, your account data will be permanently removed from our servers within 30 days.
WhisprJournal is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us immediately and we will take steps to delete that information.
Depending on your location, you may have the right to access, correct, or delete your personal information; object to or restrict certain processing; and request a copy of your data in a portable format. To exercise these rights, contact us at the email below.
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the Effective Date.
Selece Ann Reeves
1522 Dumaine Street
New Orleans, Louisiana 70116
Email: selece.reeves@whisprjournal.com