JotalyzeTM (“Jotalyze,” “we,” “our,” or “us”) is a privacy-focused journaling app. This Privacy Policy explains what information is stored, what is transmitted off-device, and how optional features such as iCloud Sync work.
If you have questions, contact: jotalyze@outlook.com
1. Core Privacy Model
Your journal entries are primarily stored locally on your device.
Jotalyze does not maintain a central cloud database of your journal entries for general browsing, searching, reading, or review by us.
Limited technical and subscription-related records may still be processed by service providers to operate app functionality, security controls, and premium entitlement checks.
Most journal content remains only:
- on your device, or
- in your private Apple iCloud / CloudKit storage if you choose to enable iCloud Sync.
2. Information Stored on Your Device
Jotalyze stores journal-related content locally on your device, including as applicable:
- journal text
- mood selections and mood words
- entry titles
- entry dates and timestamps
- attached images
- generated thumbnails
- locally generated analytics and insights
- local app preferences, including appearance settings, reminders, and app configuration
This data is stored using Apple platform storage mechanisms on your device.
3. Optional iCloud Sync
If you enable iCloud Sync, Jotalyze syncs your journal data using Apple CloudKit in your private iCloud database.
This may include:
- journal entry content
- associated metadata
- attached images
- thumbnails
- record identifiers needed for sync
Jotalyze does not operate its own server-side journal database for this synced content. Apple provides the CloudKit infrastructure.
Turning off iCloud Sync stops future syncing from the app. It does not automatically delete data already stored in your private iCloud account. That synced data remains in your private iCloud storage unless it is later removed through app deletion behavior, CloudKit sync behavior, or deletion of the underlying entries.
4. Firebase Anonymous Authentication and Abuse Prevention
Jotalyze uses Firebase services to support account security and to reduce abuse.
This includes anonymous authentication and app integrity / abuse-prevention mechanisms.
Firebase may process:
- a pseudonymous anonymous user identifier
- technical request metadata
- device or integrity-related signals
- service logs needed for abuse prevention, rate limiting, and operational security
This anonymous identifier is a technical account identifier. By itself, it does not include your name or email address.
We use Firebase for:
- anonymous authentication
- rate limiting
- abuse prevention
- backend protection for service requests
These limits may be adjusted over time for security, reliability, and operational needs.
We do not use Firebase data for advertising or sale of personal data.
5. On-Device Insights and Analytics
Jotalyze generates many analytics and insights locally on your device, including writing analytics, mood trends, and other journal-related summaries.
These outputs, including recurring keyword or theme insights, are automated heuristic summaries and may be inaccurate, incomplete, or out of context.
These features are intended to run on-device where possible.
When a feature is described as on-device, that means the processing happens locally in the app and the underlying journal content is not transmitted off-device unless you separately choose a feature that requires transmission, such as iCloud Sync.
6. Camera, Photos, and Text Scanning
If you choose to use image or scanning features, Jotalyze may request access to:
- your camera
- your photo library
If you use text scanning, the scanned text is processed on your device and inserted into your entry locally. Jotalyze does not receive that scanned text from your device.
That text only leaves your device if you later:
- enable iCloud Sync for the entry
7. Notifications
If you enable reminders, Jotalyze stores your reminder preferences locally and uses Apple notification frameworks to deliver reminders.
These may include:
- local notification scheduling
- optional silent remote notifications used to support iCloud sync updates if iCloud Sync is enabled
Jotalyze does not use notifications for advertising.
8. Journal Lock and Biometrics
If you enable Journal Lock, Jotalyze uses Apple device authentication APIs such as:
- Face ID
- Touch ID
- device passcode authentication
Jotalyze does not receive or store your biometric data. Authentication is handled by Apple and your device operating system.
9. Purchases and Premium Features
If you purchase premium features or subscriptions, payment processing is handled by Apple through the App Store.
Jotalyze does not receive your full payment card information.
Apple may provide limited transaction or entitlement information needed to determine whether premium access should be enabled.
Jotalyze may use RevenueCat to manage subscription status, entitlements, and purchase restoration workflows.
RevenueCat may process limited purchase and entitlement metadata needed to determine premium access status.
10. What Jotalyze Does Not Do
Jotalyze does not:
- keep a central server copy of your journal entries for us to read
- sell your journal data
- use your journal entries for advertising
- transmit your journal entries off-device except when you enable a feature that requires it, such as iCloud Sync
- receive your biometric data
11. When Information Is Shared
Because Jotalyze does not maintain a central server copy of your journal entries, we generally do not possess your journal content in a way that would allow us to review or disclose it ourselves.
However, information may be processed by third-party providers when you use specific features:
Apple
- local device services
- iCloud / CloudKit sync
- notifications
- device authentication
- App Store purchases
Firebase
- anonymous authentication
- backend request handling
- abuse prevention
- app integrity protection
RevenueCat
- subscription status and entitlement management
- purchase restoration support
- billing-state related metadata processing
We may also disclose information when required by applicable law, lawful process, or to protect the rights, safety, and security of users, providers, or the public.
Each provider processes data under its own infrastructure and policies.
12. Data Retention
Jotalyze follows data-minimization principles and retains personal data only as long as reasonably necessary for the purposes described in this Policy, unless a longer period is required by law, accounting requirements, fraud prevention, or dispute resolution.
Local device data
- remains on your device until you delete it or remove the app/data
iCloud Sync data
- if iCloud Sync is enabled, synced data may remain in your private iCloud storage until removed through deletion or CloudKit sync behavior
Firebase anonymous authentication / security data
- technical and security-related records may be retained according to Firebase's operational policies
RevenueCat subscription and entitlement data
- purchase and entitlement-related records may be retained according to RevenueCat's operational policies
13. Security
Jotalyze uses platform and provider security features appropriate to the app's design, including:
- Apple device storage protections
- optional device authentication
- Firebase App Check / integrity protections
- Apple CloudKit private database architecture when sync is enabled
No system can guarantee absolute security.
14. Your Choices
You can choose to:
- keep your journal local by not enabling iCloud Sync
- disable iCloud Sync
- deny camera or photo access
- deny notification permissions
- enable or disable Journal Lock
- delete entries from your device
15. Your Rights
Depending on your location, you may have privacy rights regarding personal data, including the right to request access, correction, deletion, and information about how your data is processed.
In the preceding 12 months, we have collected or received the following categories of personal information as applicable:
- identifiers and account-related data (for example pseudonymous Firebase identifiers and subscription entitlement identifiers)
- journal and content data you create in the app
- purchase and entitlement data from Apple and RevenueCat
- device, integrity, and security-related metadata
We collect this data from you, your device, Apple platform services, Firebase services, and RevenueCat services to provide app features, maintain security, prevent abuse, operate subscriptions, and meet legal obligations.
We do not sell personal information and do not share personal information for cross-context behavioral advertising.
Because most journal content is stored locally on your device or in your private Apple iCloud environment, the scope of any request may depend on what data Jotalyze or its providers actually process and control.
To submit a privacy request, contact us at the email below with sufficient detail for verification and response.
We may verify requests using information reasonably necessary to confirm identity and authority, and we will not discriminate for exercising applicable privacy rights.
Authorized agents may submit requests on your behalf where permitted by law and subject to verification of agency authority.
For privacy inquiries, contact:
16. Do Not Track Signals
Some web browsers offer a “Do Not Track” setting. Because there is no universally accepted standard for DNT signals, this website does not currently respond to browser DNT mechanisms.
Jotalyze does not use your personal information for cross-context behavioral advertising.
17. Children
Jotalyze is not directed to children under 9.
18. Changes to This Policy
We may update this Privacy Policy from time to time. If we do, the updated version will be reflected by a new Effective Date.
19. Contact
Privacy questions: