Security & Privacy
Where your writing lives matters. Your on-device journal, cloud backups, and AI reflection use different protections. Here is how to understand those differences.
On your device
Journal entries are encrypted on your phone. On iOS, new journal entries use AES-256-GCM and a key stored in the device Keychain. This protection is separate from the encryption used for a cloud backup.
Your account profile and preferences are separate from journal content. Some account information is stored on our servers so your account and settings can follow you. Not every item of app data is encrypted in the same way as a journal entry.
Vault sync and backup
Premium Vault sync stores encrypted journal and conversation copies on our servers for restore across devices. There are two different ways to manage the key.
Standard mode
The server manages the encryption key. Backups are encrypted in transit and at rest, but our systems are technically capable of decrypting them. Standard mode is not a promise that only you hold the key.
Privacy Mode
The key is derived from your own passphrase and is not sent to the server. We cannot decrypt these Vault backups for you. Keep your passphrase and recovery key safe. Availability and setup depend on your installed app version.
When you use AI reflection
Your entry and relevant session context are sent over an encrypted connection to our server and an AI provider to generate a response. This is different from storing an encrypted backup. Vault Privacy Mode does not prevent the words you submit for reflection from being processed by those services.
Voice and other AI features also involve service providers. The Privacy Policy explains the providers, what is sent, and the processing and retention practices.
Web journaling, iCloud, and exports
Web journaling is in beta and uses server infrastructure and Vault storage. It is not an on-device-only journal. The Vault mode you use matters for who holds the key.
If you use an iCloud backup, it is held in your Apple account under Apple's terms. Our Privacy Policy notes that the app's legacy iCloud backup protection differs from the current on-device encryption and Vault Privacy Mode. Do not assume all backup methods provide the same protection.
Exports, migration codes, and shared reports may give access to private writing. Keep them private and check what is included before sending them to anyone.
Your choices and questions
Uninstalling the app does not delete your server-held account or Vault data. Use the in-app account-deletion option or email privacy@seen.place for account and privacy requests. Manage any iCloud copies separately through Apple.
For the complete account of data handling, read the Privacy Policy. If you need help understanding a backup or recovery option, ask before resetting a device or removing the app.