A space that respects your privacy.
Updated: October 19, 2026
Two privacy levels
Standard protection allows simple Google sign-in. User data is isolated and the admin dashboard cannot read journals. Infrastructure operators can nevertheless access standard-mode data. Enhanced protection is optional, in Preferences → Privacy.
When you enable enhanced protection
Your existing journal, titles and moods, measurements, meals, pantry, grocery lists, personal links, preferences and progress are encrypted in your browser, as are subsequent saves. The plaintext copy is removed from the active database in the same transaction as the encrypted save. The administrator does not have your key. Historical backups and provider logs are not retroactively encrypted.
Passkey and recovery
A compatible passkey can unlock data using Touch ID, Face ID or your device PIN. Compatibility is checked before activation. A passphrase is available as an alternative and remains supported for existing vaults. Keep the recovery code separately. Without your unlocking method or this code, we cannot recover the content. Google alone cannot decrypt protected data. Reloading locks a protected workspace.
What remains visible
The platform retains the Google email needed for access, invitations, account status, circle memberships and technical information such as request times and vault size. The administrator can manage access without reading encrypted content. Google handles sign-in; Vercel hosts the application and Supabase provides authentication and the database.
Your circles
Joining a circle requires your acceptance. No journal, weight, meal or progress is automatically posted. You choose and preview each shared encouragement or milestone. Shared messages are visible to circle members and stored separately, without encryption by your personal key. Infrastructure operators can therefore access them. Leaving removes your messages from the application, but not copies already retained by recipients.
AI, backups and exports
In standard mode, you can ask AI to correct or improve a selected passage. Only that passage is sent through Vercel AI Gateway to a provider filtered for zero retention and no training. Changes are proposed within the page and require your acceptance. When enhanced protection is active, this assistance is disabled and vault content is not sent to AI. You can download an encrypted vault backup and restore it with your secret. Protect decrypted PDFs and downloaded recovery codes yourself. Backups from before this version are not automatically encrypted; their retirement or protection requires separate handling.
Limits of this protection
Encryption protects content stored on the server. It does not protect an unlocked or compromised device, a malicious extension or a malicious change to application code. A web application operator controls code delivered to the browser. This is therefore not an absolute guarantee against an actively malicious operator.
Manage your information
In enhanced mode, encrypted backup is available in Preferences. You can leave circles and request access suspension or account deletion from the administrator who invited you. Suspension preserves the vault; permanent deletion must be confirmed separately. Provider-held copies also follow their retention cycle. No advertising tools are integrated.