The short version

Open the app, journal, close the app — nothing leaves your phone.
The only time anything leaves your phone is when you turn on Cloud Sync to share entries with a clinician.
You can leave Cloud Sync at any time, and the app guides you through removing the data we hold.

What happens when you enable Cloud Sync

1 You write an entry — it is stored locally on your iPhone.

2 If Cloud Sync is on, a snapshot is encrypted by Evervault before it ever reaches our database.

3 The encrypted snapshot is stored in Supabase under your account.

4 It is decrypted only inside Evervault, only when your connected clinician requests it.

We never store your entries as readable text on our servers.

What we store, and why

Data	Where it lives	Lifetime
Your entries	On your iPhone	Until you delete them or uninstall
Encrypted snapshot of shared entries	Supabase (server)	Until you delete it or leave Cloud Sync
Account details	Clerk (server)	Until you delete your account
Therapist connection records	Our backend	Until the connection is revoked

We do not store your location, contacts, photos, advertising IDs, or behavioural tracking, and we do not run third-party analytics that profile you.

Who can see what

You — every entry, on your device.
A clinician you connected — only the entries you chose to share, and only while the connection is active. Disconnecting removes their access.
WhereIsMyMind staff — operational details only (that an account or snapshot exists). Staff cannot read the content of your entries.
Nobody else.

Leaving cleanly

1 Revoke every active therapist connection.

2 Delete the encrypted snapshot from our database.

3 Choose whether to delete your account or keep it for a faster return.

If anything fails during this process, the app surfaces the error and lets you retry.

Your rights at a glance

See what we have — email adiklyne@gmail.com and we will respond within one calendar month.
Correct something — edit your entry on device, or email us.
Delete cloud data — leave Cloud Sync in-app, or email us.
Take your data with you — use the in-app Export feature (JSON) any time.

When something goes wrong

If we discover a security incident affecting your data, we will contain it, notify the relevant authority where the law requires, and tell you if it is likely to put your rights at high risk. If you spot something that looks like a vulnerability, please report it to adiklyne@gmail.com.

If anything here is unclear, email adiklyne@gmail.com and we will explain it. See also our Privacy Policy and Terms of Service.