Privacy Policy

• Entries, photos, moods, tags, place names and the weather you type are stored only on your device, in an encrypted database (256-bit ChaCha20-Poly1305, SQLite3MultipleCiphers). The key is created on your phone and kept in the Android Keystore.
• Photos you add are copied into that encrypted database. The app opens only the photos you pick, and the camera only when you choose "Take a photo".
• Nothing you write is sent to us or to anyone else. Android cloud backup and device-to-device transfer are turned off for the app.
• Your journal leaves the phone only when you choose: an encrypted backup file (protected by a password you choose, which we never see and cannot recover), or a PDF or Markdown export. You decide where those files go. Temporary copies made for the share sheet are deleted the next time the app starts.

• When you speak an entry, the audio is recorded and turned into text on your phone by an on-device speech model. The recording is deleted right after. Audio is never uploaded.
• The first time you use voice entries, the app downloads the speech model (about 60 MB) from the public whisper.cpp model repository on Hugging Face. Like any download, this reveals your IP address to that host. No journal content or personal data is sent.
• The microphone permission is used only while you record a voice entry.

• Your PIN is stored only as a salted, stretched hash in the Android Keystore. Fingerprint and face unlock are handled by Android; the app never receives biometric data.
• "Hide in recent apps" blocks screenshots and blanks the app preview in the app switcher.

• If you switch on the daily reminder, the app schedules a local notification on your phone. Its text is general ("A minute for your journal?") and never shows what you wrote. Nothing is sent to a server.

• The free version shows ads from Google AdMob: a banner on the journal list, an occasional full-screen ad after you finish an entry (never while you write), and optional rewarded ads you choose to watch for a 24-hour pass. Your entries are never shown to or shared with the ad network.
• Before any ad is requested, users in the EEA, UK and Switzerland are asked for consent through Google's consent form. You can change your choice any time in Settings > Ad privacy choices.
• The app does not use the Android advertising ID (the permission is removed). Google may still collect device and usage information, such as your IP address, approximate location derived from it, and ad interactions, to show ads, measure them and prevent fraud. See https://policies.google.com/technologies/ads
• DearMind Plus subscribers see no ads, and the app makes no ad requests for them.

• Subscriptions are processed by Google Play. We do not receive your payment details; the app only learns whether your subscription is active.

• DearMind is for teens and adults (13+). It is not directed at children under 13.

• Delete any entry in the app. Uninstalling the app deletes the whole journal from your phone.
• Because we never hold your journal, there is nothing for us to delete on our side.

We will update this page if the app changes how it handles information, and change the date above.

[email protected]