Last Updated: September 16, 2025
Summary of Key Points
This summary provides key points from our privacy notice, but you can find out more details about any of these topics by clicking the link following each key point or by using our table of contents below.
- What personal information do we process? We process journal content and technical data. Learn more about what personal information you disclose to us.
- Do we process any sensitive personal information? We may process your journal content when you use AI features, but this is optional. Learn more about sensitive information we process.
- Do we collect any information from third parties? We do not collect any information from third parties.
- How do we process your information? We process your information to provide, improve, and administer our services. Learn more about how we process your information.
- In what situations and with which parties do we share personal information? We may share information in specific situations and with specific categories of third parties. Learn more about when and with whom we share your personal information.
- How do we keep your information safe? We have adequate organizational and technical processes and procedures in place to protect your personal information. Learn more about how we keep your information safe.
- What are your rights? Depending on where you are located geographically, you may have certain rights regarding your personal information. Learn more about your privacy rights.
- How do you exercise your rights? The easiest way to exercise your rights is by submitting a data subject access request or by contacting us. Learn more about how to exercise your rights.
Table of Contents
- What Information Do We Collect?
- How Do We Process Your Information?
- Legal Bases for Processing Your Personal Information
- Information Sharing and Disclosure
- Data Retention Policy
- Data Security Measures
- Information Collection from Minors
- Your Privacy Rights
- Do-Not-Track Controls
- United States Residents' Privacy Rights
- Other Regions' Privacy Rights
- Privacy Policy Updates
- Contact Information
- Data Access and Control
This Privacy Policy explains how Evolournal ("we," "our," or "us") collects, uses, discloses, and protects information when you use our mobile application (the "App"). We are committed to safeguarding your privacy and ensuring the confidentiality of your personal journal content.
🙏 Our Commitment to Your Privacy
Your privacy is not just an obligation to us—it's fundamental to our mission of providing a secure and private journaling experience. When you entrust us with your personal thoughts and reflections, we understand the profound responsibility that comes with that trust.
We believe transparency is essential to building a healthy relationship with our users. We are committed to providing clear and honest communication about our data practices, empowering you to make informed decisions about your information and how it's used within Evolournal.
Our core privacy principles:
- Data Minimization: We only collect the information necessary to provide and improve our services
- Purpose Limitation: Your data is only used for the specific purposes outlined in this policy
- User Control: You maintain control over your data and can access, modify, or delete it at any time
- Security First: We implement robust security measures to protect your information
- No Selling: We will never sell your personal information to third parties
1. Information We Collect
1.1 Personal Content Handling
Your personal journal content is stored in our secure cloud infrastructure when you use the App. We do not sell your content or use it for advertising.
This includes all data you create, input, or generate while using the App, such as your journal entries, personal reflections, images, and any other content you choose to store.
All personal content is stored on secure cloud infrastructure to enable synchronization, backup, and cross-device access, subject to your settings.
1.2 Technical Data We Collect
To maintain and improve the App, we may collect limited technical data, including:
- Anonymous user identifiers
- Device identifiers for crash reporting
- Purchase and subscription history
- Feature interaction and navigation patterns
- Session duration and usage frequency
- Crash reports and error logs
- Performance metrics (e.g., load times)
- Diagnostic information for troubleshooting
(Optional) With your consent, we may collect usability feedback such as handwriting input patterns for improving features.
1.3 Cloud Storage and Sync
- Your journal data is stored on secure cloud infrastructure to provide synchronization and backup.
- Storage is encrypted in transit and at rest, with least-privilege access controls to operate the Services and provide support you request.
- You can request export or deletion of your cloud-stored data (subject to reasonable backup retention).
1.4 Future AI-Assisted Features
If Evolournal introduces AI-assisted features for personal growth review:
- AI processing will be strictly opt-in and require your explicit consent.
- AI may temporarily process your journal data locally or via secure, privacy-compliant servers.
- No AI outputs will be shared with third parties, advertisers, or used for profiling.
- Details of AI data handling will be disclosed transparently before activation.
1.5 Data for AI Model Improvement (Opt-In Only)
- Off by default: We will never use your personal content for training or improving AI models without your explicit, informed consent.
- Scope: If you opt in, only the minimal data necessary for the stated purpose will be processed, using privacy-preserving techniques (e.g., de-identification where feasible).
- Transparency: We will present clear, granular choices in-app, including the ability to opt out later without losing access to the app.
- No sale or advertising use: Data used for AI model improvement will not be sold or used for targeted advertising.
2. How We Process Your Information
We use technical data only for:
- Operating and maintaining the App
- Identifying and resolving technical issues
- Improving performance and user experience
- Verifying and enabling in-app purchases
- Providing customer support upon request
We do not use your information for targeted advertising, profiling, or resale.
3. Legal Bases for Processing Your Personal Information
In short: We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e., legal basis) to do so under applicable law, like with your consent, to comply with laws, to provide you with services to enter into or fulfill our contractual obligations, to protect your rights, or to fulfill our legitimate business interests.
If you are located in the EU or UK, this section applies to you.
The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on in order to process your personal information. As such, we may rely on the following legal bases to process your personal information:
- Consent. We may process your information if you have given us permission (i.e., consent) to use your personal information for a specific purpose. You can withdraw your consent at any time.
- Performance of a Contract. We may process your personal information when we believe it is necessary to fulfill our contractual obligations to you, including providing our services or at your request prior to entering into a contract with you.
- Legitimate Interests. We may process your information when we believe it is reasonably necessary to achieve our legitimate business interests and those interests do not outweigh your interests and fundamental rights and freedoms. For example, we may process your personal information for some of the purposes described in order to:
- Develop and display personalized and relevant advertising content for our users
- Analyze how our services are used so we can improve them to engage and retain users
- Support our marketing activities
- Diagnose problems and/or prevent fraudulent activities
- Legal Obligations. We may process your information where we believe it is necessary for compliance with our legal obligations, such as to cooperate with a law enforcement body or regulatory agency, exercise or defend our legal rights, or disclose your information as evidence in litigation in which we are involved.
- Vital Interests. We may process your information where we believe it is necessary to protect your vital interests or the vital interests of a third party, such as situations involving potential threats to the safety of any person.
If you are located in Canada, this section applies to you.
We may process your information if you have given us specific permission (i.e., express consent) to use your personal information for a specific purpose, or in situations where your permission can be inferred (i.e., implied consent). You can withdraw your consent at any time.
4. Information Sharing and Disclosure
In short: We may share information in specific situations described in this section and/or with the following categories of third parties.
We may need to share your personal information in the following situations:
- Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
- Third-Party Services. We may share limited technical information with our service providers (such as Supabase for cloud sync, Firebase, or RevenueCat for subscription management) solely to operate our services.
- Legal Requirements. We may disclose your information where we are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process.
- AI Processing. When you use AI-assisted features (including Weekly Reports, Identity Renewal, Evolution Trail Reports, Inner Compass Word Clouds, Evo Today AI Summaries, and Reference Timeline Generation), we share your journal content with third-party AI service providers to deliver those features. We do not control how these third parties handle your data. You can choose not to use these AI features if you prefer to keep your data private.
- Technical Support Access. When you request technical support via email and explicitly authorize us to access your data, we may access your information solely to resolve your issue. All such access is logged and limited to the minimum necessary time.
🔒 Protection of Sensitive Journal Data
Evolournal stands firmly committed to safeguarding your sensitive journal data. We will never sell, trade, or distribute your personal journal content to third parties for advertising, marketing, or any commercial purposes.
Your journal entries, thoughts, and personal reflections are yours alone. When we do work with third-party service providers:
- Limited Access: Only essential technical data is shared, never your journal content unless you choose to use AI features
- Strict Contracts: Cloud infrastructure and payment service providers operate under strict data protection agreements
- Purpose Limitation: Data is only used for the specific service you've requested
- Your Choice: AI features are optional - you decide whether to use them
- Legal Compliance Only: We will only disclose your data if absolutely required by law
5. Data Retention Policy
In short: We keep your information for as long as necessary to fulfill the purposes outlined in this privacy notice unless otherwise required by law.
We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). No purpose in this notice will require us keeping your personal information for longer than the period of time in which users have an account with us.
Account Deletion: When you delete your account through the app, all your personal data (including journal entries, images, and account information) is permanently deleted immediately from our systems. This action cannot be undone.
6. Data Security Measures
In short: We aim to protect your personal information through a system of organizational and technical security measures.
We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our services is at your own risk. You should only access the services within a secure environment.
- Cloud Storage: Journal content is stored on secure cloud infrastructure to support synchronization and backup.
- Encryption: Data is encrypted in transit and at rest; we apply least-privilege access controls.
- Data Export: You may export your data at any time from within the App.
7. Information Collection from Minors
In short: We do not knowingly collect data from or market to children under 18 years of age.
We do not knowingly solicit data from or market to children under 18 years of age. By using the services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent's use of the services. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under age 18, please contact us at support@evolournal.com.
The App is rated 4+. We design our systems with privacy and security controls to protect children's privacy.
8. Your Privacy Rights
Depending on your jurisdiction, you may have rights under applicable data protection laws (e.g., GDPR, CCPA), including:
- Access, export, or delete your data
- Correct inaccuracies
- Restrict or object to processing
- Withdraw consent at any time
Most rights can be exercised directly in the App (e.g., deleting entries, disabling sync). For other requests, please contact us at support@evolournal.com.
9. Do-Not-Track Controls
Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this privacy notice.
10. United States Residents' Privacy Rights
In short: If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Montana, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, or Virginia, you may have the right to request access to and receive details about the personal information we maintain about you and how we have processed it, correct inaccuracies, get a copy of, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law. More information is provided below.
Categories of Personal Information We Collect
We have collected the following categories of personal information in the past twelve (12) months:
- Category A: Identifiers - Contact details, such as real name, alias, postal address, telephone or mobile contact number, unique personal identifier, online identifier, Internet Protocol address, email address, and account name
- Category B: Personal information as defined in the California Customer Records statute - Name, contact information, education, employment, employment history, and financial information
- Category C: Protected classification characteristics under state or federal law - Gender, age, date of birth, race and ethnicity, national origin, marital status, and other demographic data
- Category F: Internet or other similar network activity - Browsing history, search history, online behavior, interest data, and interactions with our and other websites, applications, systems, and advertisements
- Category H: Sensory data - Audio, electronic, visual, thermal, olfactory, or similar information
- Category K: Inferences - Inferences drawn from other personal information to create a profile or summary about, for example, an individual's preferences and characteristics
We will use and retain the collected personal information as needed to provide the services or for:
- Category A - As long as the user has an account with us
- Category B - As long as the user has an account with us
- Category C - As long as the user has an account with us
- Category F - As long as the user has an account with us
- Category H - As long as the user has an account with us
- Category K - As long as the user has an account with us
Sources of Personal Information
Learn more about the sources of personal information we collect in "What Information Do We Collect?"
How We Use and Share Personal Information
Learn more about how we use your personal information in the section, "How Do We Process Your Information?"
Will your information be shared with anyone else?
We may disclose your personal information with our service providers pursuant to a written contract between us and each service provider. Learn more about how we disclose personal information to in the section, "When and With Whom Do We Share Your Personal Information?"
11. Other Regions' Privacy Rights
In short: You may have additional rights based on the country or region in which you are located.
Australia and New Zealand
We collect and process your personal information under the obligations and conditions set by Australia's Privacy Act 1988 and New Zealand's Privacy Act 2020 (Privacy Act).
This privacy notice satisfies the notice requirements defined in both Privacy Acts, in particular: what personal information we collect from you, from which sources, for which purposes, and other recipients of your personal information.
Republic of South Africa
At any time, you have the right to request access to or correction of your personal information. You can make such a request by contacting us by using the contact details provided in the section "How Can You Contact Us About This Notice?"
12. Privacy Policy Updates
In short: Yes, we will update this notice as necessary to stay compliant with relevant laws.
We may update this privacy notice from time to time. The updated version will be indicated by an updated "Revised" date and the updated version will be effective as soon as it is accessible. If we make material changes to this privacy notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this privacy notice frequently to be informed of how we are protecting your information.
13. Contact Information
If you have questions or comments about this notice, you may email us at support@evolournal.com or contact us by post at:
Evolournal
Email: support@evolournal.com
14. Data Access and Control
In short: You may request to review, update, or delete the personal information that we have collected from you.
Based on the applicable laws of your country or state of residence in the US, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law. To request to review, update, or delete your personal information, please fill out and submit a data subject access request.
Most rights can be exercised directly in the App (e.g., deleting entries, disabling sync). For other requests, please contact us at support@evolournal.com.
← Back to Support