Privacy Policy & Data Protection

• Account Information: When you sign in using Google OAuth or Email, I store your email address and display name for account authentication.

• Journal Entries & Cognitive Graph Data: The text of journal entries you save and the extracted cognitive concepts (Values, Beliefs, Emotions, Behaviors) used to construct your personal graph.

• Minimal product signals: To understand whether the product is useful, I record a small allow-listed set of events such as activation, evidence review, correction, carrying a question, weekly review, and return milestones. Only bounded actions, counts, and timestamps are kept; events contain no journal text, excerpts, prompts, labels, or interpretations. Raw event records expire after 90 days and are removed by a routine purge; they are not used for advertising or commercial profiling.

• AI operation metrics: To control reliability and cost, the system may record provider and model identifiers, a normalized status and error category, latency, input/output token counts, and an estimated cost when server-side rates are configured. These metrics contain no prompts, journal text, excerpts, labels, interpretations, raw errors, or secrets.

Cloud infrastructure providers: I use third-party services for account authentication, application-data storage, and platform operations. These providers process the data needed to deliver and protect the service.

OpenAI API: When you request analysis, relevant journal content is sent to the OpenAI API to generate groups and connections. OpenAI states that API data is not used to train its models unless the customer explicitly opts in. Insight You disables response-state storage; default abuse-monitoring logs may still contain content and be retained for up to 30 days unless longer retention is legally required. Read OpenAI's data controls.

Google Gemini API: If OpenAI has a retryable temporary failure, Insight You may send the same relevant content to the paid Gemini API service to complete the analysis. Under Google's paid-service terms, prompts and responses are not used to improve Google's products; Google may still retain them for a limited period for abuse detection, safety, and required legal disclosures. Read Google's terms.

Retention and processing region: Paid Gemini API prompts and responses are not used to improve Google's products. This project's logging is currently configured to retain logs for up to 55 days; Google may also retain prompts and responses for a limited period for abuse prevention, safety, and legal compliance. Transient or cached data may be stored in any country where Google or its agents maintain facilities. Vietnam is currently listed as a supported Gemini API region, but that does not promise that data is processed only in Vietnam.