what we keep, and what we’d never do.

what we collect

Only what the product needs to work:

• your email and a password — the password is stored hashed (bcrypt), so even we can never read it.
• your pseudonym — the only name this place knows you by in public.
• your entries: the words you write, an optional title, and the mood you tag a day with.
• the quiet signals between writers — the acknowledgmentsyou leave (“I felt this”) and the letters you send and receive.
• a few preferences — your reminder time, your chosen binding, your time zone, and the countrywe derive from your IP at sign-in (used only for the “written from” line on your letters, and only if you leave that on).
• if an entry is flagged — by a reader, or by the automatic crisis check below — we store a small report: which entry, the reason, and who reported it (if a person did), so a human can review it.

what we never do

• no advertising, ever — and so no ad trackers, no pixels.
• no third-party analytics watching how you read or write.
• we never sell your data, and we never share it to market to you.
• we never train AI on your words — no entry, letter, or note is ever fed to a model.
• we never show your real name, your email, your exact location, or your IP to anyone — those never leave our server.

who can see what

Private entries and drafts: only you.They are never sent to another person’s browser. Published entries can be read by strangers — but signed by your pseudonym alone. The letters you send arrive without your name on them; even the person you write to never learns who you are. Acknowledgments are stored but never counted in public — there is no like-count to see. The country you write from shows on your published letters only if you leave that on in settings — never a city, never an address.

the quiet safety check

Because people write their hardest days here, when a day is saved your words pass through a small, local keyword check for language that signals a crisis — no AI model, no outside service, just patterns matched on our own server. If something matches, we file a quiet report for a human to look at and gently offer you a helpline. We never block, alter, or refuse to save what you wrote because of it.

where your data lives

Everything is stored in a managed PostgreSQL database (Supabase) and travels encrypted in transitover HTTPS. Access is limited to what’s needed to run the product.

the honest delete

When you delete your account from settings, we verify it’s you and then erase it — your entries, drafts, moods, acknowledgments, and letters are removed permanently. No soft-delete, no 30-day limbo, no “we’ll keep it for product improvement.” Gone means gone. The only thing that can outlive your account is a moderation report someone already filed about a specific entry — and even then, your identity on it is erased.

if the law compels us

We would hand over data only under a valid legal order, and only the specific data that order requires — never more, and never voluntarily.

questions

Write to us at info.premjasuja@gmail.com. A person reads it.