thoughts
- Your data trains their AI only if you opt in.
- Your data is used for personalized ads, including by third-party ad companies.
- Data is shared only with the providers who run the service.
- The documents do not say who can read your content.
Journal content, voice, and ads IDs are collected; their model training is opt-in, but sharing and retention are vague.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Account info, journals, photos, videos, voice, device IDs, ads IDs, and sometimes location and contacts.
Read the exact line
Privacy policy
“Journal Data, such as journal entries, photos, images, music, videos, comments, questions, messages, works of authorship, and other content or information that you record, generate, transmit, or otherwise make available on the Service”
Training
They run the app, personalize it, market to you, and train models on journal data only if you opt in.
Read the exact line
Privacy policy
“We will only use your and Journal Data for analytical purposes and to train machine learning models if you have opted in to such processing through the Services.”
Sharing
Service providers and AI companies like OpenAI, Anthropic, and Hume can get your information.
Read the exact line
Privacy policy
“We may also share your personal information with third-party generative AI providers, including OpenAI, Anthropic, and Hume.”
Kept
They do not say how long they keep it; they may delete, , or isolate it when they no longer need it.
Read the exact line
Privacy policy
“When we no longer require the personal information we have collected about you, we may either delete it, it, or isolate it from further processing.”
Controls
You can update some account info, delete some content, and must contact them to close your account.
Read the exact line
Privacy policy
“You can choose to delete certain content through your account. If you wish to request to close your account, please contact us.”
Fine print
They can change the privacy rules by posting them; keeping using the app means you accept. No terms of service were provided.
Read the exact line
Privacy policy
“In all cases, your use of the Service after the effective date of any modified Privacy Policy indicates your acknowledging that the modified Privacy Policy applies to your interactions with the Service and our business.”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Do not opt in to journal training
Through the Services (opt-in described in the privacy policy)
Delete content you can in the account
Your account on the Service
Ask them to close your account
Contact us (as stated in Delete your content or close your account)
Turn off location and reject cookies in browser or device settings
Mobile device settings for location; browser settings for cookies
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
Voice in recordings can be kept and shared the same way as other personal data.
Read the exact line
Privacy policy
“Recordings may capture your voice and may be used and shared as described herein or as otherwise disclosed to you prior to such recording.”
For example, a voice note in your journal could be sent to an AI provider they use.
They collect advertising IDs and other device tracking data, not just what the journal needs.
Read the exact line
Privacy policy
“unique identifiers (including identifiers used for advertising purposes), language settings, mobile device carrier, radio/network information (e.g., Wi-Fi, LTE, 3G), and general location information”
For example, an ad ID on your phone can be logged even if you only wanted to write a diary.
Your information can go to outside AI companies that power the product.
Read the exact line
Privacy policy
“We may also share your personal information with third-party generative AI providers, including OpenAI, Anthropic, and Hume.”
For example, a private journal entry might be processed by OpenAI’s systems.
If you type health, religion, or similar details into the journal, they treat that as consent to process it.
Read the exact line
Privacy policy
“If you provide us with any sensitive personal information to us when you use the Service (e.g., social security numbers, information related to racial or ethnic origin, political opinions, religion or other beliefs, health, criminal background), you consent to our processing”
For example, writing about a medical appointment in a journal counts as agreeing they can process that health information.
Inviting friends can mean they collect those people’s contact details.
Read the exact line
Privacy policy
“We may offer features that help users invite their friends or contacts to use the Service, and we may collect contact details about these invitees”
For example, if you invite a friend by email, they store that friend’s email.
Outside AI vendors are not supposed to train on data that still identifies you.
Read the exact line
Privacy policy
“We do not allow our generative AI service providers to train their AI models and algorithms on your identifiable personal information.”
For example, OpenAI should not use your named journal text to train ChatGPT.
Their own training on journal data is off unless you turn it on.
Read the exact line
Privacy policy
“We will only use your and Journal Data for analytical purposes and to train machine learning models if you have opted in to such processing through the Services.”
For example, they should not train on your diary unless you opted in in the app.
There is no simple in-app account deletion; you have to ask them.
Read the exact line
Privacy policy
“If you wish to request to close your account, please contact us.”
For example, you email support and wait for them to close the account.
Browser Do Not Track settings will not stop their tracking.
Read the exact line
Privacy policy
“We currently do not respond to “Do Not Track” signals.”
For example, turning on DNT in Chrome will not change how they log you.
They say kids under 13 should not use it, but it is only a stated age, not a strong age check.
Read the exact line
Privacy policy
“The Service is not intended for use by anyone under 13 years of age.”
For example, a 12-year-old could still sign up if they type an older birthday.
Words to know
Legal words from the lines above, in plain English.
- de-identified
- Data with your name and obvious identifiers removed, though it can sometimes still be traced back to you. For example, your chats with names stripped out may still be kept and studied after you delete your account.
- model training
- Using your content and conversations as examples to teach an AI system, which can then echo them in future answers. For example, a story you write in a chatbot may be studied by the company to make the next version of the bot.
- opt in
- Something is off until you actively say yes to it. For example, marketing emails that only start after you tick a box are opt in.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- third parties
- Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
- device identifiers
- Codes that single out your phone or computer, used to recognise you across apps and sites. For example, the advertising ID on your phone lets two unrelated apps know they are seeing the same person.
- sensitive personal information
- Data that could hurt you if exposed, like health, religion, sexuality, race, exact location or bank details. For example, telling a chatbot about a medical condition creates sensitive data that some laws protect more strictly.
- consent
- Your clear agreement to something, given by an action like ticking a box or tapping Accept. For example, a pop-up asking if the app may use your location is asking for consent.
- service providers
- Outside companies that handle your data on the app's instructions, such as a cloud host or an email sender. For example, the company that stores the app's files in the cloud sees your data but only does what the app tells it.
How we got here · grade C · score 43/100 · 15 of 15 policy answers backed by a verified quote · 6 not stated
What does the app collect beyond what it needs to work?
They collect journals, photos, videos, profile, payment, device and advertising IDs, optional location, and contacts of people you invite.
Does it record your voice, face or body, and what happens to that?
Recordings may capture your voice and can be used and shared as described in the policy, including with AI providers.
Are your chats and uploads used to train AI models, and is that off by default?
They say they train on anonymized journal data only if you opt in in the service, and AI vendors may not train on identifiable data.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
They collect advertising identifiers and use third-party cookies and business partners for automatic logging.
Do they sell or share your data, and can you opt out?
They list sharing with service providers, generative AI providers, payment processors, advisors, and in corporate deals, not an open sale.
What rights do they take over what you type and what the AI makes?
Not stated in the documents.
How long do they keep your data after you delete it, and can you delete it in the app?
You can delete some content in the account; closing the account requires contacting them. No set deletion timeline.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
Not stated in the documents.
Do they commit to basic security, and have they leaked data?
They say they use technical, organizational, and physical safeguards but cannot guarantee security.
Is there a real age gate, and are teens protected?
The service is not intended for anyone under 13; there is no described age-proofing.
Will they tell you when the rules change, and is the policy specific?
They may change the policy by posting it; using the service after that means you accept. No policy date is shown.
Can they close your account without warning, and can you get your data out first?
Not stated in the documents.
If something goes wrong, who pays?
Not stated in the documents.
Do subscriptions renew on their own, and can you get a refund?
Not stated in the documents.
The privacy policy is 2,957 words at a professional or legal expert level (Flesch reading ease 27.2).
