Privacy Policy

Last updated 2026-10-25

The short version

What we hold

Your account

Your email address and password, handled by our sign-in provider; the name you choose to display; a profile photo if you add one; your language; and your time zone.

What you tell us about your child

Their name, date of birth if you give one, the pronoun you use for them, and a photo if you add one.

All of this comes from you. Children do not use JourneyMind, do not have accounts, and nothing is ever collected from a child directly.

What you write

The text of each note, whether you typed or spoke it, the day it is about, whether you starred it, any tags you added, the prompt you were answering if you tapped one, and any photos and voice recordings attached to it.

Photos are stored as compressed copies, not the original files from your camera roll. A photo you take with the camera inside the app is also saved to your own photo library on your phone — that copy is yours and never reaches us. Voice recordings are kept as audio, so you can play them back, and the text made from them becomes the note.

What we work out from it

This is the part people don’t expect, so it is worth being exact about. To build the weekly Insights, each note is read by a language model and reduced to a short structured record: a verbatim quote from what you wrote, plus its reading of

• the kind of curiosity in it — naming, how, why, or what-if
• the feeling in it, and how strong
• whether your child was alone, alongside someone, cooperating, in conflict, or leading
• how they settled after a big feeling
• whether they gave up, asked for help, or kept going
• the kind of thinking and the skill it used
• whether the note reads as coloured by the observer — that is, by you

Over weeks that adds up to a picture of a child. We think that is the useful thing about JourneyMind, and also the thing that obliges us to say it in writing. It is a summary of your own attention, not an assessment of your child: it does not score them, does not compare them to anyone, and is not a developmental or medical judgement of any kind. See the terms for the longer version.

If you order cards

The name, address and (optional) phone number you ship to; what you ordered and what it cost; and a fixed copy of each card as it was when you checked out — its photos and words, the file we print from, and its e-card. Your card number never reaches us: it goes straight to our payment processor, Stripe.

What we don’t hold

No location. No contacts. No advertising identifiers. No analytics, anywhere: not in the app, not on this website. As with any web service, our hosts keep ordinary server logs, which include IP addresses, for operating and securing the service.

Who else touches it

These are all of them.

• Supabase — the database, the file storage for your photos and recordings, and sign-in.
• OpenAI — three things, all text or audio, never photos: transcribing voice notes; reading your notes to build Insights, which also sends your child’s first name, age and pronoun so the reading makes sense; and writing the personalised prompts. Under OpenAI’s API terms this content is not used to train their models; they retain it briefly for abuse monitoring and then delete it. Their terms, not ours, govern that, and they are at openai.com/policies.
• Stripe — takes payment when you order cards. It receives your card details directly, plus the shipping name and address and the amount, and keeps its own record of the payment under its own terms.
• Resend — sends the emails we send you, such as the one saying your cards have shipped (which includes the shipping address and tracking number), and the sign-in emails. It keeps a log of each email for 30 days.
• Railway — runs our server and this website.
• Expo — delivers updates to the app. It sees your device type, the app’s version and your IP address, nothing from your journal.
• Cloudflare — answers DNS queries for our domain.
• Zoho Mail — receives mail you send to us. When you write from the app’s “Email us”, the message starts with a few lines you can delete before sending: the app’s version and update, your phone’s system and language, and the first characters of your account number. Nothing from your journal.
• Tally — runs the waitlist form on this website. It sees what you type into that form and nothing else.

Albums and cards are made entirely on our own server, and cards are printed by us, not by an outside print shop. No part of either involves OpenAI.

Cards you share

Every card you order comes with an e-card: a web page with the same photos and words, reached through the QR code printed on the back, or a link you can send. Anyone who has the card or the link can open it, without signing in. It is not listed anywhere or shown to search engines, and the link is long and random, so it cannot be guessed — but it is shared by design, with whoever you give the card to.

You can close an e-card at any time from your orders, and the link stops working straight away. What it cannot do is reach into someone’s phone: a copy somebody already downloaded, or a printed card already in the mail, stays where it is.

Where it is, and for how long

In the United States: the database and files are stored in Ohio, and the server that reads them runs in California. OpenAI processes in the United States too. JourneyMind is offered in the United States only.

Your journal has no expiry. Nothing in it deletes itself after a year, or ever; it stays until you delete it or your account. A few things do expire on their own:

• an export file is deleted 72 hours after it is made
• a checkout you never paid for is cancelled after three days, and the card files made for it are deleted
• the purchase record kept after you delete your account is deleted after seven years (see below)

We don’t currently keep separate backups of the database, so something you delete is gone at once, not weeks later. When that changes, this page will say how long a deleted item can survive in a backup.

Children

JourneyMind is for parents. The account belongs to an adult, the writing is an adult’s, and the app is not directed to children and is not designed for them to use. We do not knowingly collect anything from a child.

What we do hold is a parent’s account of their own child, which is information about a minor and is treated as the most sensitive thing here. It is never shared with other families, never sold, and never used to advertise anything to anyone — and the only part of it that ever leaves your account is a card you chose to order and share.

What you can do

Change or delete a single entry

Edit or delete any note from the app. Deleting one erases it at once, together with its photos and recording. There is no recycle bin. If you copied the note to another child, that copy is separate and stays until you delete it too.

Delete a child

Removes everything about that child: their details, every note, photo and recording, their Insights, albums and card designs. E-cards from cards you already ordered keep working — the people you sent them to still have the card in their hands — until you close them from your orders.

Delete your account

From the app, after entering your password again. It removes your sign-in, your profile, and every child on the account with everything about them, and closes all your e-cards. It runs in the background and is finished within minutes.

If you have an order we have already been paid for but not yet shipped, the app will ask you to wait until it ships — otherwise we would be holding your money for cards we could no longer send.

What we keep afterwards: for each order you paid for, a record of the purchase — the dates, the amounts, the tracking number, what was ordered (design, quantity, paper) and the state and ZIP code it shipped to. Not your name, street address or phone number, and nothing from your journal, photos or children. It is no longer linked to you, and we keep it for seven years for tax and bookkeeping, then delete it. Stripe keeps its own record of the payment, including the shipping address you gave at checkout.

Getting your data out

Your account → Export your records makes a single file of everything you have written, with the photos, recordings and weekly Insights. It opens in any browser and needs nothing installed. Albums and the e-cards of cards you ordered are not in it; save each one from Keepsakes in the app. The app offers an export before you delete a child or your account.

Seeing or correcting what we hold

Most of it is visible in the app, and editable there. For anything else, ask us at support@journeymind.app and we will tell you what we have.

This website

It sets no cookies of its own and carries no analytics or third-party scripts on any page — there is nothing here watching you read.

The one exception is the waitlist page, which embeds a form belonging to Tally. It is their form running inside a frame on their own domain: what you type goes to them and is passed on to us by email, and what they do with it is governed by their terms rather than ours. That is also why the form sits on its own page and not on the front one — so that the rest of the site stays free of it.

Keeping it safe

Everything travels over encrypted connections and sits behind a sign-in. Photos and recordings are served through links that expire within the hour rather than from public addresses, and the key that can read the database directly exists only on our server, never in the app.

The only person who can see the data directly is the person running JourneyMind, and only to answer a request from you, to make and ship an order, or to fix a technical problem.

No service can promise perfect security, and we won’t. If something happens that affects your data, we will tell you.

Changes to this page

This policy describes a product in private testing, which is changing. The date at the top says when it was last true. When something material changes we will say so, not just swap the page.

Asking us anything

Privacy questions, deletion or export requests, or a complaint — support@journeymind.app. A person reads it.

Terms of Service · Support