Privacy Policy

Last updated 25 October 2026

Your journal is the most personal thing you write. This policy says what WOYM collects, why, and what you can do about it. It covers the WOYM apps and woym.app.

1. What we collect

We collect only what WOYM needs to work:

  • Your account: you can use the app without one. Until you turn on cloud sync, the app gives your phone a random ID with no email or name, so your purchases and settings have somewhere to belong. When you turn on cloud sync, or sign up on this website, we collect your email address and the name you give us. Your password is stored hashed by our sign-in provider, never in plain text.
  • Your journal, once cloud sync is on: the entries you write and everything in them: photos, videos, audio recordings, tags, dates and, if you turn it on, the place you wrote them. Without cloud sync, your journal stays on your phone and never reaches us.
  • Habits and todos: the habits and todos you add, and when you complete them.
  • Your answers when you sign up: what you hope to get from journaling, so we can shape the app around it.
  • Feedback you send us from the app.
  • Device details: a push notification token for your device, its platform and its time zone, so reminders arrive at the right time.
  • Purchases: whether you have a paid plan, and which one. Card and bank details go straight to Apple or Razorpay; we never see them.
  • Usage: anonymous counts of which screens and buttons are used, through Google Analytics for Firebase in the app and Google Analytics on this website. These never include what you write.

2. How we use it

We use your data to run WOYM for you: to store and sync your journal across your devices, send the reminders you ask for, unlock the plan you paid for, answer your messages and improve the app.

We do not sell your data. We do not show ads. We do not read your entries, and we do not use them to train AI models.

3. Where it is stored

With cloud sync on, your journal is stored with Supabase, our database and file storage provider. It travels over encrypted connections (HTTPS) and is encrypted at rest on their servers. Access to it is limited to your account; nobody at WOYM looks at your entries.

The app also keeps a copy of your journal on your phone, so it works offline. With cloud sync off, that copy is the only one: deleting the app deletes your journal, and we can't bring it back. App Lock, if you turn it on, uses your phone's Face ID, fingerprint or passcode. Your biometric data stays on your phone and never reaches us.

4. Who else processes it

We use a small number of services to run WOYM. Each gets only what it needs for its job:

  • Supabase: your account, journal and media.
  • Vercel: hosts this website and our servers.
  • Google Gemini: only when you use Fix English or Scan Handwriting, the text or photo you choose is sent to Google to produce the result. While you dictate, your voice is streamed to Google to turn it into text, and only for as long as dictation is on.
  • Google Firebase: push notifications and anonymous app analytics.
  • Apple and RevenueCat: purchases in the app. RevenueCat tells us whether your App Store purchase is active.
  • Razorpay: purchases on this website.
  • Resend: sends our emails, including entries you share with someone by email.
  • BigDataCloud and OpenStreetMap: if you add a place to an entry, its coordinates are used to look up the city name and to draw the map.

5. Sharing

An entry is only seen by someone else when you share it. When you do, we send it to the email address you enter and remember that address so you can share with them again.

6. Your choices and rights

  • Export: download your entries as text or Markdown from the app at any time.
  • Delete an entry: it moves to Recently Deleted for 30 days, then is gone for good.
  • Delete your account: in Settings. This deletes your account and your journal.
  • Location and notifications: turn them off in your phone's settings whenever you like.

You can also write to harsh@digivats.com to see, correct or delete the data we hold about you, or to withdraw your consent. We reply within 30 days.

7. How long we keep it

We keep your data while you have an account. When you delete your account, we delete your data from our systems, except where the law requires us to keep a record, such as of a payment.

8. Children

WOYM is not meant for children under 13, and we do not knowingly collect their data. If you believe a child has given us their data, write to harsh@digivats.com and we will delete it.

9. Changes

If we change this policy, we will update the date at the top of this page, and tell you in the app or by email if the change is significant.

10. Contact

WOYM is made by Harsh Vats in India. For any question about your privacy, write to harsh@digivats.com.