Privacy Policy

Last updated: October 5, 2026

1. Who We Are

Saving Thoughts is operated by InterconX Limited. This policy covers our journaling applications and savingthoughts.app website. It explains the information needed to provide the service and the choices you have.

2. Information We Collect

  • Account: Your name, email address, account identifier, authentication information and preferences.
  • Journal content: Diary text, tags, moods, timestamps, timezone, transcriptions, photos, profile photos and audio you choose to upload. Audio storage depends on server configuration; recordings may also remain on your device while awaiting upload.
  • Optional location: Precise coordinates and a location name when you enable geo-stamping and grant device permission.
  • Notifications: Device push tokens and notification preferences when you register for notifications.
  • Purchases: Product and transaction identifiers, credit balances, usage and purchase history used to deliver prepaid credits and administer existing entitlements. We do not store your full payment card details.
  • Diagnostics: Error messages, technical context and operational logs used to investigate faults. These may include an account identifier, request or device information.

3. Optional AI Processing and Consent

AI processing is optional. We ask for your explicit consent before sharing journal content with OpenAI. Consent is separate from microphone or location permission and from accepting these terms. You can decline and continue using non-AI journaling.

  • Transcription: Audio recordings you choose to transcribe are sent to OpenAI for speech-to-text processing.
  • Semantic search: Diary text is sent to OpenAI to create embeddings for meaning-based search. A semantic search query is also sent to OpenAI to create its search embedding.
  • Daily summaries: Journal text is sent to OpenAI to generate a summary when you enable that feature.

You can withdraw AI consent in Settings > AI privacy by choosing Revoke permission. This stops future sharing with OpenAI; it does not undo requests already processed. Automatic transcription and daily summary preferences can also be disabled separately. OpenAI processes requests under its applicable API data policies; we do not promise zero retention by the provider.

On supported non-iOS platforms, an optional personal OpenAI API key may be stored encrypted and used for transcription. It can be removed in Settings. This does not remove the requirement for AI-sharing consent.

4. Storage and Security

Journal text, transcription text and daily summary text are encrypted at rest in the SQL database using application encryption. This is server-side encryption: our service decrypts content to display it to you and to perform features you request. It is not end-to-end encryption.

Semantic search embeddings and text previews are stored separately in Redis and protected by restricted service access; they are not covered by the SQL field encryption. Uploaded audio, photos and thumbnails use separate media storage with authorized access. We do not claim that every stored field or media file is encrypted by the application.

Device-to-server communication uses HTTPS. Our infrastructure and access controls help protect data, but no system can guarantee absolute security.

5. Service Providers and Sharing

We do not sell your personal information or use journal content for advertising. Providers receive the information needed to perform their role:

  • OpenAI: Audio, journal text and search queries for the optional AI processing described above, after consent.
  • Apple and Google Play: Mobile purchase billing and transaction information. RevenueCat validates purchases and communicates purchase events using an app user identifier so we can deliver credits.
  • Stripe: Payment processing for web credit purchases and administration of applicable legacy billing.
  • Google Firebase and Apple notification services: Device tokens, installation identifiers and notification payloads for push delivery where supported. The Firebase messaging and transport SDKs also process technical diagnostics and service analytics to operate and assess delivery reliability.
  • Resend: Email addresses and message contents for verification, password reset and service emails. If daily summary email is enabled, its message includes your summary.
  • DigitalOcean: Application hosting, database and configured media/backup infrastructure.

Providers may process information outside your country. We may also disclose information where required by law or necessary to protect the service and our users.

6. Retention, Export and Deletion

We retain account and journal information to provide your account. You can export your journal and request account deletion in Settings. Account deletion removes journal content, media, search data, device tokens and associated account records once cleanup completes. If cleanup fails, you can retry the deletion request; new account changes and AI processing remain blocked while deletion is pending. This does not instantly erase every backup or provider record.

Operational backups and records required for security, payment reconciliation or legal obligations may remain after deletion. Contact us for questions about retention or a deletion request. Deleting your account does not cancel an existing subscription with a store; any legacy subscription must be managed with its billing provider.

7. Your Controls

In Settings you can manage AI consent, automatic transcription, summaries, notifications and optional location, export content, and request account deletion. You can also revoke microphone, photo and location permissions in your device settings. New mobile purchases are prepaid consumable credits, with no new subscription required. Existing legacy entitlements follow their original billing terms.

For access, correction or deletion assistance, contact [email protected].

8. Website Analytics and Device Storage

The public marketing website uses Matomo analytics hosted by InterconX to measure page visits and link activity. These website scripts are separate from the mobile journaling app. The website also loads fonts from Google Fonts, which receives the network information needed to serve them.

The app uses authentication/session storage, local preferences and local recording or entry caches for offline workflows. These are needed for app operation and are not advertising tracking.

9. Children and Changes

The service is not intended for children under 13. Contact us if you believe a child has provided personal information. We will publish policy updates on this page and communicate material changes through the service or email.

10. Contact

Privacy: [email protected]
Support: [email protected]

See our Help and Support page and Terms of Use.