Privacy policy

Last updated October 5, 2026

jrnl.day is a personal journaling app. Your journal is private and end-to-end encrypted: only you can read it.

What we store

• Your account: your email address and, if you choose, a password (stored securely by our sign-in provider, never in plain text). If you sign in with Google, we receive your name, email address and profile picture from Google, and use only the email address to identify your account.
• Your journal: the entries, reviews and settings you write in the app, such as mood, prayers logged, notes, tags and your chosen city for prayer times.

How it is used

Your data is used only to show your journal back to you and sync it between your devices. We don't sell it, share it, show ads, or use it to train AI models. Prayer times are calculated on your device from the city you choose; your location is never tracked.

Who can see it

Only you. Your journal is end-to-end encrypted. Every entry, review and setting is encrypted on your device (AES-256) with a key that only your journal passphrase or your recovery key can unlock, before it is sent anywhere. Our database stores only the encrypted version, so nobody else can read your entries: not other users, not our hosting providers, and not the person who runs jrnl.day.

A few things are not encrypted because the service needs them to work: your email address, and the dates you have entries for (each entry is filed under its date).

Because we never have your passphrase, we can't reset it for you. If you forget it, you can unlock your journal with the recovery key you saved during setup. If both are lost, your entries can't be recovered by anyone. Your sign-in password is separate and can be reset as usual.

Drafts you are still writing are kept on your own device until they are saved, and if you choose “Remember on this device”, the key that opens your journal is stored on that device. Signing out clears both.

Where it is stored

Data is stored with Supabase (database and sign-in) in Canada, and the website is served by Cloudflare. Sign-in emails are sent through Resend.

Your choices

• Export everything at any time from Entries → Your data (PDF, JSON or Markdown).
• To delete your account and all of your entries, email the address below from the email on your account. Deletion is permanent.

Contact

Questions or deletion requests: aalixnk@gmail.com