Privacy Policy — IFS Journal

What we collect

To run your account we store your email address, a salted/hashed password, and the journal entries, parts, conversations, and highlights you create. We also record the date an account was created and minimal usage metadata (rate-limit counters and error reports).

How your entries are processed

When you save a journal entry, its text is sent to two AI services that act as our subprocessors. Anthropic's Claude API reads it to identify and cite "parts", to draft journal prompts, and to speak in part conversations. TypeSafe's Jev model reads it, and the text of your conversations with parts, to make quick judgments: whether a cited passage really supports a part, which existing part a new one matches, whether to offer a writing tip, and whether a message or reply needs a safety response. Neither service trains on this data under the terms we use them on. TypeSafe keeps requests for its standard retention period; we have not arranged zero data retention with it. We do not sell your data or share it with any other third party.

Security

Data is stored in a managed Postgres database (Neon) in the United States. Passwords are hashed with bcrypt. The application runs on Vercel and is served over HTTPS.

Your rights

You can export everything we have about you at any time from the Profile page ("Export My Data"). You can delete your account from the same page, which permanently removes your entries, parts, conversations, and highlights.

Retention

Data is retained as long as your account exists. If you delete your account, your data is removed immediately from the primary database. Managed database backups may retain copies for up to 30 days before aging out.

Cookies

We use a single session cookie for authentication. We do not set advertising or analytics cookies.

Children

IFS Journal is not intended for use by anyone under 16.

Contact

Questions about this policy or your data: reach out via the contact email shown on the About page.