Privacy Policy

Journa is a personal productivity app that helps you track habits, tasks, goals, and notes. References to "we", "us", or "our" in this policy refer to the operator of Journa.

We collect only what is necessary to provide the service:

• Account data — your email address and, if using email/password login, a hashed password. If you sign in with Google, we receive your name and email from Google.
• Content you create — tasks, shopping items, notes, weekly goals, and habit tracking data that you enter into the app.
• Preferences — display settings such as colour palette, section labels, and language preference.
• Google Calendar data — if you choose to connect your Google Calendar, we request read-only access to your calendar events (calendar.readonly scope). We use this solely to display your events alongside your manually entered events in the weekly planner view. We store the OAuth access and refresh tokens needed to retrieve this data; we do not store the calendar event content itself beyond what is displayed in your session.
• Usage analytics — we use Vercel Analytics, a privacy-friendly analytics tool that does not use cookies and does not collect personally identifiable information. It records aggregated page view counts to help us understand general usage.

We use your data solely to:

• Authenticate you and keep your account secure
• Store and display the content you create
• Save your display preferences
• Display your Google Calendar events in the weekly planner view, if you choose to connect your Google Calendar

We do not sell, rent, or share your personal data with third parties for marketing or advertising purposes.

Journa's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Your data is stored in Supabase, a managed database platform. All data is encrypted in transit (HTTPS/TLS) and at rest. Access to your data is restricted to your account through row-level security policies — no other user can read your data.

The app is hosted on Vercel. Both Supabase and Vercel may process your data in the United States or other countries outside your country of residence. By using Journa, you consent to this transfer. Both providers maintain industry-standard security practices and are bound by their own privacy policies.

Your data is retained for as long as your account is active. If you wish to delete your account and all associated data, please contact us at the email below and we will process your request within 30 days.

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict certain processing

To exercise any of these rights, contact us at the email address below.

We use a single session cookie issued by Supabase to keep you logged in. We do not use tracking or advertising cookies. Vercel Analytics operates without cookies.

Journa is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

We may update this Privacy Policy from time to time. When we do, we will update the "last updated" date at the top. Continued use of the app after changes constitutes acceptance of the updated policy.

For any privacy-related questions or requests, please email us at: contact@hellojourna.app