Privacy Policy

1. Information We Collect

Identifiers

• A randomly generated anonymous UUID created on your device and stored in your iOS Keychain. This ID is not linked to your name, email, Apple ID, or any other personal identity.

We do not collect your name, email address, phone number, or Apple ID.

User Content

• Reflection messages and conversation text
• Voice recordings and their transcripts (when you use voice input)
• Session summaries, key moments, and energy levels
• Names and context of people you mention in reflections
• Memories you explicitly ask the AI to remember

Usage Data

• Session dates and times (local hour only)
• Reflection categories you select
• Focus area selections

API Keys

Your Anthropic API key, which you provide to enable AI features. Keys are encrypted at rest using per-user AES-256-GCM encryption and transmitted only over HTTPS. You can delete your key at any time from Settings.

2. How We Use Your Information

• AI-driven reflections — Your conversation text, past summaries, and relevant context are sent to our AI provider to generate personalized responses.
• Pattern recognition — Insights and patterns are generated over time to deepen self-awareness.
• Voice responses — AI-generated response text is sent to our text-to-speech provider.
• Personalization — We remember your preferences and communication style across sessions.

We do not use your data for advertising, profiling, or sale to third parties.

3. Third-Party Services

You provide your own Anthropic API key — your data is sent directly to Anthropic using your key and is not used for model training. All third-party services provide equal or greater data protection.

4. Data Security

• AES-256-GCM encryption at rest with user-specific keys derived via HKDF
• HTTPS/TLS for all data in transit
• iOS Keychain for local credential storage
• Rate limiting on API endpoints

5. Data Retention & Deletion

Your data is retained for as long as you use the app. You can delete your account at any time from Settings within the app — this permanently removes all sessions, messages, insights, person data, memories, and voice recordings.

You can export a full JSON copy of your data from Settings. You can also request deletion by emailing korab@puntoria.com.

6. What We Don't Collect

• No email, name, or personal identity at signup
• No location, contacts, calendar, health, or photos
• No advertising identifiers (IDFA)
• No third-party analytics or tracking SDKs
• No cookies or web tracking
• No data sold to third parties

7. Device Permissions

• Microphone — For voice reflections, only when you tap the microphone button
• Speech Recognition — On-device transcription via Apple
• Notifications — Local only for daily reminders and check-ins

All permissions are optional and requested only when you first use the relevant feature.

8. Apple Privacy Nutrition Label

All data is associated with an anonymous device-generated ID. There is no mechanism to link this data to your real-world identity. ThatWasMyDay does not track users across other apps or websites.

9. Children's Privacy

ThatWasMyDay is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided data through the app, please contact us and we will delete it promptly.

10. International Data

• Database hosting — Convex (EU-West-1 region)
• AI processing — Anthropic (United States)
• Voice synthesis — ElevenLabs

11. Changes to This Policy

We may update this policy from time to time. When we do, we will revise the effective date at the top. Continued use of the app constitutes acceptance of the updated policy.

12. Contact

Korab Hoxha
korab@puntoria.com