🔐 plain-words privacy
Here's the short version of how we look after your information.
Your email so you can sign back in. Anything you write down — symptoms, journal entries, pinned notes, folders, appointments, chats with the companions. Optional things like a preferred name or a photo of a symptom, only if you add them.
We don't sell your information. We don't share it with advertisers. We don't read your journal to train anything. We don't send your data anywhere it doesn't need to go.
Only you, signed in to your account. The companions read what you write to them so they can answer — that's it.
Everything you write travels over an encrypted connection (TLS 1.2+) and is stored on servers that encrypt the whole disk at rest (AES-256). Inside the database, every row is scoped to your account — the house can only hand your notes to you when you're signed in. No third parties see it.
If you set a reminder on a pinned note, your device will gently nudge you when it's due — we only ask for notification permission the first time you actually schedule one, not the moment you open the app. You can turn it off any time in your device settings.
Nothing is shared with another person until you decide to share it and send them an invite. No passive sharing, no automatic feeds. You can revoke a key any time from your keyring.
You can delete anything you've written from the Closet. If you're ready to close the whole account, go to the Closet → 'Leave the house' — one button, two-step confirm, and every note, chat, book, photo, and the account itself are permanently removed. No email required.
Use the Contact button in the Closet. A real person will answer.
See the House Rules for the warm bigger-picture version.