Privacy Policy

1. Introduction

At Purist Journal, we believe your thoughts should remain yours. This Privacy Policy explains how we collect, use, and protect your information when you use our digital mindful journaling application, including our web and mobile apps and any related services we provide worldwide.

By using Purist Journal, you acknowledge that your information will be handled as described in this Policy. If you do not agree, please do not use the service.

2. Data We Collect

We collect only the information needed to operate Purist Journal, provide sync and subscriptions, and understand how the app is used.

Account data: Your name, email address, and authentication identifiers received from Google OAuth when you sign up or log in.

Subscription and billing data: Your plan, billing status, and limited transaction metadata (such as transaction IDs and subscription events) processed by Lemon Squeezy, our Merchant of Record. We do not store your full payment card details.

Usage data: Product analytics events from PostHog, such as feature usage (for example, when you mark a habit complete or start the Pomodoro timer), approximate timestamps, and basic device or browser information.

Content data: Your journal entries, habits, tasks, and related metadata (such as creation dates and completion status). How we store this depends on your plan, as described below.

Wishlist or beta signup data: If you join our wishlist, beta list, or product updates list, we collect your email address so we can send those communications.

3. Data Collection & Storage

Free Tier (Local-First)

On the Free Tier, Purist Journal operates on a strictly local-first basis. Your journal entries, habits, and tasks are stored only on your device using your browser's local storage technologies (such as IndexedDB).

We do not transmit, store, or have access to your personal text logs or journaling content on our servers in this tier.

Premium Tier (Purist+)

When you upgrade to Purist+, we offer secure multi-device synchronization and backup. Your journal entries, habits, tasks, and related metadata are securely synced and stored in our Supabase cloud database.

We use this synced data only to:

• Provide access to your content across devices.
• Keep a backup so you do not lose your data.

All synced data is transmitted over HTTPS and stored using industry-standard encryption at rest.

4. Analytics & Telemetry

To improve Purist Journal and understand how people use the app, we use PostHog, a privacy-focused product analytics platform.

PostHog collects pseudonymous usage data, such as:

• Which features you use (for example, when you complete a habit or start a focus session).
• Approximate timestamps of events.
• Basic device or browser information and approximate region.

We configure PostHog to avoid collecting the content of your journal entries, task descriptions, or other free-text fields. We do not send your private journal text or specific personal notes to PostHog.

You can manage or disable analytics tracking at any time in your in-app Privacy Settings. When you disable analytics, we stop sending new usage events to PostHog, although some previously collected data may remain in aggregated or anonymized reports.

5. Legal Bases for Processing (EEA/UK Users)

If you are in the European Economic Area or the United Kingdom, we process your personal data under the following legal bases:

• Contract: To operate Purist Journal, sync your data, authenticate your account, and manage your subscription.
• Legitimate interests: To understand how the app is used and improve it, using privacy-friendly analytics and giving you the ability to opt out.
• Consent: Where required by law, for certain analytics or communications.

6. Third-Party Service Providers

We rely on trusted third-party service providers (sub-processors) to deliver our services.

These providers process limited personal data on our behalf only to deliver our services. Where required, we have appropriate data protection agreements in place with them.

7. Payment Processing

Payments for Purist+ are processed through Lemon Squeezy, our Merchant of Record. Lemon Squeezy handles your payment information and transaction data in accordance with their own terms and privacy policy.

We do not store your full credit card details on our servers. We only receive limited information related to your subscription, such as plan type, payment status, and transaction identifiers.

8. Authentication & Communications

We use secure Google OAuth for account creation and login. We receive basic profile information from Google, such as your name, email address, and authentication identifiers, which we use to create and manage your account and associate it with your subscription.

We use your email address to operate your account and send essential service messages, such as login links, billing notices, security alerts, and important account updates.

If you choose to join our wishlist, beta list, or product updates list, we may also use your email address to send those communications. You can unsubscribe at any time using the link in the email or by contacting us directly. We will never sell or share your email address with third parties for their own marketing purposes.

9. Data Retention & Deletion

We retain your personal data for as long as necessary to provide Purist Journal and fulfill the purposes described in this Policy.

Free Tier

Your content data is stored only on your device. When you delete it in the app or clear your browser data, it is removed from your device; we do not have a copy.

Purist+

We retain your synced data while your account is active. If you cancel your subscription, we may retain your synced data for a limited period (for example, to allow you to reactivate) and then delete or anonymize it.

When you delete data from within the app, we remove it from our active systems as soon as reasonably possible. Some information may remain in system logs and backups for a limited time before it is deleted or anonymized.

10. Your Rights

Regardless of your tier, you retain ownership of your content. You can export or delete your data at any time through the in-app settings.

Depending on where you live, you may also have legal rights over your personal data, including:

• The right to access a copy of the personal data we hold about you.
• The right to correct inaccurate or incomplete data.
• The right to delete your data.
• The right to restrict or object to certain processing.
• The right to receive your data in a portable format.

If you cannot exercise a right directly in the app, contact us at mostafaabdrabu@gmail.com and we will help you with your request. We aim to follow the principles of major data protection laws, such as the GDPR and CCPA, and to provide clear tools to manage your information.

11. Children's Privacy

Purist Journal is not intended for children under 16 years of age, and we do not knowingly collect personal data from children under this age. If you believe a child has provided us with personal data, please contact us so we can delete it.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top and, where appropriate, notify you in the app or by email. Your continued use of Purist Journal after the updated Policy becomes effective means the updated Policy will apply to your continued use of the service.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact us at:

mostafaabdrabu@gmail.com