Privacy policy

AI conversations, tools and usage

When you use AI features, conversations, messages, adopted plans, execution and reflection records are stored in the cloud under your account to restore conversations and support your goals. Relevant conversation, plan and confirmed memory content may be included in model requests. Journey record sync depends on account entitlements and is separate from chat storage. The app keeps local drafts and recovery records.

To audit usage, credits, security and failures, the backend records account-linked request identifiers, model and tool calls, input, output and cached token usage, timing, status, costs and credit settlement. Technical logs may also include IP addresses and connection details. Unknown costs remain pending reconciliation rather than being treated as zero. Map coordinates represent virtual scenes, not device GPS locations.

Supabase provides accounts, conversation storage and the database. When you chat, your messages, relevant recent conversation and necessary context such as your adopted plan are sent through Supabase to AI services on Volcengine Ark. When attachments are available, only the photos or videos you select and send are submitted for analysis. When memory is enabled, relevant memories you have confirmed can inform later conversations. When you enable automatic memory suggestions, relevant conversation content is also processed to generate candidates for review. Suggestions are not saved memories until you confirm them. You can confirm, edit, delete or pause memories in memory management. When you request web search or webpage reading, the query or URL is sent to Firecrawl; your entire conversation is not automatically sent to the search service. Apple and RevenueCat provide sign-in, payment and subscription services; Google Firebase Analytics provides usage statistics and does not collect IDFA, TikTok Ads SDK may measure ad installs after you allow tracking, and Cloudflare serves the help website. Journey does not show third-party ads or sell personal data.

Focus completion and reminders you confirm use local notifications. You can turn them off in iOS Settings; declining does not affect the timer. Calendar actions request the relevant permission only after you confirm. Busy intervals stay on this phone unless you choose to share them in chat. When attachments are available, the system photo picker provides only the photos or videos you select; selecting or taking a photo does not send it immediately. Camera permission is requested when you choose Take photo. If you decline, you can still select a photo. Saving a diagram requests permission to add photos only. White noise does not use the microphone. Location and contacts are not requested.

1. Information we process

Journey saves completed focus sessions, dates, durations, task text, optional journal notes, selected virtual destinations and discoveries. Creature familiarity, keepsakes and achievements are calculated from this progress. Preferences and an active timer are stored on your device.

The app may automatically create an anonymous Supabase account with a randomly assigned user ID. If you choose Sign in with Apple, Apple supplies an account identifier and may supply the name and email address you authorize, including a private relay address. We do not receive your Apple password.

Apple and RevenueCat process purchase and subscription information, such as product IDs, transactions and entitlement status. Journey associates the Supabase user ID with RevenueCat to check and restore Pro or Journey AI access, and keeps account-linked purchase and credit records. Your App Store payment account and your Journey service identity have different roles. We do not receive your payment card details.

Firebase Analytics receives an app instance identifier, app screen names, focus and reward events, and Pro offer and purchase-status events. Event parameters may include a duration range, virtual destination ID, paywall entry point or monthly/yearly plan type. We do not send task text, journal notes, email, Supabase user ID, price or transaction ID to Firebase Analytics.

Our hosting and service providers process technical request information, such as IP addresses, request times and connection details, to deliver and protect their services. If you contact us, we receive the email address, message and any attachments you send.

2. Local storage and cloud sync

The app uploads and downloads journey progress only when the account has the required sync entitlement. The synchronized data includes focus totals, journey dates and durations, task text, optional notes, destination IDs, discovered creatures and keepsake information. Collections and achievements can be reconstructed from the synchronized records.

An anonymous Pro account may synchronize before you connect Apple. Connect the same Sign in with Apple account on your devices for cross-device recovery. Anonymous access alone is not a reliable way to recover an archive after a reinstall or a device change.

Without the required sync entitlement, the app does not synchronize journey snapshots. It may still contact authentication and subscription services. Loss of the required sync entitlement stops sync; it does not automatically delete previously uploaded records. Device backup services, if enabled by you, are separate from Journey’s Supabase sync.

3. Why we use this information

We use information to save and restore progress, authenticate accounts, provide cloud sync, verify purchases, manage subscription entitlements, understand aggregate feature use, answer support requests and protect the service from misuse. RevenueCat also provides subscription reporting, such as purchase history and aggregate subscription performance.

Journey does not display third-party ads or sell your personal data. Firebase Analytics is configured without IDFA collection. If you allow Apple’s tracking permission, the TikTok Ads SDK may measure which ads lead to app installs; declining does not affect focus features. When you submit content in AI conversations, relevant task, plan and reflection content may be sent to the AI service as context. The destinations and coordinates displayed in the app describe virtual scenes, not your physical location.

4. Service providers and sharing

Supabase provides authentication and the database for cloud progress. Apple provides Sign in with Apple, App Store billing and subscription management. RevenueCat validates purchases and manages Pro and Journey AI subscription entitlements. Volcengine Ark processes AI requests and Firecrawl handles web searches and webpage reading when those features are used. Google Firebase Analytics provides app usage reports. TikTok Ads SDK may measure advertising attribution when you allow tracking. Cloudflare delivers this website and its HTTPS connection.

Providers process information needed for these functions. We may also disclose information when required by law, to protect users and service security, or in a business transfer subject to appropriate notice and safeguards. We do not publish your task text or journal notes.

Supabase · Apple · RevenueCat · Google · TikTok · Cloudflare

5. Storage, security and retention

Local progress remains on your device until removed. Signing out switches to a separate local archive and is not an account-deletion request. Cloud account and progress data are retained to operate your account until deletion is requested or retention is otherwise no longer necessary.

A successful in-app account deletion removes the Supabase account and its linked progress, and clears that account’s progress on the current device. It does not erase Apple’s transaction records or automatically delete all data held by RevenueCat or Firebase Analytics. Contact us for requests involving provider records. Limited security logs, backups or records required by law may remain for their necessary retention period.

Connections to our cloud services use HTTPS and database access is scoped to the authenticated user. These controls are not end-to-end encryption, and no service can guarantee absolute security. Providers may process data in countries outside your own; their processing terms and applicable transfer safeguards also apply.

6. Your choices and requests

Sign-in and membership requirements are shown in the app. You can leave optional journal notes blank and manage notification permission in iOS Settings. Account details for an Apple-connected account include sign-out and deletion controls under Profile → Account & Sync. Deletion may require Apple identity confirmation.

For a guest account, open Profile, scroll to the account and data section, and choose Delete Guest Account & Data. This does not require Pro or Sign in with Apple. After deletion succeeds, that guest account, its associated cloud progress and its progress on this device are removed. If the request fails, your local progress is kept so you can retry. Canceling the confirmation does not delete anything.

If you cannot reach the deletion control or cannot sign in, contact us for help with a data request. We may need proportionate verification to identify your account safely. Please do not send passwords, login tokens or verification codes.

Depending on your location, you may have rights to access, correct, delete or receive a copy of your data, and to object to or restrict certain processing. You can make these requests using the contact details below. Where applicable, you may also complain to your local data protection authority.

Deleting Journey or its account does not cancel an App Store subscription. Manage cancellation separately in Apple’s subscription settings.

7. This website and children’s information

These pages do not require a login and do not contain advertising, analytics scripts or a contact form. We do not set application cookies or store your browsing activity in local storage. Cloudflare may process technical requests and use security mechanisms needed to provide the site. External links and your email provider have their own privacy practices.

Journey is not designed to solicit children’s personal information. If you are a parent or guardian and believe a child has supplied personal data that should be removed, contact us so we can investigate and assist.

8. Updates and contact

We update this page when our practices change and show the effective date above. Material changes will also be communicated in the app or release information where appropriate. Contact VecBits using the email below for privacy questions or requests.