This Privacy Policy explains what TodayI (“the App”, “we”) collects, how it is used and shared, how long it is kept, and the choices you have. TodayI is a mood journal: most of what you write is for you alone, and only what you choose to post to the Global feed is shared with anyone else.
Information We Collect
- An anonymous account identifier. The first time you open the App, we create an anonymous account so your journal works immediately, without signing in. It is identified by a random user ID.
- Sign-in information, if you choose to sign in. You can sign in with Apple or Google. We receive your email address and the identifier that provider gives us. With Sign in with Apple you can choose to hide your email, in which case we receive only a private relay address from Apple. Signing in is required only to post to the Global feed or to buy Premium.
- Your username. Shown on posts you share to the Global feed. It is generated automatically (for example “guest-1A2B”) unless you change it, and you may add a profile photo.
- Your journal content. Your daily mood, what you write, and anything you attach: photos, video, voice notes and links. Also comments you write on Global posts.
- Notification information. If you allow notifications, a device token so we can send them, and the UTC time offset of your device, so reminders arrive at the right local time.
- Crash reports. If the App crashes, a crash log with technical details about your device and the App. Crash reports are not linked to your account.
We do not collect your location, contacts, or browsing activity, and we do not use advertising or analytics tracking. We do not track you across other companies’ apps or websites.
Where Your Journal Is Stored
- Personal entries, free version: stored on your device only. They are included in your device’s own iCloud or computer backup if you use one, but they are not uploaded to our servers. If you delete the App, they are removed from the device.
- Personal entries, Premium: also backed up to our cloud storage so you can restore them on a new device. Their photos, video and voice notes can be opened only by your signed-in account.
- Global posts: stored in the cloud so others can see them. See “Global and Personal Posts” below.
- On-device data: your current streak and the day’s overall mood are also saved on your device so the Home Screen widget can display them. This data does not leave your device.
How We Use Information
- To run the App: saving and backing up your journal, showing the Global feed, comments and likes, and your calendar and mood summaries.
- To send the notifications you allow, such as a daily reminder or a notice that someone commented on or liked your post.
- To keep the Global feed safe (see “Safety and Moderation”).
- To fix crashes and keep the App reliable.
- To manage your Premium subscription.
Global and Personal Posts
Every entry is Personal unless you choose Global. A Global post appears in that day’s Global feed, where other users can see it with your username, mood and profile photo, and can like and comment on it. Anyone holding the link to a Global post’s photo, video or voice note can open that file.
You can change a post back to Personal on the day you posted it. When you do, it leaves the feed and its media links stop working for everyone. Personal entries are never shown to other users.
Your daily mood also counts toward the anonymous “how the world feels” totals for that day. These totals do not identify you.
Safety and Moderation
- Automatic checks on Global posts. Text you post to the Global feed is checked automatically. A post containing a threat of violence is removed from the feed, kept as a Personal entry, and you are notified. Personal entries are not checked on our servers.
- Sensitive content. A Global post containing words on our sensitive-content list, or one you mark as sensitive, is shown blurred until a reader taps to view it.
- Moments of distress. If what you write suggests you may be in crisis, the App shows support resources and saves the entry as Personal rather than posting it to the feed. This check happens in the App; we do not report, flag or share these entries.
- Reports. You can report a Global post. A report records your user ID, the post, its author’s user ID and the reason, and is reviewed by us.
- Blocking. You can block another user. Blocking hides their posts and comments from you; it is stored with your account.
How We Share Information
We do not sell your personal information and do not share it for advertising. We use these service providers to operate the App, and they process data only on our behalf:
- Google Firebase: sign-in (Firebase Authentication), database and file storage (Cloud Firestore and Cloud Storage), server functions (Cloud Functions), notifications (Firebase Cloud Messaging), crash reporting (Crashlytics) and app configuration (Remote Config). Firebase privacy information.
- Apple: Sign in with Apple and App Store payments. We never receive your payment details.
- Google: Sign in with Google, if you use it.
We may also disclose information if required by law.
How Long We Keep Information
- While you use the App, we keep your cloud data for as long as your account exists.
- If your Premium subscription ends, your existing cloud backup stays available for you to restore. About 11 months after Premium was last active we send you a notice, and at 12 months the backed-up entries are deleted from our servers. Your profile, your calendar of moods and everything on your device are not affected.
- Crash reports are kept for up to 90 days.
Deleting Your Data
You can delete a single entry at any time. You can remove it everywhere, or remove it from the cloud only and keep the copy on your device.
You can delete your account in the App under Settings → Delete Account. This permanently deletes, from our servers: your profile, all your entries and their photos, video and voice notes, your calendar history and notifications, the comments you wrote on other people’s posts, the comment threads on your own posts, and your user ID from other users’ block lists. Your sign-in account is deleted last. If you signed in with Apple, we also revoke TodayI’s access to your Apple ID, so the App no longer appears under “Sign in with Apple” in your Apple ID settings.
One exception: if you reported another user’s post, that report is kept so the report can still be acted on, but your user ID is removed from it. Reports made about your posts are deleted.
Your Choices
- Choose Personal or Global for each entry, and mark Global posts as sensitive.
- Turn notifications on or off in your device settings.
- Block users and report posts.
- Delete entries or your whole account in the App.
- Optionally lock the App with Face ID. This happens on your device; we never receive your face data.
- To ask for a copy of your data or for any other privacy request, contact us at the address below.
Security
Data is encrypted in transit, and cloud access is restricted so you can read your own Personal entries only through your signed-in account. No system is perfectly secure, but we work to protect your information.
Children
The App is not intended for children under 13, or under the minimum age required in your country. We do not knowingly collect information from them. If you believe a child has used the App, contact us and we will delete their data.
Changes to This Policy
We may update this policy. When we do, we will change the effective date above, and for significant changes we will let you know in the App.
Contact
Questions or requests about privacy: kuzostudiosph@gmail.com
KuzoStudios PH