Privacy Policy

1. Introduction

This Privacy Policy describes how The Success Diary("the App"), operated by Samuel Vančo("we", "our", or "us"), handles information when you use the mobile application.

The Success Diary is an AI-powered journaling app that allows users to record journal entries by voice or text and receive personalized AI-generated feedback, insights, and suggested next steps.

By using the App, you agree to the practices described in this Privacy Policy.

2. Information We Process

To provide the App's functionality, the App may process the following information:

Account Information

Users may provide:

• A first name during onboarding, used to personalize the experience
• A feedback style preference (Supportive, Direct, Coach, or Balanced)

The App offers three sign-in options: Sign in with Apple, Sign in with Google, or anonymous sign-in (no identifier required). When you use Sign in with Apple or Sign in with Google, the provider may share your name and email address with us to create your account. Email addresses are stored only by our authentication provider (Supabase Auth) and are used solely to identify your account across devices; they are not used for marketing.

If you sign in anonymously, no identifier is shared with us beyond an internal account ID that is generated on-device.

Journal Entries and User Input

Users may:

• Record voice entries which are transcribed to text
• Type text-based journal entries
• Continue conversations with the AI by replying to feedback
• Record an optional "Manifesto" audio clip

These inputs are used to generate personalized AI feedback and are stored as part of your journal history. Voice journal entries are transcribed to text using Apple's Speech Recognition framework, with on-device recognition preferred where supported. Only the resulting text is transmitted and saved — the underlying audio from a journal entry is discarded after transcription.

The Manifesto feature is the only exception: if you choose to record a manifesto, the audio file is stored as an .m4arecording in our encrypted cloud storage so you can play it back later. You can delete your manifesto recording at any time from within the App.

Usage Data

The App may collect anonymous usage analytics through PostHog to improve performance and functionality.

This may include:

• App interactions and feature usage
• Session duration and frequency
• Device type and operating system version
• App version
• Diagnostic and crash information

Analytics data does not identify you personally and never includes the content of your journal entries or conversations.

3. How Information Is Used

Information processed by the App is used solely to:

• Generate personalized AI feedback, insights, and suggested next steps based on your journal entries
• Personalize your experience using your name and feedback style preference
• Store your journal entries so you can review your history and track progress over time
• Enable conversation mode, allowing you to continue a dialogue with the AI after initial feedback
• Improve app functionality and reliability
• Understand how features are used
• Maintain and troubleshoot the service

4. AI Processing

To generate feedback and insights, the App sends certain user-provided data to the Google Gemini API, invoked from our backend via secure Supabase Edge Functions.

This may include:

• The text content of your journal entry
• Your selected feedback style preference
• Conversation history within a single entry thread

Google Gemini processes the data solely to generate the requested feedback and response, and returns the result to the App in real time.

Your journal entries are not used to train any AI model.Per Google's paid-tier API terms, content submitted through the Gemini API is not used to train Google's generative models.

Users should be aware that AI-generated feedback is for personal reflection purposes only and does not constitute professional advice of any kind.

5. Data Storage

Your journal entries, account preferences, conversation history, and (if recorded) manifesto audio are stored securely using Supabase(PostgreSQL database, authentication, and encrypted object storage). All data is encrypted at rest and in transit using industry-standard encryption protocols.

Your profile stores only the first name you provide during onboarding and your feedback style preference. If you sign in with Apple or Google, the provider's identifier (and email, if you share it) is stored in Supabase Auth so the App can recognize your account on future sign-ins.

6. What We Do Not Do

• We do not sell your data to any third party.
• We do not use your journal entries to train any AI model.
• We do not store the audio from your voice journal entries — only the transcribed text. (The optional Manifesto feature is the only place audio is stored, and only at your explicit request.)
• We do not share your entries with anyone. No human at The Success Diary reads your journal.
• We do not use your data for advertising or marketing purposes.
• We do not send you marketing emails. Any email address obtained through Sign in with Apple or Sign in with Google is used solely to identify your account.

7. Third-Party Services

The App uses the following third-party services to operate certain features:

AI Processing — Google Gemini

User-submitted journal entry text, feedback preferences, and in-thread conversation history are processed by the Google Gemini API to generate personalized feedback and insights. Requests are sent from our backend (Supabase Edge Functions) so your Gemini API key is never exposed on the device. Gemini does not retain this data for model training.

Backend Infrastructure — Supabase

Supabase provides authentication (including the Sign in with Apple / Sign in with Google identity flows), our PostgreSQL database (journal entries, conversations, preferences), encrypted object storage (manifesto audio files), and the Edge Functions that call Gemini. Data is encrypted at rest and in transit.

Analytics — PostHog

Anonymous product analytics, screen-view, and crash data are processed by PostHog to understand app usage and improve the service. PostHog events never include the content of your journal entries or AI conversations.

Speech-to-Text — Apple Speech Framework

Voice journal entries are transcribed using Apple's Speech Recognition framework. The App prefers on-device recognitionwhere the device supports it, so your voice may never leave your iPhone during transcription. Apple's handling of speech data is governed by Apple's privacy policies.

Subscriptions & In-App Purchases — RevenueCat & Apple

Subscription and lifetime purchases are handled through RevenueCat, which integrates with the Apple App Store payment system. Payment information is processed by Apple and is not stored by us. RevenueCat receives an anonymous user identifier for the sole purpose of reconciling entitlements across devices.

These third-party providers may process limited technical information necessary to deliver their services.

8. Notifications

The App may send you local notifications(journaling reminders) that are scheduled on your device by iOS. No notification content is sent through a remote push server, and we do not operate an APNs/push infrastructure. You can disable notifications at any time in iOS Settings > Notifications > The Success Diary.

9. Your Rights

You have the right to:

• Access your data — View all your journal entries, AI feedback, and conversation history within the app at any time.
• Delete your data— Permanently delete all your entries and account data from within the app (Settings > Delete all my data). This action is irreversible and removes all data from our servers.
• Modify your preferences— Change your name or feedback style at any time through the app's settings.
• Request your data — Contact us to request a copy of your data.

Your Rights under the GDPR (European Users)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) gives you additional rights regarding your personal data:

• Right of access — to request a copy of the personal data we hold about you.
• Right to rectification — to request correction of inaccurate or incomplete data.
• Right to erasure ("right to be forgotten") — to request that we delete your personal data.
• Right to restrict processing — to request that we limit how we process your data.
• Right to data portability — to receive your data in a structured, commonly used, machine-readable format.
• Right to object — to object to certain types of processing.
• Right to withdraw consent — where processing is based on your consent, you may withdraw it at any time.
• Right to lodge a complaint — you may lodge a complaint with a supervisory authority. Our lead supervisory authority is the Slovak Office for Personal Data Protection (Úrad na ochranu osobných údajov Slovenskej republiky, ÚOOÚ SR — dataprotection.gov.sk).

The legal basis for processing your data is the performance of the contract between you and us (providing the App's functionality) and, where applicable, your consent. To exercise any of these rights, contact us at the email address in Section 14.

Your Rights under the CCPA (California Residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) gives you the following rights:

• Right to know what personal information we collect, use, and disclose.
• Right to delete the personal information we have collected from you.
• Right to correct inaccurate personal information.
• Right to non-discrimination for exercising your CCPA rights.

We do not sell or share your personal information for cross-context behavioural advertising, and we have not done so in the preceding twelve months. To exercise your CCPA rights, contact us at the email address in Section 14.

10. Data Security

We take reasonable measures to protect information processed by the App, including encryption of data at rest and in transit, secure authentication mechanisms, and regular security reviews of our infrastructure.

However, no digital service can guarantee complete security. Users should be mindful of the personal nature of journal entries and exercise judgment about the information they share through the App.

11. Children's Privacy

The App is not directed at children under the age of 13.

We do not knowingly collect personal information from children under 13.

If you believe a child has provided information through the App, please contact us so we can address the issue.

12. Mental Health Disclaimer

The Success Diary provides AI-generated feedback for personal reflection and self-improvement purposes only.

The App does not provide therapy, counseling, medical advice, diagnosis, or treatment. It is not a substitute for professional mental health services.

If you are experiencing a mental health crisis, please contact a qualified healthcare professional or your local emergency services immediately.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

When changes are made, the Effective Date at the top of this document will be revised.

Continued use of the App after updates constitutes acceptance of the revised policy.

14. Contact

If you have questions about this Privacy Policy, you can contact us at:

Samuel Vančo
support@thesuccessdiary.com