Privacy Policy

Your local journal includes what you choose to write or select inside the app:

• journal entries and reflections you write;
• moods you log;
• your answers to guided reflection questions;
• personal questions you create;
• a simple note of when you last opened the app, used only to show a gentle welcome back after time away.

The journal does not ask for your name, phone number, age, contacts, photos or location. Optional App Lock recovery uses a verified recovery email. Browser membership uses a separate email sign-in, and billing providers process purchase information, as described below.

Your journal entries, moods, reflection answers and personal questions are stored locally in the app’s storage on your device. Quietly Woven does not upload your journal entries, moods, answers or personal questions to our servers, and we cannot see or read them.

Quietly Woven does not provide cloud backup or sync. Your journal is not copied to another device automatically.

Browser membership uses an email account provided through Neon Auth. A one-time code verifies your email so you can find your browser purchase again. Neon processes your email address, account identifier and session information. RevenueCat receives an opaque account identifier to associate your subscription with that account.

The browser uses a secure session cookie to keep you signed in. This authentication cookie is separate from the browser storage that holds your journal. Signing out or signing in on another device does not transfer your writing.

Your subscription account and App Lock recovery registration are separate. Neither creates a cloud backup. App Lock recovery restores access to an existing local journal; it cannot restore deleted entries or a purchase.

App Lock is optional. You can choose a PIN or supported device biometrics. Setup verifies a recovery email before enabling the lock. If you forget the PIN or cannot use biometrics, a fresh email code lets you choose a new PIN while keeping the journal on your device.

The recovery service processes your recovery email address, a random device registration identifier, a digest of the device recovery credential, and temporary verification and abuse-prevention records. It uses a keyed digest of the request network address for rate limits. Hosting and email providers may also process network and delivery information needed to operate the service. The recovery API never receives your PIN, journal entries, moods, answers or personal questions.

Verification codes expire after ten minutes, allow a limited number of attempts and can be used once. Codes are stored as keyed digests by the recovery API; the email provider processes the delivered message. Recovery addresses are used for App Lock verification and recovery, not marketing.

Quietly Woven Premium is offered as a monthly or annual subscription. Core journaling in the mobile app does not require a purchase. The browser edition’s membership requirements and available plans are shown before purchase.

Mobile purchases are processed by Apple (App Store) or Google (Google Play), using your store account. Browser purchases are processed through RevenueCat Billing and Stripe. These services process the payment, billing and transaction information needed to complete and manage a purchase. The app does not receive your full payment-card number. Journal entries are not included in billing or sign-in requests.

See the Quietly Woven Terms of Use for renewal, cancellation, purchase restoration and refund information.

The app uses RevenueCat, a subscription-management service, to show available subscription options, manage purchases and restores, and confirm whether Premium is active. RevenueCat Billing manages browser subscriptions with Stripe as the payment processor.

The app can connect to RevenueCat to check subscription status even if you have not purchased. Mobile subscription checks use an app user identifier; verified browser accounts use an opaque account identifier. These checks do not include your journal content. Checkout may ask for billing and contact details needed for payment. RevenueCat, Stripe, Apple and Google may process purchase, transaction, device and diagnostic information under their own privacy policies:

• RevenueCat Privacy Policy
• Stripe Privacy Policy
• Apple Privacy Policy
• Google Privacy Policy

Quietly Woven does not include analytics, crash-reporting, advertising or tracking tools. It shows no ads, and we do not use your information for advertising or sell it.

Subscription services use RevenueCat, Stripe, Apple or Google, according to your purchase platform. Browser subscription sign-in uses Neon Auth. Website and browser hosting use Netlify. Optional email recovery also uses an API host, a PostgreSQL database provider and an authorized email provider to register recovery addresses, check verification codes and deliver recovery messages. These services receive recovery details, not journal content. The app’s typefaces and images are built into the app and are not loaded from outside services.

These providers may process information outside Canada, where it may be subject to that country’s laws. Hosting and security services may process IP addresses, request times, browser information and service logs needed to deliver and protect the service.

• Neon Privacy Policy
• Netlify Privacy Policy

We do not share, sell or rent your journal content, because it stays on your device.

If you choose Export journal backup, the app opens your device’s share options so you can send a copy of your journal, including your personal questions, wherever you choose. What happens to that copy then depends on where you send it.

Quietly Woven does not request access to your camera, microphone, location, photos or files. It uses the internet for subscriptions, browser sign-in and optional email recovery, and may use your device’s vibration for gentle haptic feedback when you save. If you choose biometric App Lock, the operating system handles fingerprint or Face ID authentication. Quietly Woven receives the authentication result and does not receive or store biometric templates.

Your journal stays on your device until you remove it. You can:

• delete individual entries in the app;
• use Delete all journal data on the in-app Privacy screen to permanently remove every saved reflection, mood and personal question from that device;
• clear the app’s storage or remove the app, which can permanently remove local journal data.

Because there is no cloud backup, deleted data and data removed by uninstalling cannot be recovered by us. Export a backup first if you want to keep a copy. Any exported copies or separate device backups are managed separately.

Verified recovery registrations are retained until you request deletion through the contact address below. Clearing app storage or uninstalling removes the device’s local recovery credential, but does not automatically delete the server registration. Expired pending challenges and old rate-limit records are cleared during daily maintenance. Abandoned unverified registrations become eligible for deletion after 24 hours.

Contact support to request access, correction or deletion of your subscription account or recovery records. We may need to verify your request and retain information required by law. Support email correspondence is retained as needed to handle your request and meet applicable recordkeeping obligations.

Billing and transaction records held by Apple, Google, RevenueCat or Stripe are kept under their own policies and legal obligations. Cancel through Settings → Manage subscription or the store where you purchased. Clearing local data, removing the app or deleting an account does not cancel a subscription.

Your journal is protected by your device and its operating-system security. Optional App Lock adds a PIN or device biometrics to control opening the app. Native lock credentials use operating-system secure storage; the browser stores a salted PIN digest. App Lock does not separately encrypt your journal entries. Recovery uses HTTPS and one-time codes with expiry, attempt limits and resend limits. We recommend using a device passcode and keeping your operating system up to date.

The local journal does not ask for a name or age, and journal content stays on the device. Optional App Lock recovery and browser membership process email and account information as described above. Parents or guardians should supervise a child’s use, permissions and purchases. They can contact us with questions or privacy requests about information a child has provided.

If the way Quietly Woven handles information changes, we will update this page and the “Last updated” date above, and provide any additional notice or consent required by applicable law.

Questions, requests for access, correction or deletion, and privacy concerns can be sent to The Quest Family at support.questfamily@gmail.com.