Privacy Policy

You can use What Remains without an account. If you create one, we store your email address and an account identifier (a random UUID) so you can sign in and so your cloud backup can be scoped to you.

If you sign in with Google, Google returns your email address and basic profile information to our authentication provider. We do not receive your Google password. Passwords for email accounts are stored only as salted hashes by our authentication provider; we never see them.

• Journal entries — title, text, date, mood — are always written to your device's local storage first.
• Photos you attach are stored on your device as image files, resized before upload.
• If Cloud Backup is off, your entries and photos never leave your device except in exports you create yourself.
• If Cloud Backup is on, entries and photo files are copied to your private area of our cloud storage so they can be restored and shared across your own devices.
• Voice journaling uses your device's built-in speech recognition. No audio is recorded, stored or sent to us. Only the resulting text becomes a journal entry, exactly like typed text.

We do not read your journal content, and it is never used for analytics, recommendations, advertising or machine-learning training.

Cloud Backup is a paid subscription sold through Google Play. Purchases are made and processed by Google. We never receive your card number, billing address or any payment credentials.

RevenueCat processes purchase receipts on our behalf and tells us whether your subscription is currently entitled. The identifier we give RevenueCat is your What Remains account identifier; when you are signed out, a non-personal anonymous identifier is used instead.

What Remains stores only: your subscription's active/expired state, renewal and expiry timestamps, the store product identifier, the RevenueCat identifiers linked to your account, and the subscription lifecycle events RevenueCat sends us. We also store a running total of how many bytes your cloud backup uses, so the storage allowance can be enforced.

• App preferences (theme, text size) are stored on your device only.
• On the Android app, an install-level identifier provided by the app container is used solely as a placeholder subscription identity while you are signed out. It is replaced by your account identifier once you sign in and reset when you sign out.
• Our servers process ordinary request data (such as IP address and timestamps) as part of normal operation and security logging by our hosting and backend providers.

What Remains contains no analytics SDK, no advertising SDK, no tracking pixels and no third-party cookies. This page sets no cookies.

Cloud-backed journal data is stored in a managed PostgreSQL database and private object storage operated by Supabase on infrastructure in the United States. All traffic between the app and our servers is encrypted in transit with HTTPS/TLS.

Every database row and every stored photo is protected by row-level security policies and storage policies scoped to your account identifier, so one account cannot read or modify another's data. Photo files live under a private path unique to your account and are served only through short-lived signed links to you.

Account deletion and other privileged operations are performed only on our server, using the identity proven by your signed-in session — the app never accepts a user identifier supplied by the client.

No online service can promise perfect security. Journal content stored in our database is not additionally end-to-end encrypted, so treat it as data we technically could access even though we do not.

We use a small number of processors, each for a specific purpose:

• Supabase — authentication, database, and photo storage for cloud backup.
• Google (Sign in with Google) — only if you choose Google sign-in; Google authenticates you and returns your email and basic profile.
• Google Play Billing — processes subscription purchases; Google receives your payment details, we do not.
• RevenueCat — validates purchase receipts and reports entitlement status; receives your subscription identifier and store receipt data, not your journal.
• Despia — provides the native Android app container that wraps What Remains and stores your subscription identity locally on the device.
• Lovable — hosting for the web application and its server functions.

These providers process data on our instructions to run the service. We do not sell personal data, we do not share it with advertisers or data brokers, and we do not disclose journal content to anyone except where we are legally compelled to.

• Local journal data stays on your device until you delete it, delete the app, or clear its data.
• Cloud-backed entries and photos are kept while your account exists and Cloud Backup is enabled.
• Turning off Cloud Backup stops synchronization; it does not by itself erase what is already stored.
• Deleting Cloud Backup removes your entries and photos from our servers. Your local journal is untouched and remains on your device.
• Deleting your account removes your cloud entries, photos and photo metadata, your subscription record and related billing events, and finally your account itself.

Deletion from our live systems happens immediately. Routine encrypted infrastructure backups taken by our providers may still contain residual copies for up to 30 days, after which they expire and nothing remains. We cannot promise instant erasure from those rolling backups.

Deleting your account does not cancel a Google Play subscription. Cancel it in the Play Store under Payments & subscriptions.

• Use the app entirely offline, with no account and no cloud copy.
• Export your full journal as a file at any time from Settings.
• Turn Cloud Backup off, or delete your cloud backup while keeping the app and your device journal.
• Delete your account and all associated cloud data permanently, in Settings → Account → Delete Account.
• Request access to, correction of, or deletion of your data by emailing us.

For deletion instructions, including how to request deletion if you can no longer sign in, see whatremains.io/delete-account.

What Remains is intended for adults and is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has created an account, contact us and we will delete it.

If this policy changes materially we will update the date above and, where appropriate, notify you in the app.

Questions, requests, or privacy concerns: javier@javierbravo.tech.