Privacy Policy

Last Updated: August 10, 2025

Website Notice

This privacy policy applies primarily to the GrateMoment mobile app. This website (gratemoment.com) is informational only and does not collect personal data or use cookies for tracking.

Introduction

This Privacy Policy describes how our journal application ("we," "our," or "the app") collects, uses, and protects your personal information when you use our services. We are committed to protecting your privacy and ensuring the security of your personal data.

By using our app, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our services.

Data Collection

We collect the following types of information:

Personal Journal Entries

  • Text content of your journal entries
  • Timestamps of when entries were created or modified
  • Entry metadata such as mood ratings, tags, and categories

Photos and Media

  • Images you attach to your journal entries
  • Photo metadata including timestamps and basic file information
  • Images are stored securely in encrypted cloud storage

Voice Recordings

  • Audio recordings you create for voice journal entries
  • Transcriptions of voice recordings (processed securely)
  • Audio file metadata and timestamps

Authentication Data

  • Email address (when using email authentication)
  • Profile information from third-party providers (when using social sign-in)
  • Unique user identifiers generated by our authentication system

Usage Analytics

  • App usage patterns and feature engagement
  • Device information (type, operating system, app version)
  • Performance data and crash reports
  • General location data (country/region level only, not precise location)

Technical Data

  • IP addresses (temporarily, for security purposes)
  • Device identifiers and characteristics
  • Network connection information
  • App settings and preferences

We do not collect:

  • • Precise location data
  • • Contacts or address book information
  • • Other apps installed on your device
  • • Sensitive personal information beyond what you choose to share in your journal

Data Usage

We use your data for the following purposes:

Core App Functionality

  • Storing and displaying your journal entries across devices
  • Syncing your data securely across multiple devices
  • Providing search functionality within your entries
  • Organizing entries by date, tags, and categories

AI-Powered Features

  • Analyzing journal entries to provide personalized insights
  • Generating mood patterns and emotional trends
  • Providing writing suggestions and prompts
  • Creating summaries of your journaling patterns
  • Transcribing voice recordings to text

Personalization

  • Customizing the app experience based on your preferences
  • Providing relevant writing prompts and suggestions
  • Tailoring insights and analytics to your journaling style
  • Remembering your app settings and preferences

We do not:

  • • Sell your personal data to third parties
  • • Use your journal content for advertising purposes
  • • Share your entries with other users
  • • Use your data for purposes unrelated to the app's functionality

Data Storage

Cloud Infrastructure

Your data is stored using secure cloud services that provide enterprise-grade security and reliability:

  • Database Services: Stores your journal entries, metadata, and app settings
  • File Storage: Securely stores photos and audio files with encryption
  • Authentication Services: Manages user accounts and authentication tokens
  • Processing Services: Processes data securely in controlled environments

Encryption and Security Measures

  • All data is encrypted in transit using industry-standard protocols
  • Data at rest is encrypted using enterprise-grade encryption
  • Our cloud providers implement automatic encryption for all stored data
  • Regular security audits and compliance with industry standards

Third-Party Services

We integrate with carefully selected third-party services to provide our functionality:

Cloud Infrastructure Providers

  • Secure authentication services for user sign-in
  • Encrypted database services for data storage
  • Secure file storage for media files
  • Performance monitoring and analytics services
  • Backup and disaster recovery services

Platform Integration Services

  • Third-party authentication providers for social sign-in
  • Push notification services for app communications
  • App distribution platform services
  • Payment processing services (where applicable)

AI and Processing Services

  • Machine learning services for AI-powered insights and analysis
  • Natural language processing for journal entry analysis
  • Speech-to-text services for voice transcription
  • Content analysis services for personalized recommendations

Third-Party Data Handling:

  • • We only share data with third parties when necessary to provide app functionality
  • • Data shared is limited to the minimum required for specific services
  • • Third parties handle data according to their own privacy policies
  • • You can review our current third-party integrations by contacting us

User Rights

You have the following rights regarding your personal data:

Data Access Rights

  • View all personal data we have collected about you
  • Download a complete copy of your journal entries and media
  • Access your account information and settings
  • Review data processing activities and purposes

Data Export

  • Export your journal entries in multiple formats (JSON, PDF, plain text)
  • Download all photos and audio files in their original formats
  • Export account data and settings
  • Portable format suitable for migration to other services

Account Deletion

You can permanently delete your GrateMoment account and all associated data at any time directly from within the app. This process is immediate and irreversible.

How to Delete Your Account:

  1. Open the GrateMoment app on your device
  2. Navigate to the Settings screen
  3. Scroll down to the "Account" section
  4. Tap "Delete Account"
  5. You may be asked to re-authenticate (sign in again) for security purposes
  6. Confirm the deletion when prompted

What Gets Deleted:

  • Your user profile and account information
  • All gratitude journal entries and content
  • All photos and voice recordings
  • AI insights, analytics, and patterns
  • Backup files and exports
  • Account settings and preferences
  • Your Firebase authentication account
  • All associated data from our servers and databases

Important Notes:

  • • Permanent Action: Account deletion cannot be undone. Once deleted, your data cannot be recovered.
  • • Backup First: We recommend exporting your data using the backup feature in Settings before deleting your account.
  • • Complete Removal: All your personal information is permanently removed from our systems within 24 hours.
  • • Security: You may need to re-authenticate during the deletion process to ensure account security.

Data Retention

Active Account Data Retention

  • Journal entries: Retained indefinitely while your account is active
  • Photos and audio files: Stored as long as associated entries exist
  • Account information: Maintained for the duration of your account
  • Usage analytics: Aggregated data retained for up to 2 years

Inactive Account Policy

  • Accounts inactive for 3 years receive reactivation notice
  • After 4 years of inactivity, account is scheduled for deletion
  • 90-day notice period before automatic deletion
  • Option to reactivate account during notice period

International Data Transfer

Your data may be processed and stored across our service providers' global network of data centers to ensure optimal performance, reliability, and security.

For European Union Users:

  • EU-US Data Privacy Framework compliance
  • Standard Contractual Clauses (SCCs) for data transfers
  • Adequacy decisions where applicable (UK, Switzerland, etc.)
  • GDPR Article 46 safeguards implemented

Security Measures:

  • End-to-end encryption during all data transfers
  • TLS 1.3 encryption for data in transit
  • Certificate pinning and validation
  • Regular security audits of transfer processes

Contact Information

Privacy Team Contact

  • Email: privacy@gratemoment.com
  • Response time: Within 48 hours for general inquiries
  • Urgent privacy matters: Within 24 hours

Data Protection Officer

  • Email: dpo@gratemoment.com
  • Role: Overseeing all data protection compliance matters
  • Available for: Complex privacy questions and concerns

Policy Updates

Notification of Changes

  • Users will be notified of material changes via email
  • In-app notifications for significant policy updates
  • 30-day notice period for major changes affecting user rights

Policy Management

  • Historical policy versions are maintained and accessible
  • Changes are documented with clear explanations
  • Effective dates are clearly indicated for all updates