Voice Journal privacy policy

Last updated 27 October 2026. Voice Journal is published by Potenco Pty Ltd ("we"). Contact: voicejournal@potenco.com.au.

The short version

Your journal stays on your phone. Speech is transcribed on the device. Entries are stored in an encrypted database that only the app can open. We have no analytics, no ads and no tracking. The only time any journal text leaves your phone is when you choose to use Claude reflections, or when you take part in a Circle.

On your device

• Microphone: used only while you record an entry. Audio is transcribed on the device and isn't saved or uploaded.
• Journal entries, moods, tags and on-device reflections: stored in an encrypted (SQLCipher) database on your phone. The key is kept in the system keystore. App backups are switched off, so entries aren't copied to cloud backups.
• Biometric lock: optional. It's handled by Android or iOS, and we never see your fingerprint or face data.
• Model downloads: the first time you use speech or on-device reflections, the app downloads AI models from Hugging Face. Like any download, that request reveals your IP address to Hugging Face. No journal data is sent.

Claude reflections (optional, paid)

If you turn on Claude reflections and sign in (with Google on Android, or with Apple on iPhone):

• What we store: your Google or Apple account ID and email address (with Apple, this can be a private relay address), your credit balance, and a ledger of purchases (Google Play purchase tokens or App Store transaction IDs) and reflections (token counts and the amount charged). This is used to sell and spend credits, and for nothing else.
• Journal text: when you ask for a reflection, the text of that entry is sent over an encrypted connection to our server and passed to Anthropic's Claude API to write the reflection. Our server doesn't store or log journal text. Under its commercial terms, Anthropic processes the text to answer the request and doesn't use it to train its models.
• Photos: when you start a Memory walk with Claude reflections on, a small copy of the photo you chose is sent the same way so Claude can write questions about what's in it. Our server doesn't store or log photos. With Claude reflections off, the photo never leaves your phone.
• Payments: purchases go through Google Play or the App Store. We never see your card details.

Circles (optional)

A Circle is a small group, such as friends or family, who each explore the same question. Joining one needs the same Google or Apple sign-in.

• What the circle sees: the circle's name and the first names members choose. They never see who wrote what.
• Your own words: your recording stays on your phone. To suggest the assumptions under your view, the app either works on the phone or, with Claude reflections on, sends your answers to Claude the same way as a reflection. Our server doesn't store or log them.
• What you share: only the one-line view and the assumptions you approve and seal. These are stored without your name or account, kept apart from the record that you sealed, which is only used to count who's done. Notes you add while exploring are reworded by Claude before they're stored, and also carry no name.
• AI members: a circle can add up to 4 AI members, each with a persona, to bring in other perspectives. They're marked as AI in the member list. Claude writes their view and assumptions from the round's question alone; they never see anything members write.
• How long: a round's shared content, its map and notes are deleted from our server 7 days after the round closes. Your app keeps its own copy on your phone.

Sharing

We don't sell or share your data. The only third parties involved are Google and Apple (sign-in and payments), Anthropic (reflections, memory-walk questions and Circle maps you ask for), Railway (hosting for our server) and Hugging Face (model downloads).

Retention and deletion

Uninstalling the app deletes everything stored on your device. Your account data stays until you delete it in Settings, or ask us to. See Delete your account.

Children

Voice Journal is not directed at children under 18.

Changes

If this policy changes, we'll update the date at the top of this page.