Privacy Policy

1. Who we are and what this policy covers

One-Line Journal is operated by Umuuwa LLC, doing business as Umuuwa, in Wyoming, United States. In this policy, “we,” “us,” and “our” mean Umuuwa LLC. We decide how personal information is used to operate the app and our website at www.onelinejournal.app.

This policy covers the One-Line Journal mobile app, our website, and support and privacy requests. It explains the information involved, why we use it, who receives it, and the choices available to you. Apple, Google, and other services you use have their own policies for activities they independently control.

For privacy questions or requests, email support@one-line-journal.com. Mail: Umuuwa LLC, 30 N Gould St #63818, Sheridan, WY 82801, United States. Our business address is 30 N Gould St Ste N, Sheridan, WY 82801, United States. Business phone: +1 719-654-8607.

• Email privacy support

2. The main points

• Your saved journal entries are stored with your account so you can return to them. Other journal users cannot see your journal text. The service is not end-to-end encrypted.
• Weekly leagues are part of the app. After onboarding, other members of your league can see your public leaderboard name and activity statistics. There is currently no league-participation opt-out.
• Unsaved drafts stay on the device where you write them. Signing out does not erase them, and deleting an account cannot remotely erase drafts on your other devices.
• We do not sell personal information or share it for cross-context behavioral advertising. We do not use private journal entries for advertising, marketing, or AI training.
• Infrastructure, authentication, notification, website, and diagnostic providers process information needed for their services. Optional bug reports may include information you choose to send.
• You can delete entries and request account deletion in Settings. Contact support@one-line-journal.com for a copy of your information or other privacy requests. Self-service text/JSON export and a separate journal-consent screen are being prepared for an upcoming app update; they are not available in the current released app.

3. Accounts, sign-in, and profile information

Clerk provides our account, sign-in, and session services. Depending on the sign-in method and account settings you choose, information can include an email address, account and provider identifiers, a name, a profile image, authentication credentials handled by Clerk, and session and security information. Our app links your authenticated identity to your journal account.

When you choose Google or Apple sign-in, those services provide the identifiers and basic profile information needed to sign you in, subject to the permissions and choices shown in their sign-in flow. Apple may provide a private relay email address if you choose Hide My Email. We do not request your social posts, friends list, Google Drive files, or Gmail messages through these sign-in options. The app does not offer Facebook or X sign-in.

You can manage supported account details through the account settings interface. If you choose a profile image, Clerk and the relevant system image-picker or camera flow process the image you select. This is separate from journal writing: the app does not currently offer photo, audio, or video attachments to journal entries.

Some accounts also have identifiers or migration records from an earlier authentication system. These support account continuity and prevent an account that has been deleted from being recreated by delayed migration work.

The current released app records general legal acceptance through Clerk. A prepared, unreleased update adds separate account-linked Terms and journal-storage consent receipts with a policy version, account and authentication identifiers, and server-recorded times, linked to archived wording. That update also removes its account-linked versioned receipts and acceptance records through account deletion. Publishing this policy does not create those new receipts or record new consent for existing users.

4. Your journal and sensitive information

When you save an entry, we store its text, date, category, prompt, and related creation or modification information in our Convex backend. We use these records to save and retrieve your writing, show your history, and calculate progress such as streaks and completed days. Saving and synchronizing entries requires an account and an internet connection.

You decide what to write. Your entries may reveal sensitive personal information, including health, racial or ethnic origin, religious or political beliefs, trade union membership, genetic or identifying biometric information, sex life, or sexual orientation. Other personal reflections remain private even when they do not fall within these legal categories. The app does not obtain this information from health databases, medical records, or device sensors. Avoid including another person’s private information unless you have an appropriate reason and permission to do so.

The current released app has a general legal-agreement screen, not a separate explicit-consent choice for sensitive journal information. We do not scan your writing to classify sensitive content or ask you to classify each entry. Contact support@one-line-journal.com about sensitive information, consent withdrawal, or a request to remove information. You can request full account deletion in Settings; signing out alone does not delete stored information.

An upcoming app update is being prepared with separate Terms acceptance and explicit journal-storage consent for sensitive information you choose to include, including continued storage of existing entries, to save, retrieve, and display your writing. Its prepared design starts both choices unchecked and requires both to continue into the journal, with Export journal, Delete account, and Sign out available without agreeing. This update and its consent requirement have not been released or activated. This website publication does not change your current app controls or treat an earlier agreement as the new consent.

Ordinary app access to journal records is restricted to the account that owns them. Authorized operator or provider personnel may have access when necessary for operating, supporting, securing, or troubleshooting the service, or meeting legal obligations. Your journal is not end-to-end encrypted, so it is not a system in which only you hold the means to read stored writing.

We do not publish private journal text to other users or use it for advertising, marketing, or training AI models. There is no current feature that sends your journal entries to a generative-AI service for responses or analysis. This statement about journal entries does not describe optional support feedback, which is explained below.

5. Drafts and information on your device

Unsaved journal text is kept locally using the device’s secure-storage facilities. Separate local indexes contain draft dates and opaque identifiers. Drafts do not synchronize across devices. Signing out leaves local drafts on that device. Deleting your account attempts to clear drafts on the device used for deletion; it cannot remotely clear drafts on your other devices. Removing the app or clearing its storage can also affect local information.

The app stores authentication-session information, notification installation identifiers and registration state, and small preference or housekeeping records. These include dates and attempt counts used to decide when a native app-review prompt may be appropriate; that review bookkeeping does not contain journal text.

Protect access to your device and keep a separate copy of writing you cannot afford to lose. Device backup and restore behavior depends on the platform and your device settings; we do not promise that an unsaved draft is backed up or recoverable.

6. Weekly leagues and visible activity

Eligible accounts participate in weekly leagues automatically after onboarding and acceptance of the app’s legal screen. The current app does not provide a league-participation opt-out. Other participants in your league can see your public leaderboard name, league or tier, rank, points, active days, longest weekly run, and capped character totals derived from activity.

Your private journal text, account email address, and private account name are not displayed in the league standings. Choose a public leaderboard name you are comfortable sharing; you can edit it in Settings. Activity totals may still reveal when or how much you use the app.

We calculate standings from activity records, not from an assessment of the meaning of your writing. These rankings are an app feature and are not used to make decisions about employment, credit, insurance, or other comparable opportunities.

7. Reminders and notification interactions

If you enable notifications, we process your notification choices, reminder time, timezone, installation identifier, platform, push token, and delivery and interaction records. Delivery uses Expo and the Apple Push Notification service or Google Firebase Cloud Messaging. These services receive the information needed to route and deliver the notification.

Notification settings control reminders, weekly recaps, and announcements. The most recent notification-open time can remain with your settings while your account exists. Sent-reminder information, notification interactions, and recent journaling activity help the app pause reminders that appear unhelpful and resume them when you engage again. This does not analyze the meaning of your journal text.

You can change preferences in the app and notification permission in your device settings. Your timezone is used for scheduling; the app does not read your device’s Reminders database or request GPS location. Notification previews may be visible on your device’s lock screen, depending on your device settings.

8. Diagnostics and messages you send us

We use Sentry for technical error reporting and optional bug feedback, and Expo services for app delivery and observability. Technical records can include app version, operating system and device information, error stacks, route names, startup or performance measurements, and installation or session identifiers. Expo can separately receive JavaScript error names, messages and stacks, and native crash information; an error message may include information involved in a failed operation. Services handling network requests also receive an IP address and other connection information.

Our app configuration minimizes Sentry error-report fields and filters identifying user information out of those reports. It disables Sentry breadcrumbs, logs, sampled tracing and profiling, and session replay. Expo observability is a separate integration with its own collection and retention. Older installed app versions may have different diagnostic behavior until updated. These controls are intended to reduce unnecessary data, not to guarantee that every error or voluntary message contains no personal information.

If you use Report a bug, the message and any name, email address, or other material you choose to include are sent to Sentry. Sentry may use enabled feedback-processing features, including automated summaries, categorization, or spam detection. Those processes concern the feedback you submit, not a journal-AI feature. Please leave journal passages, health details, passwords, verification codes, and tokens out of bug reports.

If you email support, the email services involved process your address, message, attachments, and correspondence. We use this information to respond and resolve your request. Opening a support email in the app uses your email application; we do not maintain an in-app support-message inbox for you. Send only the information needed for the request.

9. Website visits, analytics, and external links

Vercel hosts our website. Its hosting and network services handle request information such as IP address, URL, browser or device information, and technical logs needed to serve and protect the site. The marketing website uses Vercel Web Analytics and Speed Insights to understand page visits and website performance.

Website measurements can include the page or route, referring page, selected query information, time, approximate country or region, browser, operating system, device category, network information, and web-performance measurements. Vercel describes these analytics products as not using cookies to track visitors. This does not mean that hosting receives no IP address or that no technical processing occurs.

The self-hosted privacy, terms, and service-provider pages are delivered as static HTML without a Termly embed or client-side analytics scripts. The website host still processes the request needed to serve each page. These pages can be read without JavaScript.

Links to the App Store, Google Play, or other websites take you to those providers. App Store campaign links can let Apple report campaign performance. Their account, download, and website practices are governed by their own notices. The current website does not contain an advertising network, newsletter signup, or an embedded journal editor.

10. Why information is used and applicable legal bases

We use account and journal information to provide the features you request under the service agreement: authentication, storing and retrieving entries, showing progress, and operating the disclosed league feature. Providing the required account information is necessary to create and use a synchronized account; writing an entry and choosing its contents are up to you.

Where UK or European data-protection law applies, the ordinary personal-data bases are performance of the service agreement for those core functions; our legitimate interests in service reliability, security, abuse prevention, and responding to support requests where those interests are not overridden by your rights; compliance with legal obligations; and consent for processing that relies on your permission. You can withdraw consent for consent-based processing without changing the lawfulness of processing before withdrawal.

Sensitive or special-category journal information may require an additional legal condition beyond the ordinary bases above. General Terms acceptance, this Privacy Policy, or the act of writing an entry does not by itself establish separate explicit consent for sensitive content or international transfers. The separate consent mechanism described as upcoming in section 4 is not active in the current released app. This notice does not establish that an additional legal condition has been satisfied merely by describing a planned feature. Contact us about sensitive information in your account or a request to remove it.

We do not use personal information for decisions made solely by automated means that produce legal or similarly significant effects. The activity calculations used for progress, leagues, and reminder engagement have the limited purposes described in this policy.

11. Who receives information

We use Clerk for authentication; Convex for the app backend and stored records; Expo for app updates, observability, and push delivery; Sentry for diagnostics and optional feedback; Vercel for the website and its analytics; and Apple and Google for sign-in, app distribution, and platform push services. Email services process correspondence you send us. The service-provider page explains the information relevant to each service and links to its public privacy and processing information.

A provider’s responsibilities depend on its service and role. Some providers process information on our behalf and also independently control certain account, security, or platform information. Providers can use authorized downstream providers; for example, Expo routes push messages through Apple or Google. We do not describe every company involved as having the same legal role.

We disclose the limited activity information described above to your league participants. We may also disclose information where reasonably necessary to comply with applicable law or a valid legal process, protect rights or safety, investigate abuse, or manage a business transaction such as a merger or transfer of the service, subject to applicable privacy protections. These situations do not grant a general right to publish your private journal.

We do not sell personal information or share it for cross-context behavioral advertising. Operational disclosures to the services described here are different from selling information or using an advertising network.

Earlier policy pages and a privacy-request form were hosted by Termly. The replacement pages do not send new policy-page visits or new email requests to Termly. Previously submitted Termly requests, and copies of information already held by providers, are subject to their applicable retention and request processes; replacing this page does not erase those records.

12. International processing

Umuuwa LLC is based in the United States. Our infrastructure providers can process information in the United States and other countries where they or their downstream providers operate. Those countries may have different data-protection rules from the country where you live.

International transfers are subject to the safeguards and requirements that apply to the particular service and transfer. Provider privacy notices, processing terms, and subprocessor information are linked on the service-provider page. Contact us to ask about a transfer affecting your information and the relevant safeguards or how to obtain a copy. Using the service is not treated as express consent to an international transfer.

13. Retention and deletion

You can delete an individual saved entry or entries for a date in the app and request account deletion from Settings. Contact support if you cannot access your account or need help before agreeing to updated terms. Account deletion disables journal access when the process begins and starts a workflow to remove the authentication account, saved journal, and associated application records. Completion can take time while server work is processed or retried.

The periods below describe application cleanup rules, not a promise that every copy in every provider system is erased at an exact time. We may retain records where needed to meet applicable law, handle an unresolved request or dispute, or protect the service, and must consider any retention limits that apply.

• Account and saved journal records: kept while your account exists unless you delete them or account deletion removes them.
• Upcoming versioned acceptance and consent receipts: the prepared update keeps these with your account and removes them through account deletion. This new receipt system is not active in the current released app. Archived policy wording is separate from individual receipts.
• League history: generally eligible for daily cleanup after eight weeks, with exceptions for outstanding membership or settlement work.
• Notification delivery and daily-budget records: eligible for scheduled weekly cleanup after 60 days.
• Stale notification installations: eligible for cleanup after 90 days without being seen. Active installations refresh that timestamp.
• Identity deletion markers and certain migration records: retained indefinitely to prevent delayed authentication or migration work from recreating deleted accounts. They retain necessary identity or workflow identifiers, not journal text.
• Local drafts: remain subject to device storage and the limits described in section 5. Signing out does not delete them; other devices cannot be remotely cleared by account deletion.
• Exported copies: remain in the folder, device, or cloud service you chose. Account deletion does not erase those copies. You control their storage and removal.
• Provider logs, diagnostic records, feedback, and backups: have separate, service-specific retention. Expo Observe documents a minimum of 90 days for metrics, not a universal maximum. We do not promise a single deletion deadline covering all provider records or backups.
• Support and privacy correspondence: retained for handling the request, related follow-up, and applicable recordkeeping obligations. Ask us about the records relevant to a particular request.

14. Security

We use authenticated access, ownership checks for ordinary journal requests, secure device-storage facilities for certain local data, and controls provided by our infrastructure services to help protect information. Access needed for administration, support, and operations is distinct from ordinary user access. No internet transmission or storage system is guaranteed to be completely secure.

The service does not provide end-to-end encryption or a guaranteed backup/recovery service for your writing. Keep your sign-in credentials and device secure, and do not send passwords or verification codes to support. Tell us promptly if you believe someone has accessed your account without permission.

15. Your privacy rights and how to make a request

Depending on the law that applies to you, your rights may include access to personal information, a copy or portable export, correction, deletion, restriction, objection to certain processing, withdrawal of consent, or appeal of a decision on a request. These rights can have exceptions and verification requirements. We will not discriminate against you for exercising rights protected by law.

Email support@one-line-journal.com with your request and enough information to identify your account. Please do not include your password or journal contents. We may request proportionate information to confirm your identity, protect another person’s information, or confirm an authorized agent’s authority. We will explain any further information needed and respond within the period required by applicable law, including explaining an applicable extension or a refusal.

The current released app does not yet have the new Export journal control. Email support@one-line-journal.com to request a copy of your information or assistance with your current app version. You do not need to accept the upcoming journal-storage consent to contact us or exercise applicable privacy rights.

The upcoming self-service Export journal feature is designed to create readable text (.txt) or structured JSON (.json) without a support request. Its prepared implementation includes saved entries returned during export, with dates, prompts, categories, writing, and timestamps, plus unsaved drafts on the exporting device. It excludes drafts on other devices and entries added after export begins; concurrent edits or deletions can affect the result. This feature has not been released.

That upcoming export uses the system folder picker. A synced location such as iCloud Drive can make the file available on your computer, or you can transfer it yourself. Your chosen storage provider handles its copy under its own terms and settings. The prepared export does not encrypt files or provide an import feature. Any copies you keep must be protected and removed separately from your account. The marketing website does not provide account sign-in or journal downloads.

You can edit supported profile details and your public leaderboard name in Settings, delete entries in the app, and request account deletion. Contact us for access, export assistance, withdrawal requests, or other applicable rights; you do not need to use a Termly privacy-request form. The prepared app update adds export and deletion access on its new agreement screen without first accepting that version.

If you disagree with our response, reply to the privacy contact with “Privacy appeal” and explain your concern. Where an appeal right applies, we will review the request and explain the outcome and any further options. You may also complain to the data-protection or privacy authority responsible for your location. EEA residents may contact their local supervisory authority; UK residents may contact the Information Commissioner’s Office.

• Request access, export, correction, or deletion
• EEA data-protection authorities
• UK Information Commissioner’s Office

16. Additional information for United States residents

The categories described in this policy include identifiers and account details; information you voluntarily provide in writing, profile images, or correspondence; app, device, internet, and diagnostic activity; approximate location derived by network services and your timezone; and activity statistics inferred from app use. Journal text can contain sensitive personal information you choose to include. Sources are you, your use of the service, your chosen sign-in provider, and the technical providers described here. Purposes, recipients, and retention are described in the corresponding sections.

Where a state privacy law applies, you may have rights to know or access information, correct it, obtain a portable copy, delete it, and opt out of sale, targeted-advertising sharing, or certain significant profiling, together with applicable sensitive-information rights. We do not conduct the sale, targeted-advertising sharing, or significant-decision profiling described here. We do not use sensitive journal information to infer characteristics for advertising.

We do not currently change the service’s behavior in response to a browser’s Do Not Track setting. Global Privacy Control is a different signal associated with applicable sale/sharing opt-out rights; we do not sell or share information for cross-context behavioral advertising regardless of whether that signal is enabled. This does not remove other rights you may have under applicable law. Use the request methods in section 15, including requests through an authorized agent where allowed.

• California privacy-rights information

17. Minimum age

The service is intended for people aged 13 or older, or 16 or older in the European Union. If you are under the age of majority where you live, the Terms require permission from a parent or guardian. We do not offer a parental-authorization process that allows children below these minimum ages to use the service.

We do not knowingly collect personal information from people below these minimum ages. If you believe an ineligible child has provided information, contact support@one-line-journal.com. When we become aware of such an account, we will take reasonable steps to deactivate it and delete the information, subject to the deletion and legal-retention requirements that apply.

18. Changes to this policy

We may update this policy as the service or our practices change. A published revision will show its updated date here. We will provide any additional notice and obtain any consent required by applicable law before a change that requires them. A changed date or continued use alone is not treated as providing any legally required notice or consent.

The app links to this page from its legal and settings screens. The current released app does not automatically repeat agreement for every website revision. The upcoming versioned agreement flow described above has not been activated; publishing this page does not activate it or record existing users as agreeing to new terms or consent. We will explain the applicable changes when that app update is introduced. Contact us for questions about a revision or your existing information.