Privacy Policy
Last updated: May 25, 2026
AisahaLog is a personal journaling service with optional AI features. This policy explains what we collect, why we use it, when we share it, and what choices you have.
Information We Collect
- Account information: email address, display name, password hash, verification status, subscription tier, and security/session data.
- Journal content: entries, titles, journals, tags, mood values, dates, imported content, uploaded image metadata, and images you attach.
- Local-only content: Try Without Account stores journal data in your browser until you delete it, export it, or choose to sync it into an account.
- Support and contact messages: name, email, subject, message, and related metadata when you contact support.
- Payment records: subscription status, payment identifiers, plan details, invoice or checkout metadata, and webhook records. We do not store full card numbers.
- Technical and security logs: IP-derived hashes, user agent, request path, status code, session hash, failed login and rate-limit events, media errors, AI usage metadata, and similar operational records.
How We Use Information
- Provide the app: save and sync your journal, organize entries, serve your media, export your data, and keep your account available across devices.
- Protect the service: authenticate users, prevent abuse, investigate errors, enforce rate limits, and maintain operational logs.
- Support paid features: create and manage Pro subscriptions, verify payment events, apply storage limits, and handle billing support.
- Respond to support: investigate bugs, answer questions, and handle account or billing issues.
- Improve reliability: understand crashes, failed requests, storage issues, and service health.
Optional AI Features
AI features run only when you choose an AI action. They are not required for journaling.
Before text is sent for AI processing, AisahaLog attempts to anonymize or mask direct identifiers and private details, then shows you the exact reviewed text. You can cancel instead of sending.
We do not intentionally send your account ID, email address, or billing details with AI prompts. The reviewed text should not be tied back to your account unless you leave identifying details in it.
Anonymization is not perfect. We cannot guarantee every sensitive detail will be removed, and we do not control how external AI systems process text after it is sent. Do not send anything to AI that you are not comfortable having processed outside AisahaLog.
AI outputs may be inaccurate, incomplete, or unsuitable. Use them for reflection only, not as medical, legal, financial, or mental-health advice.
When We Share Information
- Service providers: hosting, email delivery, storage, security, and similar infrastructure providers may process data only to help operate AisahaLog.
- Payments: if you choose Pro checkout, Razorpay processes payment information under its own terms and privacy policy. AisahaLog receives subscription and payment status information needed to activate or manage Pro.
- AI processing: if you choose an AI action, the reviewed text is sent to an external AI service for that request.
- Legal and safety: we may disclose information if required by law, to protect rights and safety, to prevent abuse, or to investigate security incidents.
We do not sell your journal content.
Security and Privacy Controls
- Account access requires authentication and verified email for private app APIs.
- Private media is served only to the owning account.
- Journal text is protected with application-level encryption on the server, and Extra Privacy Lock adds a separate password for sensitive entries.
- If you forget an Extra Privacy Lock password or a password-protected backup password, we may not be able to recover locked content or backup files for you.
- No online service can guarantee perfect security. Keep your password, exports, and devices safe.
Retention, Export, and Deletion
You can export your notes as JSON or Markdown. You can also download a password-protected backup ZIP from the app.
You can delete your account from Settings. Account deletion removes your account, entries, journals, tags, media records, and owned media files. Operational logs are anonymized where they identify the deleted account.
Some records may remain for a limited time where needed for security, legal compliance, payment records, backup integrity, or dispute handling.
Try Without Account data remains in your browser until you clear browser storage, delete it in the app, or uninstall the browser profile/app.
Your Choices
- Access and update your profile from Settings.
- Export your journal from Settings before closing an account.
- Delete entries, media, local browser data, or your account.
- Choose whether to use AI. You can journal without AI.
- Contact support from the app or website for privacy requests.
Children
AisahaLog is not intended for children under 13. If you believe a child provided personal information, contact support so we can review and delete it where appropriate.
Changes and Contact
We may update this policy as AisahaLog changes. Material changes will be reflected on this page with a new update date.
For privacy questions or requests, use the contact form on the website or inside the app.