Privacy Policy

Last updated 16 August 2026

What the AI sees

To turn what you say into something structured — a plan, a checklist, a transcript, the text inside a photo — your content is sent to Google Cloud's Vertex AI. This is what makes capture work, and it is not optional for those features.

Three things are true about that, and we think all three matter:

• It is not used to train models. Google's terms state they will not use your data to train or fine-tune any AI model without your prior permission or instruction. We have not given it.
• It is not retained. Vertex AI caches inputs for up to 24 hours by default. We have turned that off at the project level, so your content is processed and not kept.
• Some of it happens on your phone. Basic understanding of what you typed runs on-device, which is why capture still works without a connection.

One caveat we would rather state than bury: Google may log requests to detect abuse of their service. That is their policy, not a choice we make on your behalf, and it applies to everyone using their platform.

What we store, and how

Your content is stored in Google Firebase, encrypted in transit and at rest. To be clear about what that does and does not mean: it is not end-to-end encrypted. If it were, the app could not read the text inside your photos, transcribe your voice notes, or search them by meaning — those features require the content to be readable by the service.

Text extracted for search — transcripts, text found in images, summaries — is indexed so you can find things later. That index is scoped to your account.

What we collect

• Your email address, and a name if you give one, to create your account and to reply to you.
• The content you create: notes, media, plans, links, checklists, journeys and tags.
• Anonymous usage data about how the app performs — crashes, errors, timings.
• Device type and OS version, so we can fix things that only break on some devices.

We do not buy data about you, and we do not build advertising profiles.

Email

There are two kinds, and we treat them differently.

• Transactional email — confirming your waitlist sign-up, or acknowledging a message you sent us — contains no tracking. No open tracking, and their links are not rewritten or monitored.
• Marketing email, which you only receive after confirming your email address, may record whether the message was opened and which links were clicked. We use this to understand which updates are useful, never to build a profile of you. Unsubscribe links are excluded from click tracking.

Every marketing email can be unsubscribed from in one click, and we honour it immediately.

Sharing

When you share something or collaborate with someone, only the specific items you choose are shared, with the level of access you choose. You can revoke it. Everything you have not shared stays private to you.

What you can do

• Export your data.
• Delete individual items, or your entire account and everything in it.
• Choose what is shared, with whom, and at what level.
• Unsubscribe from marketing email in one click.

Children

Everything Journal is not intended for people under 13.

Getting in touch

Questions about any of this go to our contact page, and for now they are answered by the person who built the app.