Privacy Policy

BalanceJournal (“BalanceJournal”, “we”, “us” or “our”) is a free wellness app — available on the web and on iOS and Android — that helps you track your mood, build habits, manage tasks and goals, and keep a personal journal. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and the rights you have over it.

We are based in Poland (European Union) and process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable national law. By creating an account or using BalanceJournal, you acknowledge the practices described in this policy.

1. Who is the data controller

The data controller responsible for your personal data is the operator of BalanceJournal. You can reach us at any time regarding privacy matters at contact@balancejournal.app.

2. What data we collect

We only collect the data we need to provide the service:

  • Account data — your email address and first name, used to create and identify your account and to sign you in.
  • Your content — the data you create inside the app, including journal entries, mood records, habit and wellbeing metrics, tasks, checklists and goals. This content is private to your account.
  • Device push token — a token issued by your device so we can send you push notifications (for example reminders), if you enable them.
  • Preferences and settings — such as your interface language and time zone, so the app behaves correctly for you.
  • Technical and usage data — basic information generated when you use the app (for example anonymous product analytics events, see Section 6), used to keep the service running and to understand how features are used.

BalanceJournal is intended for users who are at least 18 years old. We do not knowingly collect personal data from anyone under 18.

3. How we use your data and our legal bases

Under the GDPR we rely on the following legal bases for processing your personal data:

  • Performance of a contract (Art. 6(1)(b) GDPR) — to create and maintain your account, store and display your content, and provide the core features of the app.
  • Your consent (Art. 6(1)(a) GDPR) — for optional features such as the AI summary (see Section 5), push notifications and any non-essential analytics. You can withdraw consent at any time.
  • Legitimate interests (Art. 6(1)(f) GDPR) — to keep the service secure, prevent abuse, fix bugs and improve our product, in a way that does not override your rights and freedoms.
  • Legal obligation (Art. 6(1)(c) GDPR) — where we are required to retain or disclose data to comply with the law.

4. Transactional emails

We send service-related emails — such as account confirmation, sign-in and important notices — through Resend, an email delivery provider acting as our processor. These are transactional messages necessary to operate the service; we do not send marketing emails without your separate consent.

5. AI summaries (optional)

BalanceJournal offers an optional “AI summary” feature. When — and only when — you choose to use it, the text of the relevant journal entry is sent to OpenAI, a third-party provider, which processes it to generate a summary that is returned to you.

  • This feature is never triggered automatically — it runs only at your request.
  • Using it means your entry text is processed by OpenAI as a sub-processor outside our own infrastructure. We recommend you avoid including data you are not comfortable sharing with a third-party AI provider.
  • If you never use the AI summary, no entry content is sent to OpenAI.

6. Analytics

We may use PostHog to understand how the app is used — for example which features are opened and how usage flows work — so we can improve BalanceJournal. This is limited to product-usage events and does not include the content of your journal entries. Where required, analytics are used only with your consent, and you can opt out.

7. Push notifications

Push notifications (for example reminders) are delivered through Expo's push service using your device push token. You can disable notifications at any time in your device settings or in the app.

8. Sharing and sub-processors

We do not sell your personal data, and we do not share it with third parties for their own marketing. We share data only with the service providers (processors) needed to run BalanceJournal:

  • Resend — transactional email delivery.
  • OpenAI — processing of journal text for the optional AI summary.
  • Expo — push notification delivery.
  • PostHog — product analytics (where used).

We may also disclose data where required by law, or to protect our rights, users or the security of the service.

9. Hosting and international transfers

BalanceJournal is hosted on our own server located in the European Union. Some of our processors (such as the AI provider) may process data outside the EU/EEA; where that happens, such transfers are made under appropriate safeguards permitted by the GDPR, such as Standard Contractual Clauses.

10. How long we keep your data

We keep your account data and content for as long as your account is active. When you delete your account, your personal data and content are permanently deleted (see Section 12), except where we are legally required to retain limited information for a defined period. Backups are rotated and overwritten on a regular cycle.

11. Cookies and local storage

We use cookies and browser local storage only for what is necessary to make the app work — primarily to keep you signed in (session) and to remember your preferences (such as language and time zone). We do not use third-party advertising cookies. Any non-essential storage (for example analytics) is used in line with Section 6.

12. Deleting your account

You can delete your account directly in the app at any time: Settings → Delete account. Deleting your account permanently removes your personal data and content from our systems, subject only to the limited legal retention noted above. This action cannot be undone.

13. Your rights under the GDPR

You have the right to:

  • Access the personal data we hold about you;
  • Rectification — correct inaccurate or incomplete data;
  • Erasure — have your data deleted (“right to be forgotten”);
  • Data portability — receive your data in a portable format;
  • Object to certain processing, and restrict processing;
  • Withdraw consent at any time, without affecting prior processing.

To exercise any of these rights, contact us at contact@balancejournal.app. You also have the right to lodge a complaint with your local data protection authority — in Poland, the President of the Personal Data Protection Office (UODO).

14. Security

We apply technical and organisational measures to protect your data — including encrypted connections, access controls and regular maintenance. No system can be guaranteed perfectly secure, but we work to keep your information safe.

15. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you in the app or by email. Continued use of BalanceJournal after changes take effect means you accept the updated policy.

16. Contact

For any privacy question or request, contact us at contact@balancejournal.app.