Legal · DayInk
Privacy Policy
App: DayInk
Company: Zenithro Pty Ltd
Effective date: 17 August 2026
Last updated: 20 August 2026
DayInk ("we", "our", or "us") provides the DayInk journaling application ("App") available on the Apple App Store. This Privacy Policy explains what information we collect, how we use it, with whom we share it, and the rights you have over your data.
By using the App you agree to the practices described in this policy. If you do not agree, please do not use the App.
1. Information We Collect
1.1 Information you provide (stored on your device)
The journal content you create is stored on your device. We do not receive or store it on any server we operate.
- Journal entries — text, photos, and drawings you create in the App.
- Mood selections — the mood label and intensity you assign to entries.
- Tags and activity labels — the organisational metadata you apply to entries.
- Journal names and settings — preferences you configure within the App.
- AI memory — if you enable AI features, durable facts extracted from your entries (see Section 3), stored on your device and viewable and deletable at any time.
- Communications — if you contact us for support, we receive the content of that message and your email address.
1.2 Information collected automatically
- Location data — if you grant location permission, the App attaches your approximate location (place name and coordinates) to entries at the time of creation. It is stored with your entries — on your device and, when iCloud is enabled, in your private iCloud account. It is never sent to us or to any AI service.
- Motion activity — if you enable 'Activity in Entries' in Settings, the App uses your device's motion data (Apple Core Motion) to label entries with an activity such as walking or running. This is processed on your device and stored with your entries; it is never sent to us or to any third party.
- Firebase App Check — uses Apple's DeviceCheck framework to verify that requests originate from a genuine DayInk installation. This process does not expose a persistent identifier to us.
- Firebase Authentication (anonymous) — an anonymous session used only to operate AI features and support requests. It involves no account, no sign-in, and is not linked to your journal content.
- Firebase Crashlytics — collects crash reports and diagnostic data when the App encounters an error. Reports include device model, OS version, and app state at the time of crash. No journal content is included.
- Firebase Analytics — collects anonymous, aggregated usage events (screen views, feature usage) to help us improve the App. No journal content is included.
1.3 Subscription and payment information
All purchases and subscription management are handled entirely by Apple via the App Store and StoreKit. We do not collect, store, or process your payment card details or billing address. Apple's privacy policy governs payment data.
2. How We Use Your Information
| Purpose | Data used | Legal basis (GDPR) |
|---|---|---|
| Providing core journaling features | Journal entries, photos, mood, tags, location — on your device | Performance of contract |
| Generating AI features (Coach, Writing Companion, Guided Reflections, memory, weekly summaries) | Entry excerpts after on-device removal of personal details — see Section 3 | Consent |
| Verifying genuine app installation (abuse prevention) | DeviceCheck attestation token | Legitimate interest |
| Improving the App (crash analysis, usage patterns) | Content-free, aggregated crash and usage data via Firebase | Legitimate interest |
| Responding to support requests | Email address, message content | Performance of contract |
| Complying with legal obligations | Any data required by applicable law | Legal obligation |
3. AI Features and Third-Party Processing
When you enable and use an AI feature, short excerpts of the relevant entries are sent — after personal details are removed on your device (see Section 3.1) — to Google's Gemini API, accessed via Firebase AI Logic, solely to generate a response for that feature. This content is not stored on any server we operate. The table below lists the AI features and what is transmitted for each.
| Feature | What is sent to Google (after on-device removal of personal details) |
|---|---|
| AI Coach | Excerpts of the entry you are reflecting on, to generate the coach’s response. |
| Writing Companion | Excerpts of the entry you are currently writing, to offer in-the-moment reflections. |
| Guided Reflections | Excerpts of the entries relevant to your chosen reflection topic. |
| Personal memory extraction | Excerpts of entries, to identify durable facts to remember (stored on your device). |
| Weekly AI summaries | Excerpts of the past week’s entries, to produce a short written summary. |
3.1 On-device removal of personal details
Before any text is transmitted to Google, the App runs an on-device process that detects and replaces personal identifiers so they are not sent:
- Personal names → replaced with [Person 1], [Person 2], etc.
- Phone numbers → replaced with [phone]
- Email addresses → replaced with [email]
This removal runs automatically and is always on whenever AI features are used. There is no setting to turn it off.
3.2 Google's processing and retention
Data sent to the Gemini API is processed transiently to generate a response and is not used to train Google's models. This processing is governed by the Google Cloud Platform and Gemini API terms, under which Google acts as a data processor on our behalf and provides data protection equivalent to that described in this policy. For details, refer to Google's Data Processing Addendum.
3.3 Personal memory
When AI features are enabled, DayInk may extract durable facts from your entries (for example, people or projects you mention often) to give AI responses helpful context. This memory is stored on your device. You can view every memory item, and delete any or all of it, at any time in the App.
3.4 Disabling AI features
You can turn off all AI features at any time in Settings. Core journaling features continue to work without them, and when AI is disabled no entry content is sent to Google.
4. Data Storage and Sync
4.1 On-device storage
All journal entries, photos, mood data, and settings are stored in a local database on your device. This database is protected by iOS Data Protection — it is encrypted at rest using your device passcode and is inaccessible when the device is locked.
4.2 iCloud sync
When iCloud is enabled on your device, your journal data syncs automatically via Apple's CloudKit to your own private iCloud account. This is free and automatic — it is not a paid feature and there is nothing to switch on inside DayInk. We do not have access to your CloudKit container. The data is encrypted in transit and at rest by Apple, and Apple's iCloud privacy policy governs this sync. You can turn sync off by disabling iCloud for DayInk in iOS Settings.
4.3 What we do not operate
We do not operate any server that permanently stores your journal entries or personal journal content. There is no DayInk backend database containing your journal data.
5. Sharing of Information
We do not sell, rent, or trade your personal information. We share data only in the following limited circumstances:
- Google (Gemini API via Firebase AI Logic) — to generate AI feature responses, as described in Section 3.
- Apple — for CloudKit sync, App Store subscriptions, and App Check verification.
- Firebase (Google) — for content-free crash and usage diagnostics, as described in Section 1.2.
- Legal requirements — if required by law, regulation, court order, or to protect the rights, property, or safety of DayInk, our users, or others.
- Business transfer — in the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before this occurs and give you the option to delete your data.
6. Data Retention
- Journal entries, photos, AI memory, and all locally stored data — kept on your device until you delete them or uninstall the App.
- iCloud-synced data — kept in your personal iCloud account according to Apple's policies; deletable via iOS Settings.
- AI requests — processed transiently by Google to generate a response and then discarded; not used to train models (see Section 3.2).
- Content-free crash and usage data — collected via Firebase and retained according to Google/Firebase policies.
- Support communications — retained for up to 24 months from last contact, then deleted.
You can export your data at any time via Settings → Export, and delete all of your data at any time from within the App. Deletion is irreversible.
7. Your Rights
7.1 All users
- Access — you can view all your data within the App at any time.
- Export — you can export everything as a PDF, or as an open .zip archive containing Markdown, JSON, and your photos, via Settings → Export.
- Deletion — you can delete individual entries, your AI memory, or all of your data from within the App. iCloud-synced data can also be deleted via iOS Settings. To request deletion of any data we hold (e.g. support messages), contact us through our support form.
- Correction — you can edit any journal entry at any time.
- AI controls — AI features are enabled only with your explicit consent, you can disable them at any time in Settings, and you can view and delete your AI memory in the App.
7.2 European Economic Area and UK residents (GDPR)
If you are located in the EEA or UK, you have additional rights under the General Data Protection Regulation (GDPR):
- Right to access — request a copy of the personal data we hold about you.
- Right to rectification — request correction of inaccurate data.
- Right to erasure ("right to be forgotten") — request deletion of your personal data where there is no legal basis for continued processing.
- Right to restriction of processing — request that we limit how we use your data.
- Right to data portability — receive your data in a structured, machine-readable format (available via the in-app export feature).
- Right to object — object to processing based on legitimate interests.
- Right to withdraw consent — where processing is based on consent, such as AI features, withdraw it at any time without affecting the lawfulness of prior processing.
- Right to lodge a complaint — you have the right to lodge a complaint with your local data protection authority.
To exercise any of these rights, contact us through our support form. We will respond within 30 days.
7.3 California residents (CCPA / CPRA)
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
- Right to know — request disclosure of the categories and specific pieces of personal information collected about you.
- Right to delete — request deletion of personal information we have collected, subject to certain exceptions.
- Right to correct — request correction of inaccurate personal information.
- Right to opt-out of sale or sharing — we do not sell or share your personal information for cross-context behavioural advertising.
- Right to non-discrimination — we will not discriminate against you for exercising your privacy rights.
To exercise your California rights, contact us through our support form. We will respond within 45 days as required by law.
7.4 Australian users (Privacy Act 1988)
Zenithro Pty Ltd is an Australian company subject to the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Australian users have the right to access and correct personal information we hold about them, and to complain about a breach of the APPs. To make a request or complaint, contact us through our support form. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
8. Children's Privacy
DayInk is not directed to children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children under these ages. If you believe a child under 13 has provided information to us, please contact us through our support form and we will promptly delete that information. Parental controls can be used to restrict access on shared devices.
9. Sensitive Content
Certain AI features may be disabled when highly sensitive language is detected. In these cases, relevant support resources may be displayed within the App. Entries identified as sensitive are not transmitted to any third-party service.
10. International Data Transfers
When you use AI features, your data is processed by Google's infrastructure, which may be located outside your country of residence, including in the United States. Google's data processing addendum incorporates Standard Contractual Clauses approved by the European Commission, providing an appropriate safeguard for transfers from the EEA.
11. Security
We apply technical and organisational measures to protect your information, including iOS Data Protection encryption at rest, TLS encryption in transit, and Firebase App Check to prevent unauthorised API use. No method of transmission over the internet or electronic storage is 100% secure; however, we take reasonable steps to protect your data.
12. Third-Party Links and Services
The App may display links to third-party websites (e.g., crisis support resources). These sites are governed by their own privacy policies. We are not responsible for the privacy practices of third-party sites and encourage you to review their policies before providing personal information.
13. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you via an in-app notice and update the "Last updated" date at the top of this page. Continued use of the App after changes become effective constitutes acceptance of the revised policy.
We will provide at least 30 days' notice before material changes take effect, where reasonably practicable.
14. Contact Us
If you have questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact us:
DayInk · Zenithro Pty Ltd
Support: zenithro.com.au/dayink/support
ABN: 73 691 889 620
Location: Melbourne, Australia
We aim to respond to all privacy enquiries within 30 days.