Privacy policy

This is the policy for the app, and the one the app links to from Settings. It is short because the app collects little — most of what follows describes things that stay where you put them.

What stays on your device

Entries, photographs, voice notes, your answers to the reflection questions, the question sets you have chosen, and your settings. The journal database is encrypted where it is written, with a key held in your phone’s keychain or keystore. If you switch location on, coordinates are recorded on the entry and stay on the device — they are never sent anywhere and never turned into a place name, because every geocoder is a network service.

What we collect

Three things. Your email address and a user id, when you sign in — signing in with Apple lets you hide your address, and if you do we only ever see Apple’s relay address. Your subscription status, so a subscription bought on one phone works on your others; payment details stay with Apple and Google and we never see them. And nothing you write: no entry, photograph, voice note, answer, title or tag has any route off your device except the exports and backups you start yourself.

What leaves your device

Four things, none of which carries your writing. The app downloads question-set definitions from spryng.io over HTTPS — a download of our configuration, not an upload of yours. Signing in sends an identity token to Firebase Authentication. Subscribing checks the store’s receipt with Apple or Google. And anything you export or back up is handed to your phone’s share sheet; where it goes from there is your choice, and once it leaves, it is governed by whatever you sent it to rather than by us.

Google Drive backup, and what the app may do with Google data

If you back up to Google Drive, the app asks for one permission — drive.appdata — which grants access to a private application folder it creates in your Drive and to nothing else. It cannot see, open, list or change any other file you hold there. It writes one encrypted file, which is encrypted on your device with a passphrase you choose before it is uploaded, and it reads that file back only when you restore. Nothing is uploaded unless you start a backup. Sensemaking Personal’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. That data is used only to provide the backup and restore you asked for: it is not sold, not transferred to anyone else except as needed for that feature or where the law requires it, not used for advertising, and not used to train generalised artificial-intelligence or machine-learning models. You can withdraw the app’s access at any time from your Google Account’s third-party connections page, and delete the file itself from Drive’s application-data storage. Backing up to iCloud works the same way, in your own iCloud container.

Analytics, and its limits

The app counts which of its six screens get used, along with the app version, your device model, operating system and country, and a random per-install identifier that is not tied to your account and is reset if you reinstall. Nothing about what you write is included — not an entry, a title, a prompt, an answer, a tag, or a count of any of them. There is no crash reporter, no advertising identifier and no third-party tracker. You can switch analytics off in Settings, and the app works the same either way.

Deleting things

Deleting the app deletes everything it holds. An entry you delete inside the app is recoverable for 30 days and then removed. Settings → Account → Delete account removes your email address, user id and subscription record from our systems — it does not cancel a subscription, which only Apple or Google can do from your store account, and it does not touch anything on your device. Deleting your account and deleting the app are different things; if you want both gone, do both.

Where the account data is held, and who to ask

Firebase Authentication and our subscription check run on Google Cloud, which processes that data on our behalf, and it may be processed outside your country. The app is not directed at children, and the Terms of Use require you to be 18 or older. For access, correction, deletion or anything else, write to privacy@spryng.io.

Also for this app: Terms of serviceDeleting your account This page describes the app; the full Privacy Policy and Terms of Use cover your Spryng account, this website and the rest of the platform, including the arbitration and governing-law terms.

Back to Sensemaking Personal