1. Information We Do NOT Collect

OnceJournal is built to respect your privacy. We explicitly DO NOT collect:

• Your journal entries or text content
• Your photos, images, or drawings
• Your moods, emotions, or feelings
• Personal information (name, email, phone number)
• Your tags or organization methods
• Future Letters you write to yourself
• Usage analytics or behavior tracking
• Device identifiers for tracking
• Any other personally identifiable information

2. Data Storage

2.1 Local Storage (Default)

All your data is stored exclusively on your device by default:

• App Container: Journal entries, photos, tags, and drawings are saved locally on your device
• Core Data Database: Data is stored in a local database within the app
• Photos: Images you add are stored locally, not uploaded anywhere
• Drawings: Apple Pencil drawings are saved locally
• Your Control: You have full control to delete data at any time

2.2 iCloud Sync (Optional)

You can optionally enable iCloud sync for backup and cross-device access:

• Apple iCloud: Data syncs through your personal iCloud account
• Encrypted: All iCloud data is encrypted by Apple
• Your Control: You can disable iCloud sync at any time in iOS Settings
• We Cannot Access: We have no access to your iCloud data
• Your Account: iCloud storage uses YOUR Apple ID, not ours

2.3 Data Retention

• Data remains on your device until you manually delete it
• If you uninstall the app without iCloud sync enabled, all data is permanently deleted
• iCloud data persists until you delete it from your iCloud account
• We do not retain any copy of your data on our servers

3. Permissions We Request

OnceJournal may request the following iOS permissions to function:

Permission	Why We Need It	When We Use It
Photo Library (Optional)	To add existing photos to your journal entries	Only when you choose to add photos
Camera (Optional)	To take new photos directly for your journal	Only when you tap the camera button
Notifications (Optional)	To send optional reminders to write in your journal	Only if you enable reminders
iCloud (Optional)	To sync and backup your journal across devices	Only if you enable iCloud sync

Note: All permissions are optional. You can manage these permissions in iOS Settings at any time. The app functions fully without granting these permissions, though some features may be limited.

4. Photos and Images

When you add photos to your journal entries:

• Local Storage: Photos are stored locally on your device within the app
• No Upload: We do NOT upload your photos to any server
• Your Choice: You select which photos to add from your library
• Deletion: When you delete a photo from an entry, it is removed from app storage
• Original Photos: Your original photos in the Photo Library are not modified

5. Apple Pencil Drawings

When you create drawings with Apple Pencil:

• Local Processing: All drawing is processed on your device using Apple's PencilKit
• Local Storage: Drawings are saved locally within your journal entries
• No Upload: We do NOT upload your drawings anywhere
• Your Art: You retain full ownership of all drawings you create

6. In-App Purchases

OnceJournal offers a one-time Premium purchase. Here's what we know:

6.1 Purchase Data

• Handled by Apple: All payment processing is done by Apple through the App Store
• What We Store Locally: Only purchase status (e.g., "user has Premium") stored locally on your device
• What We Don't See: We NEVER see your credit card, payment method, or billing address
• Purchase Verification: Verified through Apple's StoreKit framework locally on your device

6.2 Purchase Option

• Premium Lifetime: One-time purchase for permanent Premium access
• No subscriptions, no recurring charges

6.3 Receipt Validation

• Purchase receipts are validated locally on your device
• No receipt data is sent to external servers
• Apple handles all transaction records according to their privacy policy

7. Third-Party Services

OnceJournal integrates with Apple services only:

7.1 Apple App Store and StoreKit

• Purpose: In-app purchase processing and management
• Data Shared: Purchase transactions (handled entirely by Apple)
• Privacy Policy: Apple Privacy Policy

7.2 Apple iCloud (Optional)

• Purpose: Cross-device sync and backup
• Data Shared: Your journal data (encrypted, stored in YOUR iCloud)
• Privacy Policy: Apple Privacy Policy

7.3 Apple PencilKit

• Purpose: Drawing functionality with Apple Pencil
• Data Shared: None - all processing is on-device

7.4 No Third-Party Analytics

• We do NOT use Google Analytics, Firebase, or any analytics services
• We do NOT use advertising SDKs
• We do NOT use crash reporting services that collect user data
• We do NOT use any tracking pixels or trackers

8. Children's Privacy

OnceJournal is rated 4+ and is safe for all ages:

• We do NOT knowingly collect personal information from children
• No account creation required
• No online features or social sharing within the app
• No user-generated content sharing
• Complies with COPPA (Children's Online Privacy Protection Act)

9. Data Security

We implement security measures to protect your data:

• Local Encryption: iOS automatically encrypts data on devices with passcode/biometric lock
• iCloud Encryption: All iCloud data is encrypted by Apple
• No Network Transfer: Your journal data never leaves your device through our app (except optional iCloud)
• Secure Storage: Uses iOS sandboxing for data isolation
• No External Access: We cannot remotely access your device or data

10. Your Rights and Choices

You have full control over your data:

10.1 Access and Deletion

• View All Data: All journal entries are visible in the app
• Delete Data: Delete individual entries or all data at once
• Export Data: Export your journal as PDF
• Uninstall: Uninstalling the app deletes all local data permanently

10.2 Permission Management

• Revoke photo library access in iOS Settings
• Revoke camera access in iOS Settings
• Disable notifications in iOS Settings
• Disable iCloud sync in iOS Settings

11. Data Sharing and Disclosure

We do NOT sell, rent, or share your data with third parties.

11.1 When We Might Share Data

We may only disclose information if required by law:

• To comply with legal obligations (e.g., court order, subpoena)
• To protect our rights, property, or safety
• To prevent fraud or illegal activity

Note: Since we don't collect user data, there is practically nothing to share. Your journal stays on your device.

12. International Users

OnceJournal is available worldwide:

• All data processing occurs locally on your device
• iCloud data is stored in Apple data centers per your iCloud settings
• Complies with GDPR (EU), CCPA (California), and other privacy regulations
• Available in 7 languages

13. Changes to Privacy Policy

We may update this Privacy Policy from time to time. We will notify you by:

• Updating the "Last Updated" date at the top
• Posting the new policy at this URL
• In-app notification for material changes

Continued use of the app after changes constitutes acceptance of the updated policy.

14. Contact Us