Privacy Policy

1. Information We Collect

1.1 What We Do NOT Collect

• We do not read, store, or transmit the content of your journal entries to our servers unless you explicitly enable cloud sync.
• We do not collect your name, email, or phone number unless you create an account.
• We do not sell your personal data to third parties.

1.2 Automatically Collected Information

• Device type and operating system version
• App version
• Anonymous usage analytics (screens visited, feature usage)
• Crash reports and performance metrics
• Advertising identifier (IDFA on iOS, Advertising ID on Android), used only with your consent to measure marketing campaigns

1.3 Local Storage

Journal entries, voice recordings, and emotion analysis results are stored locally on your device by default. If you enable cloud sync, this data is encrypted and stored in our secure Supabase infrastructure.

2. Advertising & Attribution

Kokoro Nikki does not display third-party ads inside the app. To understand which marketing campaigns introduce new people to Kokoro Nikki (for example, ads on Meta/Facebook and Instagram), we use AppsFlyer, a mobile measurement partner, and may receive attribution data from advertising networks such as Meta. This measurement relies on device identifiers and, on iOS, the advertising identifier (IDFA) — but only after you grant permission through Apple's App Tracking Transparency (ATT) prompt. If you decline, the app works exactly the same and no advertising identifier is collected. On Android, you can opt out via 'Opt out of Ads Personalization' in your device settings.

3. How We Use Information

• To provide and improve the app experience
• To perform on-device emotion analysis of your entries
• To generate personalized insights and visualizations
• To measure the effectiveness of our marketing campaigns (only with your consent)
• To diagnose technical issues and improve stability

4. Information Sharing

We do not sell your personal information. We may share limited data with the partners below — anonymized and aggregated where possible, and, only with your consent, advertising identifiers used to measure our marketing campaigns:

• AppsFlyer (attribution and marketing campaign measurement)
• Meta / Facebook (advertising attribution for campaigns we run)
• Analytics providers (anonymous usage data)
• Law enforcement when required by law

5. Third-Party AI Services

To provide emotional analysis of your journal entries, we transmit the text content of your entries to OpenAI, LLC, along with your language preference and writing style preferences collected during onboarding (used to tailor the analysis). We do not share your email, name, device identifiers, or any other personal information with OpenAI.

OpenAI processes this data solely to return emotional analysis results. Per OpenAI's API data usage policy, data submitted via the API is not used to train OpenAI models. For details, see OpenAI's API Data Usage Policies.

You can disable AI emotional analysis at any time in the app's Settings under "Privacy". If disabled, no journal content will be transmitted to OpenAI.

6. Data Security

We implement industry-standard security measures including encryption at rest and in transit. Local data is protected by your device's security features. Cloud-synced data uses AES-256 encryption.

7. Children's Privacy

Kokoro Nikki is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us at contact@kokoro-nikki.com.

8. Your Rights

8.1 GDPR (European Union)

If you are in the EU, you have the right to access, rectify, delete, and port your data. You may also object to processing or withdraw consent at any time.

8.2 CCPA (California)

California residents have the right to know what data is collected, request deletion, and opt out of data sales. We do not sell personal data.

8.3 How to Exercise Your Rights

Contact us at contact@kokoro-nikki.com with your request. We will respond within 30 days.

9. Data Retention

Local data persists until you delete it or uninstall the app. Cloud-synced data is retained while your account is active. You can request full data deletion at any time.

10. International Transfers

If you use cloud sync, your data may be processed in servers located outside your country. We ensure adequate protection through standard contractual clauses and encryption.

11. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes through the app or by email if you have an account.

12. Regional Information

• Argentina: Protected under Law 25,326. Contact AAIP for complaints.
• Spain: Supervised by AEPD (Agencia Española de Protección de Datos).
• Mexico: Rights under INAI (Instituto Nacional de Transparencia).

13. Contact Us

If you have questions about this Privacy Policy, contact us at: