Privacy Policy
Last updated: April 24, 2026
What we collect
To run your account we store your email address, a salted/hashed password, and the journal entries, parts, conversations, and highlights you create. We also record the date an account was created and minimal usage metadata (rate-limit counters and error reports).
How your entries are processed
When you save a journal entry, its text is sent to Anthropic's Claude API, which processes the content to identify and cite "parts" and to generate responses in part conversations. Anthropic processes this data as our subprocessor under their API terms. We do not sell your data or share it with other third parties. We do not train any models on your content.
Security
Data is stored in a managed Postgres database (Neon) in the United States. Passwords are hashed with bcrypt. The application runs on Vercel and is served over HTTPS.
Your rights
You can export everything we have about you at any time from the Profile page ("Export My Data"). You can delete your account from the same page, which permanently removes your entries, parts, conversations, and highlights.
Retention
Data is retained as long as your account exists. If you delete your account, your data is removed immediately from the primary database. Managed database backups may retain copies for up to 30 days before aging out.
Cookies
We use a single session cookie for authentication. We do not set advertising or analytics cookies.
Children
IFS Journal is not intended for use by anyone under 16.
Contact
Questions about this policy or your data: reach out via the contact email shown on the About page.