Privacy Policy
Ex:mens of relation
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Ex:mens of relation is a personal reflection journal for adults. Journal text, emotion labels, mood ratings, entry dates, pinned status and optional relationship links are saved on your iPhone and synchronized to our backend. Relationship names or nicknames, dates, breakup reasons and initial emotional pain ratings are also saved locally and on the server. Your optional local name, chosen healing phase, breakup-day counter date, completed practices and reminder preferences stay on your iPhone. The app automatically creates a random installation secret stored in device-only Keychain; the server stores a cryptographic hash and creation timestamp to authorize access. No account, password, email sign-in, public profile or cross-device recovery is provided. Requests to the API and this website pass through Cloudflare, which terminates public HTTPS and proxies requests to our Railway-hosted service. These infrastructure providers can process network addresses, request times, paths, response codes and technical connection information. The app has no advertising or third-party analytics SDK.
How we use information
We use journal and relationship information to save your pages, show your mood and emotional patterns, calculate real journal streaks and relationship summaries, and synchronize your private records. Local profile information personalizes your journal and healing checklist. The installation secret authorizes only that installation's records. Optional reminders are scheduled locally through Apple's notification system. PDF exports are created on your iPhone for your chosen date range and sent only to destinations you select in the system share sheet. Infrastructure processes requests to deliver, secure and operate the service. We do not use journal content for advertising or sell it.
Service providers and sharing
Cloudflare provides the public HTTPS proxy for the API and privacy website, and can process request contents and connection metadata while forwarding traffic to the service. The backend and its persistent SQLite storage are hosted on Railway. Cloudflare, Railway and their infrastructure providers process service traffic and hosting information to operate and secure the service, and authorized service operators can access hosted systems for maintenance. Journal content is not logged by the application server; operational errors use request identifiers and error types. Infrastructure request logs may still contain technical connection information. No external analytics, email delivery, social, payment or map provider is integrated. If you export and share a PDF, the app or person you choose receives its contents under their own practices. We may disclose information where legally required. This app does not publish your entries to other installations.
Data retention
Local journal files and pending synchronization operations remain on your iPhone until you delete them or remove the app. The journal file is excluded from device backups by the app; device-only Keychain retains the installation secret, which may survive app removal. Server records remain until deletion is requested with the valid installation secret. There is no automatic expiry configured. The token hash and its creation timestamp remain after deleting journal content so retrying a deletion remains safe. The app keeps only the latest temporary PDF export, replacing it on the next export; shared copies are controlled by their recipients. We do not configure a separate application backup archive. Cloudflare may retain technical request and security logs, and Railway may retain infrastructure logs or storage backups under their operational practices; we do not assert a fixed retention period for those provider-managed records.
Deleting your information
You can delete a journal entry or a relationship in the app; deleting a relationship also deletes its linked entries. Settings contains a confirmed Delete all my data action, which clears the local journal, relationships, profile and practice progress and queues deletion of server journal and relationship records. If offline, the app keeps a deletion-pending marker and completes the request when connected; new writes are disabled until it completes. Deletion removes active database records, not a promise of immediate forensic erasure of filesystem or provider backup remnants. Deleted content must not be intentionally restored into active use from backups. Exported or recipient-held copies are not removed by this action. Removing the app alone does not send a server deletion request. Without the installation secret, we cannot reliably locate or recover your private records through a login or email address.
Permissions and your choices
Notifications are optional and requested only when you enable a daily practice reminder. You can turn reminders off in Healing or withdraw notification permission in iPhone Settings. The app does not request location, camera, photos, microphone or contacts permissions. Network access is used for private journal synchronization and opening the public privacy policy. Choosing a system share destination is your separate action; no automatic email or outbound message is sent.
Your privacy rights
You can view and edit your records, export a dated PDF and delete records in the app. Depending on where you live, you may have additional rights to access, correct, delete or restrict processing of personal information. For privacy questions or rights requests, contact val.sotheran@icloud.com. This is a public privacy contact, not an app account or automated delivery service. Please do not send journal text or your installation secret by email. Because the service has no account identity, we may be unable to match an email request to private installation data; the authorized in-app controls are the direct way to access and delete it.
Security
The app uses HTTPS for server communication, device-only Keychain for a cryptographically random installation secret, protected atomic local file writes, and server-side authorization that scopes every private query to the installation token hash. Public HTTPS terminates at Cloudflare, which forwards requests over HTTPS to the pinned Railway service origin. The server database is stored on a persistent Railway volume. Journal content is not end-to-end encrypted and is not separately encrypted by the application in the server database. Authorized infrastructure operators may access hosting systems. No system can guarantee absolute security. Keep your iPhone protected and consider who can access exported documents. We do not embed a shared credential in the app or allow unauthenticated journal access.
Children’s privacy
Ex:mens of relation is intended for adults aged 18 and over reflecting on relationships. It is not designed for children and does not knowingly solicit their information. If you believe a child has provided personal information, contact val.sotheran@icloud.com. Reflection prompts and mood charts are not medical advice, diagnosis, therapy or emergency assistance.
Changes to this policy
We may update this policy when the app's processing or hosting practices change. The effective date on this page identifies the current version. Material processing changes will be reflected here and, where appropriate, communicated in the app. You can return to this public page through Settings at any time.