Short, because there's not much to hide.

Where your data lives. Your sessions, your settings, and the AI's running memory of you are stored on your device — in your browser or on your phone. We don't run user accounts and we don't keep a database of your journals. You can export everything as a file, or erase everything, whenever you want, from inside the app.

What travels, and when. When a session ends, the words from that session — plus the running memory and any parked worries — are sent over an encrypted connection to our server, which passes them to OpenAI's API to write your reflection. The reflection and the updated memory come back to your device. Wedo not store, log, or read your session content on our server, and we set OpenAI's storeflag to off on every call, so they don't keep it as retrievable data either.

The part we can't promise yet. OpenAI keeps a separate copy of API requests for up to thirty days for abuse monitoring, and the storeflag does not turn that off — only an approved zero-retention agreement does. We are applying for one. Until it's granted, your session text sits in OpenAI's abuse-monitoring logs for up to thirty days, and we'd rather tell you that than let you assume otherwise. Nobody trains on it: API data isn't used to train OpenAI's models, and we don't use your words to train anything. See their API data policies.

Voice. Speech-to-text runs on your device when your hardware supports it. On the web, your browser's speech service handles transcription per your browser vendor's policies. Audio never reaches us — only the text does.

What the microphone hears. Speech recognition picks up whatever is nearby — a television, someone else in the room, a call on speakerphone. The app cannot tell voices apart and does not try to guess, so anything it hears is written down as though you said it. If something lands in a transcript that wasn't you, you can correct the words or keep that session out of your reviews. Either way it stays in your log, and nothing is quietly reinterpreted on your behalf.

Keeping the audio. In the iPhone app you can switch on "Keep the audio" to save each spoken session's recording. It is off unless you turn it on, the files stay on your device, they are never uploaded, and they are never part of writing your reflection. Delete them one at a time with the session, or all at once from Privacy.

How you sounded. When a session is spoken, the app measures a handful of numbers about the delivery on your device — how much of the window you filled, how often you paused, whether you got quieter by the end. Those numbers travel with your words to write the reflection. The audio they were derived from does not.

What we don't do. No ads, no trackers, no analytics tied to your identity, no selling data, no "anonymized insights" hustle. The subscription is the business model. That's the whole point of it.

Payments. Subscriptions are handled by Apple through your Apple Account. We never see your payment details.

Questions? Say hi: audditude.com/contact. This policy covers the 5 Minutes of Chaos web and iOS apps, by Audditude.