Privacy Policy for AI Journal: Private Diary
Last updated: April 28, 2026
Thank you for using AI Journal: Private Diary ("the App"). Your privacy is our top priority — your journal is the most personal content on your phone. This Privacy Policy explains how we handle your information.
1. Our Core Principle
AI Journal is designed with a privacy-first approach. Your journal content (entries, photos, mood records, AI-generated reflections) is stored exclusively on your device and is never uploaded to our servers. The only data we receive is anonymous, aggregated app-usage analytics and crash diagnostics processed by Google Firebase, which never include the content of your journal.
2. Information Collection
2.1 Locally Stored Data
The following data is stored only on your device and is never uploaded to any server:
- Journal entries (text content, mood, date)
- Activity tags and mood records
- AI-generated analysis results (emotion analysis, reflections, polished text)
- Photos attached to journal entries (stored in App's private directory)
- App preferences (theme, notification settings, lock settings)
- PIN hash (stored locally; we never store your actual PIN)
- AI chat conversation history (stored locally in the App's database)
- Custom writing templates and prompt order preferences
2.2 Anonymous Analytics & Crash Diagnostics
To keep the App stable and improve user experience, we use Google Firebase Analytics and Firebase Crashlytics. These tools collect only the following non-personal, aggregated information:
- App open events, screen views, session duration, retention
- Approximate region/country (derived from IP, IP itself is not retained long-term)
- Device model, OS version, app version, language
- A randomly generated, resettable Firebase Installation ID (not your Google account, not the Android Advertising ID)
- Crash stack traces, ANR reports and the device state at the moment of a crash, to help us diagnose and fix bugs
What is NEVER sent to Firebase or any other server: the text of your journal entries, photos, mood records, AI-generated reflections, AI chat history, your PIN, biometric data, or precise location.
2.3 Information We Do NOT Collect
The App does NOT collect:
- Personal identifying information (name, email, phone number, age, etc.)
- Precise location data
- The Android Advertising ID
- The content of your journal, photos, AI conversations, or mood records
- Contacts, call logs, SMS, or any other device data
- Any information beyond what is described in section 2.2
3. On-Device AI Processing
The App uses AI features (emotion analysis, journaling prompts, text polishing) powered by Google's Gemma 4 model running entirely on your device:
- No cloud processing: Your journal content is never sent to any server, cloud service, or external API for AI analysis
- No AI training: Your data is never used to train or improve AI models
- On-device only: The AI model runs locally on your phone's processor via Android AICore or LiteRT-LM
- Not therapy: AI-generated reflections and emotion analysis are for personal reference only and do not constitute mental health advice
4. How We Use Information
All data stored by the App is used exclusively to provide its core features: journaling, mood tracking, AI reflection, emotion analysis, and statistics. Data never leaves your device.
5. Information Sharing
We do NOT sell your data, and we do NOT share your journal content with anyone. The App contains:
- No advertising SDKs
- No social media SDKs
- No data brokers or marketing trackers
The only data we share is the anonymous analytics and crash diagnostics described in section 2.2, which are processed by Google as our service provider under Google's privacy policy.
6. Third-Party Services
- Firebase Analytics & Crashlytics: Provided by Google. Used to collect anonymous usage statistics and crash reports as described in section 2.2. Journal content is never sent. Uninstalling the App stops all collection immediately. Firebase Privacy & Security
- Google Play Billing: Used only if you choose to subscribe to Pro. Google processes the payment; we receive only a confirmation of subscription status. Pro includes a 3-day free trial; you will not be charged during the trial period. Google's Privacy Policy
- Android AICore / LiteRT-LM: Used for on-device AI processing only. The AI model (Gemma 4 E2B) runs locally on your device — no journal data is sent to Google's servers. LiteRT-LM Documentation
- Google Drive (Optional): If you choose to enable backup, journal data is encrypted and stored in your personal Google Drive appDataFolder. We do not have access to your Google Drive. Data is only uploaded when you explicitly initiate a backup.
- Open-Meteo Weather API: If you enable weather display, the App sends your approximate GPS coordinates to Open-Meteo (a free, open-source weather API) to retrieve current weather. Only coordinates are sent — no personal or journal data. This feature is optional and can be disabled in Settings.
7. Data Security
We take measures to protect your private journal data:
- Local-only storage: All data is stored in the App's private internal storage, inaccessible to other apps
- PIN protection: Optional PIN lock with SHA-256 hashing
- Biometric lock: Optional fingerprint/face unlock via Android BiometricPrompt
- Minimal network access: The App uses INTERNET permission only for optional features (weather display, Google Drive backup, AI model download). Core journaling works fully offline
8. Data Export & Deletion
- Export: You can export all your journal data as CSV or text files at any time from Settings
- Deletion: Uninstalling the App permanently deletes all data stored on your device. We have no backup of your data
9. Children's Privacy
The App does not knowingly collect data from children under 13. As the App collects no data whatsoever, it is inherently compliant with COPPA and similar regulations.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The updated policy will be posted on this page with a revised "Last updated" date.
11. Contact Us
If you have any questions about this Privacy Policy, please contact us at [email protected].
AI Journal: Private Diary 隐私政策
最后更新时间:2026年4月28日
感谢您使用 AI Journal: Private Diary(以下简称"本应用")。您的隐私是我们的首要关注 — 日记是您手机上最私密的内容。本隐私政策说明我们如何处理您的信息。
1. 核心原则
AI Journal 采用隐私优先设计。您的日记内容(条目、照片、心情记录、AI 生成的反思)仅存储在您的设备上,永不上传到我们的服务器。我们仅会通过 Google Firebase 接收匿名、聚合的应用使用统计与崩溃诊断数据,这些数据中绝不包含您的日记内容。
2. 信息收集
2.1 本地存储的数据
以下数据仅存储在您的设备上,永远不会上传到任何服务器:
- 日记条目(文字内容、心情、日期)
- 活动标签和心情记录
- AI 生成的分析结果(情绪分析、反思提问、润色文字)
- 日记附带的照片(存储在应用私有目录中)
- 应用设置(主题、通知设置、锁定设置)
- PIN 码哈希值(本地存储;我们绝不存储您的实际 PIN 码)
- AI 对话历史记录(本地存储在应用数据库中)
- 自定义写作模板和提示排序偏好
2.2 匿名使用统计与崩溃诊断
为保障应用稳定性、改进用户体验,我们使用 Google Firebase Analytics 与 Firebase Crashlytics。这两项服务仅收集以下非个人、聚合信息:
- 应用启动事件、页面浏览、会话时长、留存数据
- 大致地区/国家(基于 IP 推断,IP 本身不长期保留)
- 设备型号、系统版本、应用版本、语言
- 由 Firebase 随机生成且可重置的 Installation ID(不是您的 Google 账号,也不是 Android 广告 ID)
- 崩溃堆栈、ANR 报告及崩溃发生时的设备状态,用于定位修复 bug
永远不会发送到 Firebase 或任何服务器的内容:您的日记正文、照片、心情记录、AI 生成的反思、AI 对话历史、PIN 码、生物识别数据、精确位置。
2.3 我们不收集的信息
本应用不收集:
- 个人身份信息(姓名、邮箱、电话号码、年龄等)
- 精确位置数据
- Android 广告 ID
- 您的日记正文、照片、AI 对话或心情记录的内容
- 联系人、通话记录、短信或任何其他设备数据
- 第 2.2 节描述之外的任何信息
3. 设备端 AI 处理
本应用的 AI 功能(情绪分析、反思提问、文字润色)由 Google Gemma 4 模型提供,完全在您的设备上运行:
- 无云端处理:您的日记内容永远不会发送到任何服务器、云服务或外部 API 进行 AI 分析
- 不用于 AI 训练:您的数据永远不会被用于训练或改进 AI 模型
- 仅在设备上:AI 模型通过 Android AICore 或 LiteRT-LM 在您手机的处理器上本地运行
- 非心理咨询:AI 生成的反思和情绪分析仅供个人参考,不构成心理健康建议
4. 信息使用方式
本应用存储的所有数据仅用于提供其核心功能:日记记录、心情追踪、AI 反思、情绪分析和统计。数据永远不离开您的设备。
5. 信息共享
我们不出售您的数据,也不会与任何人共享您的日记内容。本应用不包含:
- 广告 SDK
- 社交媒体 SDK
- 数据经纪商或营销追踪器
我们对外共享的数据仅限第 2.2 节描述的匿名使用统计与崩溃诊断,由 Google 作为我们的服务提供方按 Google 隐私政策处理。
6. 第三方服务
- Firebase Analytics 与 Crashlytics:由 Google 提供。用于按第 2.2 节所述收集匿名使用统计与崩溃报告,绝不发送日记内容。卸载应用即立即停止所有数据收集。Firebase 隐私与安全
- Google Play 支付:仅在您选择订阅 Pro 时使用。Google 处理支付;我们仅接收订阅状态确认。Pro 包含 3 天免费试用期,试用期内不收费。Google 隐私政策
- Android AICore / LiteRT-LM:仅用于设备端 AI 处理。AI 模型(Gemma 4 E2B)在您的设备本地运行 — 不向 Google 服务器发送日记数据。LiteRT-LM 文档
- Google Drive(可选):如果您选择启用备份,日记数据将存储到您个人的 Google Drive appDataFolder 中。我们无法访问您的 Google Drive。数据仅在您主动发起备份时上传。
- Open-Meteo 天气 API:如果您开启天气显示,应用会将您的大致 GPS 坐标发送到 Open-Meteo(一个免费开源天气 API)获取当前天气。仅发送坐标,不发送任何个人或日记数据。此功能可选,可在设置中关闭。
7. 数据安全
我们采取措施保护您的私密日记数据:
- 仅本地存储:所有数据存储在应用的私有内部存储中,其他应用无法访问
- PIN 保护:可选的 PIN 锁定,使用 SHA-256 哈希
- 生物识别锁:可选的指纹/面部解锁,通过 Android BiometricPrompt
- 最小网络访问:本应用仅在可选功能(天气显示、Google Drive 备份、AI 模型下载)时使用 INTERNET 权限。核心日记功能完全离线可用
8. 数据导出与删除
- 导出:您可以随时从设置中将所有日记数据导出为 CSV 或文本文件
- 删除:卸载本应用将永久删除设备上存储的所有数据。我们没有您数据的任何备份
9. 儿童隐私
本应用不会有意收集 13 岁以下儿童的数据。由于本应用不收集任何数据,因此天然符合 COPPA 及类似法规。
10. 政策变更
我们可能会不时更新本隐私政策。更新后的政策将在本页面发布,并标注新的"最后更新时间"。
11. 联系我们
如果您对本隐私政策有任何疑问,请通过邮箱联系我们:[email protected]。