Account-scoped, RLS-isolated.
Auth + database run on Supabase with row-level security policies that physically prevent one user's queries from returning another user's data. Not a promise — a constraint enforced by the database itself.
Personal Context IntelligenceYour knowledge is yours.
Your knowledge is yours.
We've made that mathematically true.
Personal Context Intelligence requires a different privacy posture than generic AI. Architecture, not promises. Here's what data exists, where it lives, which third parties touch it, what we do with it, and what Big Tech does that we won't.
AI that knows you — not the internet. Grounded in your own sources, journals, and surveys; private by default; yours to export anytime.
Account-backed sync with browser cache.
Your work syncs to your account for durability and hydrates into your browser for speed. Clearing local storage clears the local convenience layer, not your work.
Export anytime. Plain markdown. One click.
The same export the day you sign up, the day you cancel, the day you delete. We earn trust by making leaving easy.
The list is short because we mean every line.
- We do not train AI on your journals, sources, or chats. Our model-provider terms prohibit it — OpenAI (no training on API data) and the paid Google Gemini API (which contractually does not use prompts or responses to improve Google products). We use only no-training provider tiers.
- We do not sell your data. Not to advertisers. Not to data brokers. Not to "research partners." Ever.
- We do not run ads. The product is funded by you paying us, not by your attention being sold.
- We do not ad-target you. We do not build behavioral profiles for marketing.
- We do not retain raw individual data for any "Insights API" — anything aggregate is thresholded; no individual rows ever.
The contrarian frame, with receipts.
Each row pairs a Big Tech behavior (substantiated by their public policies or product behavior) with ours. If anything below stops being true — for them or for us — we update this page within seven days.
Big Tech
The free, consumer Gemini tier uses your conversations to "improve services" — Google's own terms say the unpaid tier trains on your inputs, with human review. Read the policy yourself: it's there.
Journal Genie
When we offer a Gemini model, we call the PAID Gemini API tier — which contractually does NOT use your prompts or responses to train or improve Google products. We never touch the free tier that does. Your journal, your sources, your chats — never training data, on any provider we use.
Big Tech
ChatGPT does not retain durable memory of your sources or context between sessions by default. Each conversation starts cold. The product surface that "remembers" runs server-side and is governed by OpenAI's data policy.
Journal Genie
Journal Genie persists your sources, journals, surveys, and Studio artifacts in YOUR account. We are the durable-memory layer ChatGPT doesn't have. And we hold ourselves to a "no training" stance with our providers.
Big Tech
Big Tech AI products are funded by ads, attention capture, or training-data extraction. The business model is the conflict of interest.
Journal Genie
Journal Genie is funded by subscriptions. Free has a real ceiling. Pro is $12/month. That's the entire business model.
Named third-party processors
Each row says what they hold, what they can't do, and how long they hold it.
Supabase
Authentication + the account-backed database. Holds your account data, encrypted at rest and in transit. Row-level security physically prevents one user's queries from returning another user's data. Daily automated backups on managed Postgres, verified by an automated backup-integrity check.
OpenAI
Model calls for grounded chat and question generation — the default ("Automatic") model path. We send the prompt + retrieved context for each call; we do not send your account identifier in conversational form. No training on API data (the OpenAI default); inputs are retained briefly for abuse monitoring, then deleted, per our API tier.
Google (Gemini API)
Model calls when you choose a Gemini model in the picker, plus image captioning and generation. We use the PAID Gemini API tier, which contractually does not use your prompts or responses to train or improve Google products — never the free tier, which does. We send the prompt + retrieved context per call.
Stripe
Payment processing when paid billing is used. We never see your card. PCI scope sits entirely with Stripe.
Sentry + Better Stack
Observability. Error tracking and synthetic monitoring. Personally identifying fields in logs are redacted server-side via the logger's automatic-redaction layer.
The fine print, no spin.
What we promise, what's live, and how to hold us to it — in plain English.
- Privacy and Terms are written plain-language first. The stance on /privacy and /terms is exactly what we do — not legalese that quietly contradicts it.
- GENIE rewards accrue as points today. On-chain claims open when the GENIE distributor goes live on Base — utility only, never an investment.
- Your journal is private by default and never reaches your AI unless you opt in. If you ever write about a hard moment, crisis resources are one tap away.
- Any future Insights are aggregate-only, strictly thresholded — never your raw individual data. The exact language is on /privacy.
- Found a security hole? Responsible disclosure lives at /security, we act fast, and we don't sue good-faith researchers.
Straight answers
The questions to ask any AI you trust with your thinking.
What data does Journal Genie store about me?
The sources you add, the journal entries and surveys you write, the notebooks and Studio work you create, and your account and billing records. Your content is isolated per user with row-level security and encrypted in transit and at rest.
Which third parties can see my data?
A short list of named processors (such as Supabase for storage, OpenAI for AI, and Stripe for billing). Your work is never used to train AI, and there are no ad networks and no data brokers — because there is nothing to sell.
Can you read my journal?
Your journal is the “sacred bucket”: private by default and excluded from the AI until you explicitly opt a specific entry in. Past entries are never bulk-included, and there is no background process reading it.
What happens to my data if I delete my account?
You can export everything first in one click as plain Markdown. Full-account deletion then completes within seven business days, with proof — not an indefinite “retained for legitimate interests” limbo.
Is my data sold or used to target ads?
No. Your data is never sold and never used to target ads. The product is funded by your subscription, which is the whole point: you are the customer, not the product.
Trust scales when the surfaces agree.
Pricing matches Trust. Privacy matches Terms. Security matches both. We hardened these together so the language doesn't contradict itself.