Privacy

We don’t store your conversation

Your intake conversation and the journal written from it live in your own browser, not on our servers. We keep no database of conversations or journals. If you clear your browser data, they’re gone. The only things we briefly keep are operational and content-free: a short-lived request counter (to prevent abuse), a small marker that an order was delivered (so a payment can’t be charged for twice), and aggregate, anonymous usage counts (how many people reach each step), set with no cookies, containing none of your text, and unable to identify you or track you across sites. If you buy, we also keep a small purchase record for a limited time and, only if you ask us to, your email on our mailing list. Both are described under “Email” below.

You choose what to write. If your reflections include personal or sensitive detail, that text is used only to create the journal you asked for, on your instruction, and is not stored by us afterwards.

What passes through, and to whom

To write and deliver your journal, your text is sent (only at the moment it’s needed, and not retained by us) to a few trusted services that act on our behalf:

• Anthropic (Claude): generates your journal from the conversation.
• Creem: handles checkout and payment; it collects the email you pay with.
• MailJet: emails your finished journal as a PDF to that address, and (only if you opt in) stores your mailing-list entry.

Our hosting and short-term operational data run on Vercel and Upstash, and Cloudflare sits in front of the site to deliver it and to keep bots and abuse away from it. Because every request reaches us through Cloudflare, it necessarily sees the internet address and browser each request comes from, and it runs a small script in your browser to tell real visitors from automated ones. That is delivery and security, not advertising: it is not used to profile you, to target ads, or to track you across other sites. Each of these providers processes your data under its own terms and only on our instructions. We pass along only what each step requires, and we don’t keep a copy of your conversation or journal.

Where your information is processed

We operate from Portugal (the EU). Some of the providers above are based in the United States, so delivering your journal can involve sending data outside the EU. Where that happens, the transfer relies on the safeguards those providers offer, such as the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.

Email

The email you enter at checkout is used to send your journal, and is also held by our payment and email providers under their own terms. We rely on this to provide the service you paid for.

If you complete a purchase, we keep a small record (your email, first name, the topic you chose, and the purchase date) for up to about 90 days, so we can send you a single follow-up as your 30 days wrap up. It contains none of your conversation or journal text, it deletes itself automatically after that window, and every follow-up has a one-click unsubscribe. You can also email [email protected] to be removed sooner.

Separately, and only if you tick the optional box at checkout, we add your email and first name to our mailing list, so we can send you the occasional note about new journals and about keeping a practice going. We do this on the basis of your consent. That’s a different record from the one above: it has no 90-day expiry, and we keep it until you unsubscribe. Every email carries a one-click unsubscribe, or you can email [email protected] and we’ll delete it. Leave the box unticked and this record is never created. The two are independent: unsubscribing from the mailing list doesn’t affect the single follow-up above, and vice versa.

How long we keep things

• Your conversation and journal: not stored by us at all; they stay in your browser.
• Abuse counter: short-lived, cleared automatically.
• Delivery marker: a minimal reference kept so a payment can’t be reused or charged for twice. It holds no conversation or journal text.
• Purchase follow-up record: about 90 days, then deleted automatically.
• Mailing-list entry: kept until you unsubscribe.
• Payment and invoice records: held by our payment provider, and by us, for as long as tax and accounting law requires.

Your rights

Under EU data protection law you have the right to ask us for a copy of the personal data we hold about you, to have it corrected or deleted, to restrict or object to how we use it, to receive it in a portable form, and to withdraw any consent you’ve given (which doesn’t affect anything done before you withdrew it). To exercise any of these, email [email protected] and we’ll respond within the time the law allows. Because we don’t store your conversation or journal, there is usually nothing of that kind for us to retrieve or erase.

Who we are, and complaints

The controller responsible for your personal data is Nigel Booker, trading as Journalizer, Rua do Casal de Andrade, 17, Figueira da Foz, Coimbra, Portugal. You can reach us about anything on this page at [email protected].

If you’re not happy with how we’ve handled your data, you can complain to Portugal’s data protection authority, the CNPD (Comissão Nacional de Proteção de Dados), cnpd.pt. If you’re in another EU country, you may instead contact your local data protection authority.