Privacy Policy
1. Who we are
Bodha: Journal ("Bodha", "we", "us", or "our") is an independent app. You can reach us at bodhajournal@outlook.com.
2. What data we collect
Bodha collects the minimum data necessary to provide the app's features. Here is exactly what we collect and why:
Account information
When you create an account, we collect your email address and a password (stored securely via Firebase Authentication). We use this solely to authenticate you and link your data across devices.
Journal entries and app content
Your journal entries, North Star goals, LifeContext, and other content you create in the app are stored in Firebase Firestore under your unique user ID. This data is associated with your account.
Consent records
When you accept our Terms of Service and Privacy Policy, we record the date and time of your acceptance along with the version of the documents you agreed to and the app version you were using. This record is kept for the duration of your account and is used to demonstrate your consent if ever required.
Usage and subscription data
If you subscribe to Bodha Premium, your subscription status is managed by RevenueCat. RevenueCat collects your Apple ID (anonymised), subscription tier, and transaction history. We receive from RevenueCat only your subscription entitlement status — we do not receive your payment card details.
Crash and diagnostic data
Firebase Crashlytics may collect anonymous crash reports, device type, iOS version, and app version when the app crashes. This helps us fix bugs. No personally identifiable information is included in crash reports.
3. AI features and how your text is processed
Your journal entries and conversations are processed by our AI provider (Anthropic) to generate responses, titles, personalised messages, and weekly letters. This processing is necessary to provide the core features of Bodha. When you use an AI feature:
- The relevant text (your current journal entry or Untangle input) is sent to Anthropic's servers to generate a response. We send only the current entry and a short LifeContext summary — not your full journal history.
- Anthropic does not store your prompts or responses for AI training purposes under our API agreement.
- We do not store the AI-generated responses on our servers — they are returned to your device and, where relevant, saved to your Firebase account as part of your journal record.
- Your LifeContext and North Star goals may be included as context in AI requests to personalise responses. This context is sent to Anthropic each time an AI feature is used.
You can review Anthropic's privacy practices at anthropic.com/privacy.
Bodha includes in-app safety resources for users who express distress. These resources are provided as a courtesy and do not make Bodha a mental health or crisis service.
4. How we use your data
- To provide and improve the Bodha app and its features
- To authenticate your account and sync your data across your devices
- To process your subscription and manage premium access
- To generate AI-assisted reflections and responses within the app
- To diagnose and fix technical problems via anonymous crash reports
- To maintain a record of your acceptance of our Terms of Service and Privacy Policy
We do not use your data for advertising. We do not sell your data to any third party. We do not use your journal entries to train AI models.
5. Third-party services
Bodha uses the following third-party services:
- Firebase (Google) — authentication, database storage (Firestore), and crash reporting. Firebase Privacy Policy
- Anthropic — AI response generation via Claude API. Anthropic Privacy Policy
- RevenueCat — subscription management and in-app purchase processing. RevenueCat Privacy Policy
Each of these services has its own privacy policy. We choose services that have strong privacy practices and data processing agreements.
6. Data storage and security
Your data is stored in Firebase Firestore, which is hosted on Google Cloud infrastructure. Data is encrypted in transit (TLS) and at rest. Firebase Firestore is located in Google's cloud regions — you can review Google's data location practices at firebase.google.com/support/privacy.
Journal entries and app data are also stored locally on your device using Apple's SwiftData framework. This data is protected by iOS device-level encryption when your device is locked with a passcode, Face ID, or Touch ID.
We take reasonable technical measures to protect your data, but no system is completely secure. If you become aware of a security issue, please contact us immediately at bodhajournal@outlook.com.
7. Your rights and choices
Access and portability
You can view all your journal entries and content within the app at any time.
Deletion
You can delete individual journal entries within the app. To delete your account and all associated data, contact us at bodhajournal@outlook.com and we will permanently delete your account and all stored data within 30 days.
Correction
You can edit your journal entries, LifeContext, and North Star goals directly within the app.
Opt out of AI features
AI features are optional. You can use Bodha as a plain journaling app without triggering any AI requests. AI features are only activated when you explicitly request a reflection, start an Untangle session, or request a Weekly Summary.
8. Children's privacy
Bodha is intended for users aged 18 and above. We do not knowingly collect personal data from anyone under 18. Bodha includes an age verification step at sign-up to enforce this requirement. If you believe we have inadvertently collected information from someone under 18, please contact us at bodhajournal@outlook.com and we will delete it promptly.
9. International users
Bodha is operated independently. If you are accessing the app from outside India, your data may be transferred to and processed in countries other than your own (including the United States, where Firebase and Anthropic infrastructure is located). By using Bodha, you consent to this transfer.
If you are in the European Union, you have additional rights under the GDPR. Please contact us at bodhajournal@outlook.com to exercise any GDPR rights, including the right to erasure, restriction of processing, or data portability.
10. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, for material changes, notify you within the app. Continued use of Bodha after a policy update constitutes acceptance of the updated policy.
11. Contact us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, contact us at:
Grievance Officer (India — DPDP Act 2023):
Jithin Ravishankar
bodhajournal@outlook.com
Response time: within 48 hours