Privacy Policy
How MyVoice collects, uses and protects personal data. Last updated October 24, 2026.
Who we are
MyVoice ("MyVoice", "we", "us" or "our") is operated by 4Eyed Development LLC, a limited liability company organized in Colorado, United States. 4Eyed Development LLC is the controller of the personal data described in this policy.
Summary
This summary does not replace the full policy below.
•
MyVoice is a private journal. There is no public feed and no advertising, and we do not sell personal data.
•
Your journal entries, goals, photos and search index are encrypted under a key unique to your account.
•
To provide mood readings, patterns and search, the text of your entries is processed by OpenRouter, an outside AI service. This processing is part of how MyVoice works and applies to every account.
•
We use a small number of service providers to operate MyVoice. They are listed in this policy.
•
The app contains no advertising or analytics SDKs and no third-party trackers. We keep anonymous daily totals of feature use, and anonymous timings of how long the app’s requests take. Neither identifies anyone.
•
You can export your content or delete your account from inside the app at any time.
Personal data we collect
We collect the following categories of personal data:
•
Account information: your email address, an optional display name, and your password. We store only a salted hash of your password, never the password itself. We also record whether you have confirmed your email address and the last day you used the app.
•
Sign in with Google, if you choose it: Google tells us your email address and confirms it is yours, and nothing else; we do not share your journal with Google.
•
Sign in with Apple, if you choose it on iPhone: Apple tells us an identifier for your Apple ID, your email address or a private relay address that forwards to it, and, the first time only, the name you choose to share; we do not share your journal with Apple.
•
Content: your journal entries, mood selections, goals, and any photos and captions you attach to an entry.
•
Derived information: the mood readings, labels, summaries and patterns produced from your entries, and the search index that makes your journal searchable.
•
Preferences: your theme, font and app settings.
•
Nudge information, if you use Nudge: your friend connections, your time zone, the notification tokens of your devices, and a record of nudges sent and received.
•
Referral information, if you invite someone or are invited (see "Inviting a friend").
•
Subscription and payment information: whether your account has Scribe, how it was purchased, the identifiers issued by the payment processor, and the transaction records the processor sends us. We never receive or store your card number.
•
Technical and security information: sign-in sessions, sync records, and a log of each time your encrypted data is decrypted, which contains no content. IP addresses are processed by our network provider and briefly in memory to limit abusive requests; we do not store them.
We do not collect your contacts or your device advertising identifier, and we do not track you across other companies’ apps or websites. We collect your approximate location only if you turn on Weather (see "Weather").
Information stored on your device
The app keeps a copy of your entries and any unsent changes on your device so that it works offline. That copy is protected by your device’s own security, not by the account encryption described below.
On the web, MyVoice sets one cookie to keep you signed in. It cannot be read by page scripts, is sent only to our API, and lasts up to seven days. The app also uses your browser’s local storage for your preferences. We use no advertising or tracking cookies.
AI Processing by OpenRouter
In this policy, "AI Processing" means the processing of your content by OpenRouter, an AI service operated by a third party, as described in this section.
We send the following to OpenRouter:
•
Mood readings (all accounts): the text of each entry, up to its first 4,000 characters, once a day after you last change it.
•
Search (all accounts): the text of each entry when you save it, and the text of each search when you run it, to build and query your search index.
•
Patterns (Scribe only): once a week, your journal history, your goals and whether you completed them, labels derived from your entries, and daily weather if you turned on Weather.
•
Handwriting (Scribe only): when you ask the app to transcribe a photo, a copy of that photo with its location and camera data removed.
Your name, email address and account identifiers are never sent. We send every request with zero-data-retention routing enabled and data collection denied. Under those settings, the model providers that process a request do not store your content after responding and do not use it for training. No person at MyVoice reads your entries as part of AI Processing. Results are stored in your account.
Journal entries can reveal information about your health, emotions and private life. We treat all entry content as sensitive and use it only as described in this policy.
AI Processing is part of how MyVoice works and runs for every account. When you first open the app, we ask you to agree to it before anything is processed. If you do not agree, do not use MyVoice. To stop all further AI Processing, delete your account. Nothing is sent to OpenRouter after your account is deleted.
Weather (optional, Scribe only)
If you turn on Weather, the app reads your device’s location and rounds it to about 10 km before it leaves your device. We store the rounded location encrypted, and our servers use it to request each day’s weather from Visual Crossing, a third-party weather data provider. Visual Crossing receives the rounded location but not your identity.
Daily weather (for example, "rain, 48–61°F, mostly cloudy") is included in the pattern analysis, so it is sent to OpenRouter. Your location is never sent to OpenRouter.
Turning Weather off deletes the stored location immediately. Weather already recorded for past days remains with those days, and may be used in pattern analysis, until you delete your account.
Nudge (optional)
Nudge lets friends remind each other to write. It never shares anything you have written.
•
When you create an invite link, anyone who has the link can see your display name until the link is used or expires.
•
Friends you connect with see your display name, and whether you can currently receive nudges.
•
Before a nudge is delivered, we check whether your friend has written that day. We check only whether an entry exists, never its content, and we do not tell the sender the result.
•
A nudge is delivered as a notification that shows the sender’s display name. On phones, it passes through the Expo push service and then Apple or Google. On the web, it passes through your browser’s push service, which receives it encrypted.
•
We keep a record of each nudge (who sent it, to whom, and on which day) for as long as you and that friend are connected, so your Nudge page can show your history together. Your Nudge page shows how many nudges you and each friend have sent each other; it never shows whether a nudge was delivered. If either of you removes the other, or either account is deleted, the nudge records between you are deleted. Unused invite links are deleted 7 days after they expire.
•
If you and a friend both choose Pip, each of you can see which days the other wrote (never what you wrote, or when during the day) and the ink those days earned. This stops as soon as either of you leaves Pip.
Connected AI apps (optional)
You can connect an AI app, such as Claude or ChatGPT, to your journal. This happens only if you choose to, and you approve each app on a MyVoice page first. The app can read your entries, mood and goals. It cannot change anything.
The company behind the app handles what it reads under its own privacy policy, not this one. You can disconnect any app at any time under Profile, and it can no longer read your journal. Deleting your account disconnects all of them.
Inviting a friend
If you invite someone with your link, we record which account invited which, and when. We use that record to grant the free Scribe time described in the Terms of Service. We do not show you who joined or anything they wrote. We tell you only that a person you invited has qualified for your reward.
A person who signs up through an invite link is asked to confirm their email address before either of you receives a reward.
To recognize an email address that has already been invited, we keep a keyed one-way hash of it, not the address itself. The hash can be used only to check whether a given address has been invited before. It is kept after the account is deleted so that it can continue to prevent repeated rewards.
Anonymous usage counts
We keep daily totals of how certain features are used, such as how many invite links were shared or opened, how many accounts signed up through them, and how many nudges were delivered. Each total is a number for a day. It contains no account identifier, device identifier or IP address, and it cannot be used to identify you.
How we use personal data
•
To create your account and keep you signed in.
•
To store, sync and display your content.
•
To provide mood readings, patterns and search through AI Processing.
•
To deliver nudges and referral rewards, if you use those features.
•
To process payments and determine which features your account is entitled to.
•
To keep the service secure, diagnose faults and prevent abuse.
•
To respond when you contact us.
•
To understand, in anonymous totals, how MyVoice is used and growing.
We do not use your journal content for advertising, to train our own models, or for any purpose other than providing MyVoice to you.
Service providers and other disclosures
We share personal data only with the following service providers, and only for the purposes stated:
•
OpenRouter: AI Processing, as described above.
•
Cloudflare: network delivery and security. All traffic to MyVoice passes through Cloudflare, which decrypts it at its network edge to route it, so Cloudflare handles your data in transit. Cloudflare also stores your photos, in encrypted form.
•
Visual Crossing: daily weather for a rounded location, if you turn on Weather.
•
Resend: delivery of account emails, such as email confirmation and password reset. Resend receives your email address and the content of those emails.
•
Expo, Apple, Google and browser push services: delivery of nudge notifications.
•
An AI app you connect: what it reads from your journal, only if you connect one (see "Connected AI apps").
•
Stripe: payment processing for subscriptions purchased on the web. Stripe receives your email address and handles your payment details directly.
•
RevenueCat, Apple and Google: subscriptions purchased inside the mobile apps. They send us the transaction records we need to confirm your subscription.
We do not sell personal data, share it for cross-context behavioral advertising, or provide it to data brokers. We disclose personal data when the law requires it, and we will notify you unless the law prohibits us from doing so.
Security
Your journal entries, goals, photos, captions and search index are encrypted before they are stored, under a key unique to your account. That key is encrypted under two separate keys: one derived from your password, and one service key held separately from the database. Our servers decrypt your content to provide the features in this policy, and every decryption is recorded in a security log.
Some information derived from your entries, including mood scores and emotion, theme and activity labels, is stored without this additional encryption.
Data is encrypted in transit between the app and our servers. Only the operator of MyVoice has access to production systems, and uses that access only for support, security and legal compliance. The operator can see account details, such as your email address, display name, join date, last day of use and number of entries. We do not read your entries unless you ask us to as part of a support request or the law requires it.
No method of storage or transmission is completely secure. If a security breach affects your personal data, we will notify you and the relevant authorities as required by applicable law.
Retention and deletion
We keep your personal data for as long as your account exists, except where this policy states a shorter period.
When you delete your account, we delete your entries, goals, photos, derived information, search index, preferences, Nudge information and sessions, and we cancel any subscription you purchased on the web. We keep only:
•
records of payments, for as long as the law requires;
•
the security log of decryptions, which contains no content;
•
referral records, which contain no email address;
•
records of subscription events sent to us by payment processors.
Copies of deleted data may remain in database backups until those backups are overwritten on their normal schedule. Entries in backups remain encrypted as described above.
Your choices and rights
Two controls are available in the app, under Profile:
•
Export: download a copy of your content in a readable format.
•
Delete account: delete your account and its content, as described above.
Depending on where you live, you may have the right to access, correct or delete your personal data, to object to or restrict certain processing, to withdraw consent, and to complain to a data protection authority. Colorado, California and several other US states grant rights of this kind, as do the UK and EU GDPR. To make a request, write to
[email protected]. We respond within the period the applicable law requires, we do not charge for this, and we will not treat you differently for making a request.
If you can no longer reach the app, email
[email protected] from the address on your account and we will delete the account for you.
Children
MyVoice is not intended for children under 13, and we do not knowingly collect personal data from them. If you believe a child under 13 has created an account, contact us and we will delete it.
International transfers
MyVoice is operated from the United States, and our service providers may process data in the United States and other countries. If you use MyVoice from outside the United States, your personal data is transferred to the United States.
Changes to this policy
If we make a material change to how we handle personal data, including any change to AI Processing, we will notify you in the app before the change takes effect. The date at the top of this policy shows when it was last updated.