1. Account information
When you create an account we store your email address, an authentication record, and the display name and profile details you choose to add. If you sign in with Google we receive your email address, name and profile image from Google; we never receive your Google password.
2. Photographs you upload
Photographs you capture or upload are stored in a private storage bucket. They are not public, they are not indexed by search engines, and access is restricted to your own account by database and storage security rules.
Photographs may show your face, scalp, skin, body or a treated area. You decide what to photograph and you can delete any photograph at any time.
3. Notes, goals, routines and checklists
We store the notes you write on an entry, the goal you set for each journey, routine and product details you log, milestones, and any tasks in an AI or manual action plan. These are stored against your account and are visible only to you.
4. Reminders
If you set a reminder we store the journey it belongs to, the schedule and the delivery preference so the reminder can be produced at the right time.
5. AI processing and generated observations
When you ask Journae for an AI observation, the selected photographs and the surrounding context (journey type, goal, dates, quality hints and, where relevant, your notes) are sent to a third-party AI provider through our AI gateway so the response can be generated. We do not use your photographs, notes or reports to train our own models. We cannot warrant how every upstream model provider handles data internally, so we only state what is within our control: we do not sell your content, we do not publish it, and we do not share it for advertising.
The observations, confidence levels, monthly summaries and suggested next steps that AI returns are stored against your account so you can revisit them. They are descriptions of what the model appears to see; they are not medical findings. See the AI Transparency Notice for detail.
6. Device and usage information
Our hosting and backend providers process standard technical data such as IP address, browser type, device type, timestamps and error logs. This is used for security, abuse prevention, debugging and keeping the service running. We do not build advertising profiles.
7. Payment information
Paid plans are handled by a third-party payment processor. Card details are entered with the processor and are never stored on Journae's servers. We receive and store the plan you are on, the subscription status, renewal dates and a customer reference so we can grant the right features.
8. Cookies and local storage
Journae uses strictly necessary cookies and local storage to keep you signed in and to remember interface preferences such as your cookie choices. Any optional analytics are off unless you allow them on the Manage Cookies page. See the Cookie Policy for the full list.
9. Where your data is stored
Account data, journey data, notes and metadata are held in a managed PostgreSQL database. Photographs are held in private object storage attached to the same project. Both are operated by our backend infrastructure provider on our behalf.
10. Data retention
We keep your content for as long as your account is active. Content you delete is removed from the live service immediately and may persist briefly in routine encrypted backups before ageing out. Billing records are kept for the period required for tax and accounting purposes.
11. Deleting your data
Settings contains 'Delete all data', which removes your journeys, entries, photographs, notes, tasks, reminders and reports, and 'Delete account', which removes your data and signs you out. To have the underlying login record erased, email privacy@journaeapp.com from the address on the account. Full detail is on the Data Deletion page.
12. Exporting your data
You can export progress reports as PDFs from the Reports screen. For a complete copy of the data held about you, including notes, journey records and a photograph archive, email privacy@journaeapp.com and we will respond within one month.
13. Third-party providers
We use a small number of processors to run the service:
- Backend, database, authentication and photo storage provider
- AI gateway and the underlying model provider used for observations, summaries and next steps
- Payment processor for subscriptions
- Email delivery provider for account and transactional email
- Application hosting and content delivery provider
14. International transfers
Some of these providers operate infrastructure outside your country, including in the United States. Where data leaves the UK or EEA we rely on the transfer mechanisms offered by those providers, such as standard contractual clauses.
15. Your rights
Depending on where you live you may have the right to access, correct, delete, restrict or object to processing of your personal data, to data portability, and to withdraw consent. You may also complain to your local data protection authority. See the GDPR and Data Rights page for how to exercise each right.
16. Children
Journae is not intended for children under 16. If you believe a child has created an account, contact us and we will remove it.
17. Changes to this policy
If we change how we handle your data we will update this page and the date at the top. Material changes will also be notified in the app or by email.
18. Contact
Privacy questions and data requests: privacy@journaeapp.com. General enquiries: hello@journaeapp.com.