Privacy Policy
Sodhera Intelligence Private Limited ("Sodhera," "we," "us," or "our") operates the JournalBlock mobile application (the "App"). JournalBlock is a morning journal app that holds selected apps on your phone shut until you have written the day's page. This Privacy Policy explains how we collect, use, store, share, and protect your information when you use the App. By using JournalBlock, you agree to the practices described in this Privacy Policy.
We are committed to transparency and to safeguarding your personal data. Please read this Privacy Policy carefully. If you do not agree with any part of it, please do not use the App.
1. Information We Collect
1.1 Information You Provide Directly
When you set up and use JournalBlock, you may voluntarily provide the following information:
| Data Category | Specific Data | Purpose |
|---|---|---|
| Account Details | Email address, and a password (for email sign-up), or the identity token returned by Sign in with Apple or Sign in with Google | Create and secure your account and let you sign in across sessions |
| Profile | Your first name (or preferred name) as entered during onboarding or edited in Settings | Personalize the app greeting and your profile |
| Onboarding Questionnaire | Your answers about your mornings and what you want to change, plus your usual wake time and bedtime | Write your personalized plan and set the initial times for your daily sittings |
| Journal Entries | Everything you write on the page, and the day it belongs to | Show your entries, history, streak, and seven-day chain |
| Sittings and Prompts | The sittings you create — each one's time, name, and the questions you keep in it | Present the right questions at the right hour and determine what the day owes |
| Blocked Apps Selection | The set of apps and categories you choose to shield, selected through Apple's Screen Time picker | Enable the optional blocking feature that shields selected apps until the day's page is written |
| Preferences | App settings and choices you make (such as theme, strict mode, alarm and reminder toggles) | Customize your app experience |
About Apple Screen Time selections: When you choose which apps to block, Apple's Family Controls framework returns only opaque, privacy-preserving tokens. We never receive the names, icons, or bundle identifiers of the apps you select, and we cannot see how you use them. These tokens are meaningful only to the operating system on your own device, and they are never uploaded to our servers.
1.2 Your Journal and End-to-End Encryption
Your journal entries are stored on your device. Backup is entirely optional and is switched on by you, from the Backup screen in Settings. If you never turn it on, nothing you write ever leaves your phone.
When you do turn backup on, JournalBlock uses end-to-end encryption. In practice this means:
- A random encryption key is generated on your device and never leaves it in readable form. It is stored in the iOS Keychain, and travels to your other devices through Apple's own iCloud Keychain under your Apple ID.
- Every journal entry is encrypted on your device before it is uploaded. Your prompts, sittings, preferences, and onboarding answers are encrypted the same way, in a single blob — a reworded prompt can be as personal as the answer to it.
- Our servers receive ciphertext only, plus the day an entry belongs to and the time it was last changed. We cannot read your entries, your prompts, or your settings, and neither can our hosting provider.
- The encryption key itself is stored only in a form sealed under a recovery phrase that we never receive and never store.
We cannot recover your journal for you. Because the key never reaches us in a usable form, there is no password reset, no support request, and no administrative override that can decrypt your entries. This is a deliberate design choice, and the trade-off is real: if you lose access to both your devices and your recovery phrase, your backed-up entries cannot be recovered by anyone, including us. See Section 6 of the Terms of Service.
1.3 Information Generated Automatically
| Data Category | Specific Data | Purpose |
|---|---|---|
| Authentication Tokens | Session access and refresh tokens issued when you sign in | Keep you signed in securely between app launches |
| Subscription Status | Whether you have an active subscription or trial, plan type, and renewal status — provided by our payment processor | Grant access to paid features and manage your trial and subscription |
| Diagnostic Data | Anonymous or aggregated crash and performance data, where enabled by the platform | Diagnose problems and improve reliability |
1.4 Information We Do Not Collect
- We do not collect your precise location.
- We do not access your contacts, photos, microphone, or camera.
- We do not sell your personal information.
- We cannot read your journal entries, prompts, or settings, whether or not backup is enabled.
- We do not receive the identity of the apps you choose to block, or any record of how you use them.
- We do not collect your device's advertising identifier (IDFA). The App contains no advertising or analytics SDKs, never shows the App Tracking Transparency prompt, and never asks for permission to track you.
2. How We Use Your Information
We use the information described above to:
- Create your account and authenticate you securely;
- Build and display your personalized plan and your daily sittings;
- Store and display your entries, history, streak, and seven-day chain;
- Determine what the day owes, and drive the Home Screen widget and the shield accordingly;
- Enable the optional blocking feature that shields the apps you select;
- Deliver the optional wake alarm and reminder notifications you turn on;
- Store and restore your encrypted backup, if you enable it;
- Process and manage your subscription and free trial;
- Respond to your support requests;
- Maintain the security, integrity, and reliability of the App; and
- Comply with legal obligations.
3. How Your Information Is Stored
JournalBlock is designed to be local-first.
- On your device: Your entries, sittings, prompts, blocked-apps selection, and preferences are stored locally on your device. Authentication tokens and your encryption key are stored securely in the iOS Keychain.
- On our servers, only if you enable backup: encrypted entry blobs, an encrypted settings blob, and the sealed form of your encryption key — none of which we can read. We also store the day each entry belongs to and when it was last updated, so that your devices can stay in sync.
- Account identity: Your email address and name are handled by our authentication provider (see Section 4) to give you a stable sign-in. This account acts as an identity gate and is kept separate from the contents of your journal.
- Never uploaded: your blocked-apps selection, which remains on your device as opaque system tokens.
4. Third-Party Services
JournalBlock relies on a small number of trusted third-party services to function. Each processes only the data needed for its role:
| Service | Role | Data Involved |
|---|---|---|
| Apple | App Store distribution, Sign in with Apple, in-app subscription payments, Screen Time, and iCloud Keychain | Apple ID identity token and subscription/purchase records — handled under Apple's own privacy policy |
| Supabase | Authentication, account management, and encrypted backup storage | Email address, hashed credentials, account identifiers, and encrypted blobs it cannot decrypt |
| Sign in with Google (only if you choose it) | The identity token and basic profile provided by Google sign-in | |
| RevenueCat | Subscription management and receipt validation | Anonymized subscriber identifier and subscription/entitlement status |
These providers act as our processors or as independent controllers of the data they receive, and are contractually or legally obligated to protect it. We encourage you to review their privacy policies:
- Apple — apple.com/legal/privacy
- Supabase — supabase.com/privacy
- Google — policies.google.com/privacy
- RevenueCat — revenuecat.com/privacy
5. Payments and Subscriptions
JournalBlock is offered as a subscription with a free trial. All payments are processed by Apple through the App Store and managed via RevenueCat. We never receive or store your full payment card details. Your purchase is tied to your Apple ID, and subscription management, cancellation, and refunds are handled through your Apple account settings, subject to Apple's terms.
6. Data Sharing and Disclosure
We do not sell your personal information. We share information only in these limited circumstances:
- With service providers listed in Section 4, strictly to operate the App;
- For legal reasons, if required by law, regulation, legal process, or enforceable governmental request;
- To protect rights and safety, where necessary to prevent fraud, abuse, or harm; and
- In a business transfer, such as a merger or acquisition, in which case we will notify you and this Policy will continue to apply to your information.
We note that even under legal compulsion we cannot produce the contents of your journal, because we do not hold the means to decrypt it.
7. Data Retention
Data stored locally on your device remains until you delete it in the App, sign out, or uninstall the App. Encrypted backup data and account information are retained for as long as your account exists. When you delete your account (see Section 8), your profile, your encrypted entries, your encrypted settings, and your stored key material are deleted, except where we must retain limited records to comply with legal obligations.
8. Your Rights and Choices
Depending on where you live, you may have rights to access, correct, export, or delete your personal data. Within the App you can:
- Edit your name in Settings;
- Turn encrypted backup on or off, and issue a fresh recovery phrase;
- Add, retime, rename, or delete any sitting, and edit every prompt;
- Change or clear your blocked-apps selection at any time;
- Turn strict mode, the wake alarm, and reminders on or off;
- Sign out, which removes your session from the device but leaves your journal in place;
- Delete your account from within the App — Settings → Account → Delete Account. This removes your account and all server-side data associated with it, and then erases the journal on your device. It cannot be undone; and
- Delete data stored on your device by uninstalling the App.
Deleting your account does not cancel your subscription — Apple handles billing, and you must cancel in your Apple ID account settings. To request access to or correction of your account data, email us at admin@sodhera.com.
9. Security
We take reasonable technical and organizational measures to protect your information, including end-to-end encryption of journal content using AES-GCM with keys generated on your device, encrypted transport (HTTPS/TLS) for all network communication, secure storage of authentication tokens and encryption keys in the iOS Keychain, row-level security so that no account can read another's rows, and reliance on reputable providers with strong security practices. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
10. Children's Privacy
JournalBlock is not directed to children under the age of 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us so we can remove it.
11. International Users
Sodhera operates internationally, and your information may be processed in countries other than your own, including by the third-party providers listed above. Where required, we rely on appropriate safeguards for such transfers. By using the App, you understand that your information may be transferred and processed in this way.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date above and, where appropriate, notify you within the App. Your continued use of JournalBlock after changes take effect constitutes acceptance of the updated Policy.
13. Contact Us
If you have questions or requests regarding this Privacy Policy or your data, contact us at:
- Privacy & data requests: admin@sodhera.com
- General support: admin@sodhera.com
Sodhera Intelligence Private Limited