Privacy policy

1. Who we are

Daystrata Inc. is a Delaware C-Corp at 316 W Washington Ave, Suite 525, Madison, WI 53703. We are the controller of the personal information described here. Contact: privacy@daystrata.com.

2. What we collect

Account information: name, email, password hash or Google account id, time zone, and plan.

Journal content: the text of your entries and the reflections, tags, moments, questions and pattern reports derived from it. This content is encrypted at rest.

Billing information: your Stripe customer and subscription ids. Card details are handled by Stripe and never reach us.

Limited technical data: IP address for rate limiting and security, kept in memory, plus server logs kept for up to 14 days.

3. How we use it

To provide the journal: store your entries, produce reflections and patterns, draw your strata, and send account emails such as verification and password resets.

To keep the service safe: rate limiting, abuse prevention, and fixing errors.

We do not sell personal information, we do not use journal content for advertising, and we never use your writing to train or fine-tune models.

4. AI processing

To read an entry, its text is sent to a language model provider for that single request, with provider-side retention for training and evaluation turned off where the provider offers it. The reply is validated and returned to you. Patterns are generated from your own entries only.

Every entry is checked by a care screen first. Entries that show signs of crisis are not sent for analysis.

5. Sharing

We share data only with processors that run the service on our behalf under contract: our hosting and database provider, our language model providers (for the request only), Stripe for payments, and our email provider. We disclose information if the law requires it, and will tell you unless we are legally prevented.

6. Retention and deletion

We keep your account and entries until you delete them. Deleting an entry, all entries, or your account removes the data from the live database immediately; encrypted backups roll off within 30 days. Free plan entries older than 30 days are kept, hidden, until you upgrade, export or delete them.

7. Your rights

Wherever you live, you can access, export, correct and delete your information from Settings, or by writing to us. Residents of California, the EU, the UK and other regions have additional rights under local law, and we honor them. You may complain to your local data protection authority.

8. Children

Daystrata is not intended for children under 13, and we do not knowingly collect their information. If you believe a child has an account, contact us and we will delete it.

9. Changes

If we change this policy in a way that matters, we will email you before it takes effect.