Privacy Policy
Last updated: 23 October 2026
Journal Fairy is made by Mohamad Nur Adli ("we"), Multivision Tower, 6th Floor, Jl. Kuningan Mulia No. 9B, Kuningan, South Jakarta 12980, Indonesia. Contact: support@journalfairy.com.
The short version
- Your journal entries, recordings and photos are stored on your Mac.
- To turn speech into text and tidy it, your Mac sends the recording and the text to our service on Cloudflare, which passes them on to ElevenLabs (speech-to-text) and DeepSeek (tidying). We do not store your recordings or your text; we keep only counts of how much you used.
- Your Journal Fairy account holds your email address, your plan, your usage counts and the devices you sign in on.
- We do not sell data, show ads, or use analytics or tracking in the app.
1. What stays on your device
Recordings, transcripts, tidied text, titles, summaries, tags, moods, photos, weekly reflections and settings are kept as files on your Mac in a folder you can open. If you turn on sync, copies go to the folder or storage bucket you choose (for example iCloud Drive, Dropbox or your own Cloudflare R2 bucket). We have no access to them.
Your sign-in token, the random device identifier described in section 3, and any storage keys you add for sync are kept in your Mac's Keychain.
2. How your recordings and text are processed
When you record, tidy or import an entry, ask your journal a question, or create a weekly reflection, the app sends data from your Mac to our service at journalfairy.com, which runs on Cloudflare. Our service checks that your plan is active and has hours left, then forwards the data to one of two AI providers, using our own accounts with them, and returns their answer to your Mac.
| Who | What they receive | Why | Where |
|---|---|---|---|
| Our service (journalfairy.com on Cloudflare) | The audio of a recording and the text sent for tidying, in transit only | Checks your plan and allowance, forwards the request, counts usage | Cloudflare's global network, at the location nearest you |
| ElevenLabs | The audio of a recording | Speech-to-text | United States / EU (ElevenLabs privacy policy) |
| DeepSeek | The text of an entry; for "Ask your journal" and weekly reflections, the entries relevant to the question or week | Tidying, titles, tags, answers, reflections | People's Republic of China (DeepSeek privacy policy) |
What we keep. Our service does not store your audio or your text. It keeps only usage counters for each request: the seconds of audio transcribed, the number of text tokens processed, the time, your account ID, and the provider's request ID (used to look into a failed request if you contact support). We keep these counters for 12 months, to bill your plan correctly, show your remaining hours and prevent abuse, and then delete them.
What the providers do. ElevenLabs and DeepSeek process your audio and text as our processors under their API terms and privacy policies, linked above. They may keep requests for a limited time under those terms, for example to detect abuse. They do not receive your email address or your Journal Fairy account details from us.
International transfers. Because of this, your audio may be processed in the United States or the EU and your text in the People's Republic of China, which may be outside your country and may have different data protection laws. If you do not want your text to be processed in China, you can switch off tidying when you write a typed entry; recordings are always transcribed by ElevenLabs and tidied by DeepSeek.
3. Your Journal Fairy account
You sign in with your email address to start your trial, use your subscription and keep it on all your devices. We store:
- your email address and an account ID;
- when the account was created and last used;
- your plan and its status (trial, weekly, monthly, yearly, active, cancelled, expired, refunded), when it renews or ends, and, for payments, the order or subscription ID, product and amount reported by our payment provider;
- usage counters: seconds of audio transcribed and text tokens processed in each period, with timestamps and provider request IDs, as described in section 2;
- for each device you sign in on: a device name (for example "Ana's MacBook Air"), platform, app version, when it was last used, and a device ID hash. The device ID hash is a one-way SHA-256 hash of a random identifier the app creates on your Mac and keeps in its Keychain; it is not your Mac's serial number or any hardware identifier. We use it to allow one free trial per Mac. The sign-in token itself is stored only as a one-way hash; sessions are deleted 30 days after they expire or you sign out;
- for sign-in code requests: the email, the IP address and the time, used to prevent abuse; codes are stored only as a one-way hash and expire after 10 minutes. These records are deleted after 7 days.
We use this to sign you in, show your plan and remaining hours, apply the limits of your plan, let you see and remove your devices, and prevent abuse (for example many trials from one Mac). You can sign out of a device at any time in Settings → Account, and you can ask us to delete your account by writing to support@journalfairy.com; we delete it within 30 days, except purchase records we must keep for tax law.
4. Service providers we use
| Provider | Role |
|---|---|
| Cloudflare | Hosts journalfairy.com, the account service and its database, the service that forwards your audio and text to ElevenLabs and DeepSeek, and the app downloads; forwards email sent to support@journalfairy.com. Like any web host, Cloudflare processes your IP address to deliver requests. |
| ElevenLabs | Turns recordings into text (see section 2) |
| DeepSeek | Tidies text and writes titles, tags, answers and reflections (see section 2) |
| Resend | Sends the sign-in code emails |
| Lemon Squeezy | Sells Journal Fairy subscriptions and extra hours as merchant of record: handles checkout, recurring payments, taxes, invoices, cancellations and refunds, and runs the "Manage subscription" page. Lemon Squeezy collects your payment details under its own privacy policy; we receive your email, order and subscription IDs, product, amount and subscription status, never your card details. |
5. Legal bases (EU/UK)
Running your account and subscription, and processing your recordings and text so the app can transcribe and tidy them: performance of a contract. Usage counters: performance of a contract (applying your plan's limits) and legitimate interest (preventing abuse). Device ID hash and the IP address on code requests: legitimate interest (one trial per Mac, abuse prevention). Tax records: legal obligation.
6. Your rights
You can ask for a copy of your account data, correct it, or have it deleted, and you can object to processing. Write to support@journalfairy.com. If you are in the EU or UK you may also complain to your data protection authority; in Indonesia, under UU PDP (Law No. 27 of 2022).
7. Children
Journal Fairy is not intended for children under 13 (or the minimum age in your country).
8. Changes
We will post changes here and update the date above. Material changes will also be announced in the app.