A private journal needs a clear privacy policy.

Mac app data stored on your Mac

Harbour may store journal entries, titles, tags, photos, profile details, imported content, exported file references, private AI packages, voice-related artifacts, settings, caches, and location metadata associated with entries or photos on your device.

Private AI and journal content

Private AI features such as chat, reflection, memory, dictation, and voice mode are intended to run on your Mac when the required local components are installed. Foss Creative does not collect raw journal entries, raw chat history, saved locations, background facts, or detailed memory artifacts during ordinary app use.

App network requests

The app may contact external services for license activation, update checks, app downloads, optional model downloads, optional Apple MapKit requests, and voluntary support or diagnostic reports. These requests can involve ordinary request metadata such as IP address, timestamp, user agent or request headers, app version, build number, macOS version, and a random device identifier for license activation.

Mac app optional permissions

Harbour may request microphone access for dictation or voice mode, file or photo access when you import, export, or attach files, and access to photo metadata when you choose photos that contain embedded location information. If you do not use an optional feature, the related permission or network request may not be needed.

iOS app data stored on your device

Harbour Journal for iOS may store journal entries, titles, body text, tags, dates, favorites, photos, thumbnails, audio recordings, transcripts, drafts, settings, diagnostics summaries, saved location metadata, and paired-device sync metadata on your device. Harbour does not provide its own cloud account backup for iOS journal content, but iCloud Backup or computer backups may include Harbour data depending on your device backup settings.

iOS app permissions

The iOS app may request camera access when you take a journal photo or scan a QR code to pair with your Mac; microphone access when you record an audio note; selected photo access when you choose photos to attach; location access to save current location to an entry, center the map when needed, or support sunrise/sunset theme changes; and local network access to sync directly with your linked Mac.

iOS local sync

Harbour's iOS sync is local-network sync with devices you choose to pair. Sync may transfer journal entries, media, transcripts, metadata, tombstones, conflict records, device names, app version and build information, random device identifiers, public keys, and pairing or session metadata between paired devices.

iPhone optional usage analytics

Usage analytics is off unless you opt in. Reports send aggregate feature counts and coarse buckets, app version and build, distribution, iOS version, device class, language, report dates, and a random installation identifier to Foss Creative. That identifier links reports from the same installation; these reports are not anonymous. They are used for product improvement and reliability, not advertising or cross-app tracking. Reports exclude journal text, titles, tags, photos, audio files, transcripts, search or map query text, exact locations, entry or media identifiers, linked Mac names, pairing secrets, QR payloads, app-lock credentials, raw logs, and raw errors.

Foss Creative processes reports with Google Cloud hosting, storage, and analytics infrastructure. Our Google Cloud project’s operational request-log bucket retains the client IP address, timestamp, user agent (including app and operating-system details), request URL, response status, request and response sizes, and latency for 30 days for service operation, reliability, and security. The usage-report payload does not contain an IP address, and the sampled request logs do not contain the report body or installation identifier. We do not use these logs to derive your location, advertise to you, or track you across apps. We do not sell usage reports or use them for advertising.

Turn reporting off in Menu → Privacy & Data to stop future uploads and clear pending reports on this iPhone. Clear Pending Analytics Data removes only reports waiting locally; it does not remove reports already received. For a request concerning uploaded reports, copy the Analytics Installation ID shown there and email [email protected] before turning analytics off or uninstalling. Without that identifier, we may be unable to identify your installation's reports.

Usage reports currently have no automatic expiration configured. They are retained for product improvement and reliability until removed through a privacy request or a retention review. On deletion, Google Cloud recovery and backup copies may remain for their configured recovery periods; the raw-report bucket currently has a seven-day soft-deletion recovery period. We will explain any applicable retention exception when responding to a request. This policy does not promise that opting out erases previously uploaded data.

iOS transcription, photos, and location

iPhone audio transcription runs on-device with the bundled Whisper base model. The iPhone app does not offer generative AI reflection, AI chat, memory processing, or large language-model downloads; those features belong to the Mac edition. Photo location metadata may be extracted from images you choose to add. Current location may be used to save a location to an entry, center the map, or support sunrise/sunset theme changes, but journal content and precise saved locations are not sent to advertising platforms.

Exports, backups, and deletion

Data stored locally remains on your device until you delete it, remove related files, or remove app data. Deleting the app may not automatically delete exports, backups, caches, downloaded AI assets, logs, synced copies on paired devices, or copied files stored elsewhere. Time Machine, iCloud, or other backups may retain copies according to your backup settings.

Accounts

Harbour Journal for iOS does not currently create a Foss Creative account. If account creation is added later, the app will provide account deletion as required by platform rules and applicable law.

Website analytics

Depending on your region and cookie choices, Harbour may use Google Analytics or similar analytics tools to understand page visits, referrers, campaign sources, scroll depth, time on page, clicks, downloads, checkout starts, free-trial starts, support request submissions, and purchase success events. Analytics helps us understand whether the website is useful and whether campaigns are working.

Ad measurement and pixels

Depending on your region and cookie choices, Harbour may use Google Ads, Meta Pixel, Reddit Pixel, X Pixel, or similar advertising tools to measure ad clicks, free-trial starts, checkout starts, purchases, downloads, and other conversion events. These tools may use cookies, pixels, browser identifiers, click IDs, referrer URLs, campaign parameters, device or browser information, and event timestamps. We do not send journal content, app memories, raw support messages, payment card numbers, email addresses, or license secrets to ad platforms.

Attribution storage

The website may store campaign and click identifiers such as UTM parameters, gclid, gbraid, wbraid, fbclid, msclkid, ttclid, li_fat_id, twclid, rdt_cid, and internal campaign IDs so checkout and purchase events can be attributed to the campaign that brought you to Harbour. Attribution storage is used for measurement, fraud prevention, debugging, and understanding marketing performance.

Cookie choices and Global Privacy Control

Essential storage is used for basic site operation, attribution handoff, security, and remembering your cookie choice. Analytics and ad measurement are optional. In some regions they are off until you accept them; in other regions they may be on by default with a clear opt-out. You can choose Essential only or accept the displayed default from the cookie banner, and you can reopen preferences with the Cookie settings button. If your browser sends a Global Privacy Control signal, Harbour treats that as essential-only for this website.

Checkout and purchases

When checkout is enabled, payment details are handled by a secure payment provider, not by Harbour's static website. Harbour may receive purchase-related information needed to fulfill the order, such as payment status, product purchased, amount, currency, email address, receipt details, checkout session ID, and attribution data. Raw payment card details stay with the payment provider.

Email and onboarding

If you buy Harbour, request support, join a list, or ask for updates, we may use your email address to send receipts, license or download instructions, product support, important service notices, and optional onboarding or educational follow-ups. Non-transactional emails should include an unsubscribe option.

Support requests

If you contact support, Foss Creative may receive your name, email address, Mac or iPhone model and operating system details, issue description, screenshots, error text, logs, or other materials you choose to send. Please avoid sending journal content unless it is truly necessary for support and you are comfortable sharing it.

Retention

Support, diagnostic, purchase, license, and email records may be retained as long as reasonably necessary for support, product operation, security, accounting, legal compliance, abuse prevention, and product improvement. Local app data remains under your control on your Mac or iPhone and in your backups. The iPhone usage-report retention and deletion process is described above.

Children and sensitive use

Harbour Journal is not directed to children. It is also not a medical, mental health, crisis, or therapy product. Do not rely on app content or AI-generated reflections as a substitute for qualified professional care or emergency services.

Your choices

You can stop using optional app features, revoke Mac permissions in System Settings, revoke iOS permissions in Settings for Camera, Microphone, Photos, Location, or Local Network, avoid maps or model downloads, remove paired devices where supported, export or delete local app data, change website cookie preferences, unsubscribe from non-transactional email, and contact us about privacy questions or deletion requests for support or diagnostic materials you previously sent.

Platform privacy controls

Ad platforms provide their own privacy controls. Google explains personalized advertising and consent behavior in its advertising and tag documentation. Reddit explains how its advertising technology and ads-off-Reddit controls work in its privacy and help materials. Those platform controls are separate from Harbour's cookie banner.

Contact

For privacy questions, support requests, or deletion requests for materials you sent to Foss Creative or uploaded usage reports, contact [email protected].