Diary.com ("we", "us") provides a private journal and life-story service. Your diary is deeply personal, so we collect as little as possible and protect what we hold.
What we collect
- Account data: email address, name, password hash (never the password itself), time zone, language and settings.
- Your content: journal entries, memories, people, places, goals, moods, tasks, letters, vault items, Life Twin conversations, and the photos, videos and voice notes you upload.
- Billing data: if you subscribe, our payment processor handles your card; we store only a customer reference and your plan.
- Basic technical data: sign-in sessions (device type, time) and security logs. We do not use advertising trackers.
How we protect it
Journal text, notes, people, places, goals, letters, vault items and Life Twin chats are encrypted with AES-256-GCM before they are stored, using a separate data key for every account. Search uses one-way keyed fingerprints, so the index does not contain readable words. Photos, videos and voice notes are stored in a private, encrypted storage bucket and are only served to you, or to members of a family space you shared them with. All traffic uses HTTPS.
How we use it
- To provide the service you asked for: storing, searching and displaying your diary, reminders, digests, Future Letters and family sharing.
- AI features (Life Twin, voice transcription, narration) process only the content needed for the request you make, and only when the feature is switched on in Settings.
- We never sell your personal data, never show ads in your diary, and never use your diary content to train AI models.
- Staff do not read your diary for support. Security-sensitive actions are logged in your AI and account activity ledger.
Processors
Cloudflare (hosting, database, storage, email delivery and private speech-to-text and embeddings); Anthropic (Claude models for Life Twin answers); ElevenLabs (narration voice-overs, only when you request one on a paid plan); Stripe (payments, via the Names.com merchant account); Google Firebase (only if you choose to sign in with a text-message code: your phone number); Runway (only when you choose "Bring it to life": the one photo and the motion direction you confirm). Each receives only what is needed for its task.
Your choices and rights
- Export everything at any time from Settings > Privacy (JSON plus your original media).
- Delete your account and all content permanently from Settings > Privacy. Deletion is immediate in our live systems; encrypted backups roll off within 30 days.
- Turn AI memory, voice transcription, reminders and digests on or off.
- Depending on where you live (for example under PIPEDA, GDPR or US state laws) you may have rights of access, correction, portability and deletion. Contact us to exercise them.
Children
Diary.com is for people 13 and older. Family spaces may include memories of children; please share them thoughtfully.
Legacy contacts
If you name legacy contacts, we store their name and email encrypted in your account and email them an invitation. Vault items are only released after a contact requests access and the waiting period you chose passes without you declining.
Contact
Questions about privacy: please use our contact form.