Effective Date: February 9, 2026
1. Introduction
Just One Journal ("we," "our," or "the App") is operated by JustOneChesed.org. We are committed to protecting your privacy and ensuring that your personal information is handled responsibly. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.
2. Information We Collect
We collect the following types of information when you use the App:
- Account Information: Your name, email address, and a securely hashed password when you create an account.
- Journal Entries: The gratitude entries you write within the App, including the date each entry was created or updated.
- Timezone Data: Your device timezone, used solely to schedule daily reminder notifications at 5:00 PM in your local time.
- Push Notification Token: If you enable notifications, we store your device push token to deliver daily reminders. You can disable notifications at any time from the Profile tab.
3. How We Use Your Information
We use the information we collect for the following purposes:
- Providing the Service: To store and display your gratitude entries, authenticate your account, and enable features like entry history and calendar views.
- AI-Powered Insights: When you request insights, your journal entries are sent to OpenAI's API to generate personalized analysis of your gratitude patterns and themes. This processing happens on demand and only when you explicitly request it.
- Notifications: To send you optional daily reminders encouraging you to write a gratitude entry.
4. AI Processing and Third-Party Services
The Insights feature uses a third-party AI service provided by OpenAI, Inc. (San Francisco, CA, USA). When you use this feature:
- What data is sent: The text content of your gratitude journal entries is transmitted to OpenAI's API for analysis.
- Who receives the data: OpenAI, Inc. receives and processes your journal entry text. OpenAI's privacy policy is available at openai.com/privacy.
- How the data is used: OpenAI processes the text to identify gratitude themes, patterns, and generate personalized encouragement. The analysis is returned to the App and displayed to you.
- User consent: Before any data is sent to OpenAI, the App displays a clear disclosure and asks for your explicit permission. Data is only transmitted after you agree. You may decline, in which case no data is shared.
- AI training: Your journal entries are not used to train any AI models. We use the OpenAI API with data processing options that prevent your content from being used for model training.
- Data retention by OpenAI: OpenAI may temporarily retain API inputs and outputs for abuse monitoring purposes in accordance with their data usage policies, but does not use API data to train or improve their models.
No other personal information (such as your name, email, or account details) is sent to OpenAI — only the text of your journal entries.
5. Data Storage and Security
Your data is stored in a secure PostgreSQL database. Passwords are hashed using industry-standard bcrypt hashing and are never stored in plain text. Authentication is handled via JSON Web Tokens (JWT) with a 30-day expiry. We implement reasonable technical and organizational measures to protect your data from unauthorized access, alteration, or destruction.
6. Data Sharing
We do not sell, rent, or share your personal information with third parties for marketing purposes. Your data may be shared only in the following circumstances:
- AI Insights: Journal entry content is sent to OpenAI when you request insights (as described in Section 4).
- Push Notifications: Your push token is sent to Expo's notification service to deliver reminders.
- Legal Requirements: If required to comply with applicable law, regulation, or legal process.
7. Your Rights
You have the following rights regarding your data:
- Access: You can view all your journal entries within the App at any time.
- Deletion: You can delete individual journal entries from the App. You can also permanently delete your entire account and all associated data from the Profile tab within the App.
- Notifications: You can enable or disable push notifications at any time from the Profile tab.
- Data Export: You may request a copy of your data by contacting us.
8. Data Retention
Your journal entries and account information are retained for as long as your account is active. If you request account deletion, all associated data including journal entries will be permanently removed from our systems within 30 days.
9. Children's Privacy
The App is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected data from a child under 13, we will promptly delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be reflected by updating the effective date at the top of this page. We encourage you to review this policy periodically.
11. Contact Us
If you have any questions about this Privacy Policy, your data, or wish to exercise your rights, please contact us at:
info@justonechesed.org