Privacy Policy
Effective June 10, 2026 · Applies to Quillheart Android, Quillheart Desktop, and Quillheart Online
The short version: Quillheart is a private journal. The Android and Desktop apps keep everything on your own device and send nothing anywhere. Quillheart Online stores your account and your encrypted journal so you can reach it from a browser. We do not sell data, we do not show ads inside the apps, and your journal text is encrypted everywhere it is stored.
Quillheart Android
- No data collected. The Android app has no internet access at all — it cannot send your data anywhere, and it doesn't ask for that permission.
- Your entries, mood data, and planner live only on your device, encrypted at rest.
- An optional PIN locks the journal; recovery uses a security question you choose.
- No analytics, no advertising, no third-party SDKs.
- Deleting your data: use the password-gated "Wipe journal" in Settings, or simply uninstall the app — uninstalling removes everything, and the app does not back your data up to any cloud service.
Quillheart Desktop
- Works the same way: your journal is stored locally on your computer, encrypted at rest, with an optional PIN.
- The app itself sends no data anywhere. Purchases are handled by Gumroad under Gumroad's privacy policy; we receive only what Gumroad shows sellers about a sale.
- Deleting your data: use "Wipe journal" inside the app, or uninstall and delete the app's data folder.
Quillheart Online (quillheart.com)
The web version needs an account so your journal can follow you between browsers. Here is everything it keeps:
- Account: your email address and a password. The password is stored only as a bcrypt hash — we cannot read it.
- Journal: entry titles and text are encrypted with a key tied to your account before they are stored. Sentiment scores, mood labels, timestamps, and planner data are stored alongside to power the Trends, Mood, and Planner features.
- Cookies: a session cookie keeps you signed in. It is essential to the service and is deleted when you log out.
- Data is hosted on Railway (servers in the United States).
- We never sell your data and never share journal content with anyone.
- Deleting your data: you can delete individual entries any time, or use the password-gated "Wipe journal" in Settings to permanently delete all entries and planner data. To delete your account itself (your email and login), email us at [email protected] from the address on the account and we will remove it.
Cross-save (.qht) files
- Export files are encrypted with a passphrase you choose at export time.
- They exist only where you put them — we never receive or store them. Keep the file and passphrase safe; we cannot recover either.
Website advertising measurement
- The quillheart.com website (not the apps) uses Google Ads conversion tracking so we can tell whether our ads work. This sets Google cookies and shares page-visit signals with Google as described in Google's advertising policies.
- No journal content and no account details are ever sent to Google — conversion events carry no personal information.
Children
Quillheart is not directed at children under 13, and we do not knowingly collect information from them.
Changes
If this policy changes, the new version will be posted at this address with an updated effective date.
Contact
Questions, or an account deletion request: [email protected]