The legal version lives in our privacy policy. This page is the honest, human-readable version — including the parts most apps leave out.
Your written words — journal notes, your conversations with the Keeper, and your weekly intentions — are encrypted with AES on your phone, before they sync. What reaches our servers is unreadable ciphertext. If someone opened our database, your writing would look like noise.
Your check-in scores, their dates, and your pillar names are stored readably — the app needs them to draw your charts, dots and reports. Your email address identifies your account. Every journal app that shows you trends makes this same trade-off; we'd rather tell you about it than pretend otherwise.
On servers in Frankfurt, Germany — inside the European Union, under GDPR. Not split across regions, not mirrored to ad platforms. One place, strong law.
When the Keeper writes your monthly letter or replies to a message, your entries are processed by Claude, the AI model built by Anthropic. Two things are true and in writing: it reads only your journal, and your words are never used to train AI models. Read more in the rules the Keeper follows.
The app locks with Face ID by default and locks itself again when you leave it. Whoever borrows your phone sees a lock screen, not your journal.
There are no advertising SDKs and no analytics trackers in the app, and we don't sell or share your data. Our business model is a subscription — you are the customer, not the product.
Settings → Delete account, inside the app. It deletes your account and every check-in, note, photo and conversation — permanently. No exit interview, no retention period games.
Email team@mylighthouseapp.com and ask anything — including the hard ones. We wrote a list of the questions worth asking any journal app; we're happy to answer our own list.
