Privacy Policy

Our Promise

OffRecord AI Journal is built for private journaling. We do not run developer servers that receive your journal, we do not sell data, and the app does not use analytics, advertising SDKs, tracking SDKs, or non-Apple third-party AI services.

This policy covers OffRecord on iPhone, iPad, Mac, and Apple Watch.

What Data OffRecord Processes

• Voice Recordings - audio files recorded through the app
• Transcriptions - text converted from voice recordings on device using Apple SpeechAnalyzer
• Journal Entries - text you write or dictate, including entries you import
• Mood Data - mood selections you make for entries
• Tags and Journals - tags you add and journals you create
• Privacy Choices - Keep Out of Friday and Skip Weekly Reflection on entries
• AI Analysis - emotional patterns, personality insights, the search index, Month and Year in Review, and Session Prep summaries
• Friday Data - Friday's profile, chat, memory edits, generated entry titles, and Go Deeper questions
• Weekly Reflections - private weekly reports, saved takeaways, source choices, and export choices
• Photos - images you attach to entries, including from a Journaling Suggestion you pick or an import
• Apple Watch Captures - quick moods, dictated text, and voice notes saved from your watch
• Settings - preferences such as theme, reminders, Weekly Reflection, app lock, iCloud sync, Apple Health, and on-device transcription consent

On-Device SpeechAnalyzer Transcription

If you choose to transcribe voice recordings, OffRecord uses Apple's SpeechAnalyzer framework.

• OffRecord shows an in-app disclosure before transcription begins.
• SpeechTranscriber is preferred, with DictationTranscriber for additional locale coverage.
• Recognition runs entirely on your device. Audio is not sent to Apple or a speech-recognition server.
• Your device may download a language model from Apple before first use.
• If your language is unsupported, or you turn off transcription, your recording remains saved on the device and you can type manually.
• You can turn off on-device transcription in Settings.

OffRecord does not send your audio, transcripts, journal entries, photos, Friday prompts, the search index, or AI analysis to developer servers, speech-recognition servers, or non-Apple AI services.

On-Device Language Model

When Apple Intelligence is available on your device, Friday uses Apple's on-device language model (SystemLanguageModel).

• It holds Friday's chat, looks things up in your journal with three tools (search, mood counts, and people), writes short entry titles and Go Deeper questions, and can rephrase a Weekly Reflection's cover line and summary.
• The model runs on your device. OffRecord does not use Private Cloud Compute or any server model.
• Everything it writes is checked against OffRecord's voice and safety rules, or the app's own wording is shown instead.
• High-risk text about self-harm or suicide is never sent to the model, analyzed, or quoted. Friday offers the Get Support sheet instead.

Where Your Data Lives

By default, your journal is stored on your iPhone, iPad, or Mac. Quick captures made on Apple Watch are saved on the watch first, then added to your journal when your paired iPhone is nearby.

Friday's Local Folder

Friday's profile, chat, memory edits, generated entry titles, and Go Deeper questions are kept in one folder on the device.

• Files are written with complete file protection.
• The folder is excluded from device backups and never syncs through iCloud. Each device rebuilds Friday's profile from your entries.
• Turning Friday off, or Erase All Data, deletes the whole folder.

Mac App

The Mac app (Mac Catalyst) stores your journal the same way, in its own sandboxed container, and uses the same iCloud container when iCloud Sync is on. Apple Health, widgets, Live Activities, Journaling Suggestions, and the Apple Watch app are not part of the Mac app.

Apple Watch Quick Capture

The Apple Watch companion is for fast capture, not browsing your journal. You can save a mood, dictate a short thought, record audio, and check whether recent captures have reached your iPhone.

• Captures are saved on Apple Watch first, so saving does not depend on your iPhone being reachable.
• When your iPhone is nearby, captures are added to the correct daily journal entry.
• The watch face and Smart Stack show only generic quick-capture status, never journal text.
• OffRecord does not send Apple Watch captures to developer servers or analytics services.

Weekly Reflection

Weekly Reflection is a private look back at your week. It is made from your own started entries and stays in the app.

• Weekly reports can include a short summary, themes, wins, friction points, questions, saved takeaways, and history.
• You can choose which entries are included in a regenerated reflection without changing the original entries. Skip Weekly Reflection on an entry leaves it out of every report.
• If a reflection is exported, source quotes stay out unless you choose to include them.
• Weekly reminders use simple static wording and do not include journal text, names, quotes, themes, or summaries.
• OffRecord does not send Weekly Reflection reports to developer servers or non-Apple AI services.

Month in Review, Year in Review, and Session Prep

• Reviews are generated on your device from your entries.
• The Year in Review share card replaces people's names with "someone" unless you turn names on.
• Session Prep includes no quotes unless you pick them, and replaces names unless you turn them on.
• They leave the app only when you share or export them.

Keep Out of Friday and the Friday Switch

• Keep Out of Friday (per entry): the entry is never indexed for search by meaning, cited, learned from, quoted, or used in Friday's cards or saved chat. Weekly Reflection still counts it unless you also choose Skip Weekly Reflection.
• Friday switch (Settings): with Friday off, she reads nothing. Turning her off deletes her profile, chat, memory edits, cards, generated titles, and Go Deeper questions.

Journaling Suggestions (iPhone)

• Apple prepares suggestions on your iPhone. OffRecord can't see them.
• When you pick a suggestion, OffRecord receives only that one. It keeps the suggestion's title or reflection prompt and attaches its photos, up to five.
• Nothing from suggestions you don't pick reaches OffRecord.

Importing From Other Apps

• You choose the files (Day One, Apple Journal, Markdown or text, or CSV) in the system file picker. OffRecord can read only those files.
• Files are read on your device. Nothing is uploaded.
• OffRecord shows a preview before anything is saved.

Siri and Apple Intelligence

• The entry that Create Entry, Create Audio Entry, and Search return to Siri carries metadata only (date, mood, starred state, word count, and whether it has a recording or photos), never journal text or photos.
• Ask Friday in Siri answers with a summary only: no quotes, no snippets, and no citations.
• A high-risk question gets Friday's support line, and the app opens to the Get Support sheet.
• Intents that read or change the journal ask for device authentication. What you say to Siri is handled by Apple under Apple's privacy policy.

Optional Apple Health

If you turn on Save Moods to Health in Settings, OffRecord saves the moods you choose to Apple Health as State of Mind samples.

• Only the mood and the time are saved. Journal text, transcripts, photos, and recordings are never written to Health.
• OffRecord asks for permission to write State of Mind data only. It never reads any Health data.
• Apple Health is off by default. You can turn it off in Settings or manage access in the Health app.
• Apple Health is not available in the Mac app.

Optional iCloud Sync

If iCloud Sync is enabled, your journal syncs through your personal Apple iCloud account using Apple's CloudKit infrastructure.

• What syncs: entries, photos, tags, journals, Keep Out of Friday choices, and reports (Weekly Reflection, Month in Review, and Year in Review, including any wording the on-device model wrote for them).
• What doesn't sync: recordings, the search index, and Friday's local folder. Recordings stay on the device where they were recorded.
• Sync uses your Apple ID and Apple's iCloud protections.
• OffRecord has no developer server access to your iCloud data.
• Settings shows the sync status. Turning iCloud Sync off leaves your entries on the device and in iCloud.

Erase All Data

Settings › Erase All Data deletes every entry, recording, photo, tag, journal, and report; Friday's local folder; the search index; OffRecord's Spotlight entries; the widget snapshot; and delivered notifications. Settings that hold no journal content, such as Lock and theme, stay.

• With iCloud Sync on, the deletions sync, so the data is removed from iCloud too.
• With iCloud Sync off, copies already in iCloud stay. The confirmation says which applies.
• Moods already saved to Apple Health stay in Health.

What We Do Not Do

• We do not collect personal data on developer servers.
• We do not use OpenAI, Anthropic, Gemini, or other non-Apple third-party AI services.
• We do not use Apple's Private Cloud Compute or any server-based language model.
• We do not use third-party analytics or tracking in the app.
• We do not use third-party advertising.
• We do not share, sell, or transfer your data for advertising or marketing.
• We do not require an account or login.

AI Processing

OffRecord's journal intelligence stays on your device:

• Mood Analysis - on-device using Apple's NaturalLanguage framework
• Friday Engine - on-device logic that builds your personal model, rebuilt from your entries on each device
• On-Device Language Model - Apple Foundation Models (SystemLanguageModel) when Apple Intelligence is available
• Weekly Reflection, Month and Year in Review - reports built on your device
• Search by Meaning - on-device search index and embeddings derived from journal entries, never synced
• Safety Check - on-device classifier that keeps high-risk text out of analysis and quotes

Voice transcription is separate from these journal analysis features and runs on device with Apple SpeechAnalyzer as described above.

Permissions We Request

Permission	Purpose	When Used
Microphone	Record voice diary entries	Only while recording
Face ID / Touch ID	Lock the app for privacy	When app lock is enabled
Notifications	Daily journal reminders and Weekly Reflection reminders	If you enable reminders
Photo Library	Attach photos to entries	When using the photo picker
Apple Health (write only)	Save the moods you choose as State of Mind	If you turn on Save Moods to Health

On-device transcription with SpeechAnalyzer does not need the separate Speech Recognition permission; it uses microphone access only. Journaling Suggestions and imports use system pickers, so OffRecord sees only what you pick.

Photo Storage

Photos are stored in the app's sandboxed data store, may sync through your personal iCloud account if iCloud Sync is enabled, and are not uploaded to developer servers.

Data Retention

• Journal data stays on your device until you delete it or use Erase All Data.
• Uninstalling the app removes local app data.
• iCloud data can be managed through your iCloud settings.
• Audio files are stored locally in the app's sandboxed directory.
• Weekly Reflection reports stay in local app data until you delete them, delete local app data, or uninstall the app.
• The search index can be deleted and rebuilt from Settings.
• Friday's local folder is deleted when you turn Friday off or erase your data.

Third-Party Services

OffRecord uses Apple SpeechAnalyzer for on-device transcription, Apple NaturalLanguage, Apple Foundation Models (on-device only) on devices with Apple Intelligence, Apple CloudKit for optional iCloud Sync, Apple HealthKit for optional write-only mood samples, Apple Journaling Suggestions on iPhone, Apple App Intents for Siri and Shortcuts, Apple WatchConnectivity, and Apple WidgetKit. We do not integrate non-Apple third-party SDKs, analytics tools, advertising networks, or third-party AI APIs.

App Store Privacy Labels

• Data Not Collected - OffRecord AI Journal does not collect data on developer servers, and journal analysis stays on device.
• Data Linked to You - none by OffRecord.
• Data Used to Track You - none.

Your Controls

• Export your data from Settings.
• Export Weekly Reflection reports, with source quotes off unless you choose to include them.
• Delete individual entries, or delete everything with Erase All Data.
• Keep any entry out of Friday, and out of Weekly Reflection.
• Turn Friday off, which deletes what she learned.
• Dismiss or delete Weekly Reflection reports from the app.
• Disable iCloud Sync in Settings.
• Turn off on-device transcription in Settings.
• Uninstall the app to remove local data.

This Website

Parts of this website, such as the articles and guides, use Google Analytics to count page visits. Analytics never runs in the app, and the app sends nothing to Google or to us.

Contact

Questions about this privacy policy? Email saransh1337@gmail.com.