Privacy Policy — Mystic Journal

1. Scope

This Privacy Policy applies to:

• the Mystic Journal iOS app;
• the Apple Watch companion app;
• related services we operate to support sync, purchases, analytics, ads, and content generation.

2. No Traditional Account Required

You do not need to create a traditional username/password account to use the App.

However, to provide core functionality such as sync, wallet balance, purchase validation, saved history, analysis, and service protection, we may create or maintain a guest profile, app identifier, or device-linked backend identifier for your installation of the App.

3. Information We Handle

3.1 Information you provide in the App

Depending on how you use the App, we may handle:

• questions or prompts you enter;
• journal entries, reflections, notes, tags, and other text content;
• mood logs and related self-check-in data;
• saved card-based sessions, routines, spreads, affirmations, and analysis inputs;
• support messages you send to us by email or through support channels.

3.2 Information generated through use of the App

We may generate or store:

• AI-generated responses or interpretations you request;
• weekly insights and analysis results;
• timestamps, feature usage, and state needed to operate your saved history, wallet, cooldowns, sync, and progress;
• Apple Watch sync state and linked session data when you use the watchOS companion app.

3.3 Device, technical, and diagnostic information

We may handle certain technical information, such as:

• device type, operating system, app version, locale, time zone, and language;
• IP address and basic request metadata when communicating with our servers;
• crash logs, diagnostics, and performance information;
• anti-abuse, fraud-prevention, and security-related signals.

3.4 Purchase and subscription information

If you make an in-app purchase or subscribe:

• purchases are processed by Apple;
• we receive transaction-related information needed to validate purchases, unlock access, restore purchases, and prevent fraud;
• we do not receive your full payment card details.

3.5 Advertising and identifiers

If the free version of the App shows ads, advertising partners may process certain identifiers and device signals.

If you allow tracking through Apple's App Tracking Transparency (ATT) prompt:

• advertising partners may use permitted identifiers or signals for personalized advertising and ad measurement.

If you deny tracking:

• we request non-personalized or contextual advertising where supported;
• the IDFA is not available to advertisers through ATT-based access.

4. How We Use Information

We use information to:

• provide the App and its core features;
• save and sync journal entries, mood logs, history, wallet status, and analysis;
• generate requested AI content and weekly insights;
• support Apple Watch sync and related companion functionality;
• validate in-app purchases and subscriptions;
• provide customer support;
• maintain security, prevent fraud and abuse, and enforce fair-use limits;
• improve app stability, reliability, and product performance;
• show ads in the free version and measure ad performance, subject to applicable consent requirements.

5. AI Processing

Some features use AI or automated processing to generate responses, interpretations, summaries, or insights.

When you use these features, we may send relevant input data—such as your question, note text, saved context, selected theme, or session configuration—to:

• our backend systems; and
• trusted third-party AI service providers acting on our behalf.

We send only the information reasonably needed to generate the requested output.

AI-generated content may be inaccurate, incomplete, or inappropriate and is provided for self-reflection and wellbeing purposes only. It is not medical, legal, financial, or mental health advice.

6. Local Storage and Server Storage

Some data may be stored:

• locally on your device, such as saved entries, app preferences, or cached content;
• on our servers, when needed to provide sync, wallet state, saved history, purchases, analysis, anti-abuse protections, Apple Watch sync, and content generation.

Deleting the app from your device removes local on-device data, but it may not by itself delete all synced or server-side records. For server-side deletion requests, contact us at support@kinapp.dev.

7. Sharing and Disclosure

We do not sell your personal information for money.

We may share information with the following categories of recipients when necessary:

7.1 Service providers

We may share information with vendors that help us operate the App, including providers for:

• cloud hosting and backend infrastructure;
• AI processing;
• analytics and diagnostics;
• advertising;
• customer support;
• purchase verification and fraud prevention.

7.2 Apple

Apple may process purchase, subscription, platform, and device-related information under its own privacy terms when you use iOS, watchOS, App Store purchases, widgets, or Apple Watch features.

7.3 Legal and safety disclosures

We may disclose information if reasonably necessary to:

• comply with applicable law, regulation, court order, or legal process;
• protect our rights, users, systems, or services;
• investigate fraud, abuse, or security incidents.

7.4 Business transfers

If our business is reorganized, merged, sold, or transferred, information may be transferred as part of that transaction, subject to applicable law.

8. Advertising

If the App includes ads, advertising partners may collect or receive certain device-level or usage-related data as allowed by applicable law and platform rules.

Where required:

• we rely on ATT consent for cross-app tracking and personalized advertising;
• if tracking is not authorized, we seek to limit advertising to contextual or non-personalized ads where supported.

For more information about Apple's tracking controls, see your device privacy settings.

9. Legal Bases for Processing (EEA / UK / Similar Regions)

If you are in a region where specific legal bases are required, we rely on one or more of the following:

• performance of a contract: to provide requested App functionality;
• legitimate interests: to secure, operate, improve, and protect the App;
• consent: where required, including ATT-based advertising consent and similar permissions.

10. Your Rights and Choices

Depending on your jurisdiction, you may have rights to:

• access the personal information we hold about you;
• request correction of inaccurate information;
• request deletion of information;
• request export of certain information;
• object to or restrict certain processing;
• withdraw consent where processing is based on consent.

You may also:

• deny or revoke tracking permission in iOS settings;
• manage Apple subscriptions through your Apple ID settings;
• delete local entries inside the App where such controls are available;
• contact us to request deletion of synced or backend-linked data.

To exercise privacy rights, contact us at support@kinapp.dev.

11. California Privacy Notice

If you are a California resident, you may have rights under the CCPA/CPRA, including the right to:

• know what personal information we collect, use, disclose, or share;
• request deletion of certain personal information;
• correct certain personal information;
• opt out of certain sharing for cross-context behavioral advertising.

We do not sell personal information for monetary consideration.

Where applicable, ad-related sharing for cross-context behavioral advertising is controlled through ATT consent and related settings.

12. Data Retention

We retain information for as long as reasonably necessary to:

• provide the App and requested features;
• maintain saved history, wallet, purchases, sync, and analysis;
• comply with legal obligations;
• resolve disputes;
• enforce agreements;
• prevent fraud and abuse.

Retention periods may vary depending on the type of data and the purpose for which it is processed.

13. Data Security

We use reasonable technical and organizational measures designed to protect information against unauthorized access, loss, misuse, or alteration.

However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

14. International Transfers

Your information may be processed in countries other than the one in which you live.

Where required by law, we use appropriate safeguards for such transfers.

15. Children's Privacy

The App is not directed to children under 13, or under the age at which personal data processing requires parental consent in the relevant jurisdiction.

If you believe a child provided personal information in violation of this policy, contact us and we will take appropriate steps.

16. Third-Party Services

The App may rely on third-party services, including:

• Apple services;
• advertising providers;
• analytics or diagnostics providers;
• cloud infrastructure providers;
• AI service providers.

Those third parties may process information under their own privacy policies where they act as independent controllers or service providers.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

If we make material changes, we may notify you through the App, on our website, or by other appropriate means. The updated version will become effective on the date shown above.

18. Contact Us

If you have questions, requests, or concerns about this Privacy Policy or our privacy practices, contact:

Email: support@kinapp.dev