Privacy Policy

Last Updated: February 3, 2026

At Dear Self, we believe your thoughts are your own. We do not mine your data, we do not sell your data, and we do not read your journal entries.

1. Data Collection

We collect only the minimum information necessary to provide our service: your email address (for identification) and the journal entries you voluntarily send to us. We do not track your location, browser history, or interactions outside of our specific email exchanges.

2. Data Encryption & Security

Security is our top priority. All journal entries are encrypted at rest using AES-256 (Advanced Encryption Standard). This means your entries are scrambled into unreadable code before they ever touch our database. If you use the 'Own Your Data' plan, your provided API keys and credentials are also encrypted at rest. We use industry-standard TLS (Transport Layer Security) for all data in transit.

3. Data Ownership

You own your data. End of story. You may request a full export of your journal entries or a complete deletion of your account at any time by contacting yordan@dearself.ai. We handle these requests manually to ensure security.

4. Third-Party Processors

We use trusted third-party providers to operate our service: Stripe (for payments), DigitalOcean (for application hosting), Cloudflare (for static site hosting and email routing), and Google Gemini (for generating localized reflection prompts). We ensure these partners adhere to strict confidentiality agreements.

5. Contact Us

If you have any questions about this policy or your data, please contact our Data Protection Officer at yordan@dearself.ai.