Get the app

Legal

Privacy Policy

Last updated: November 10, 2026

This Privacy Policy describes how Rock Castle Solutions LLC (“we,” “us,” or “our”) handles information in connection with the Talk to Me Diary mobile application (the “App”), optional online features that support the App, and this website at talktomediary.com (together, the “Services”). Please read this policy alongside our Terms of Service.

1. Summary

2. Information we collect

2.1 Device protection and AI authentication

The current version does not require a Google or Apple sign-in to write a diary. Apple’s device authentication protects access using Face ID, Touch ID, or the device passcode. A device passcode must be configured. The app receives the authentication result, not biometric templates or your passcode. Anyone able to authenticate with the device credentials can open the local diary. The app covers diary content when inactive and locks when it enters the background.

When you use an online AI feature, Firebase Authentication supplies a session identifier and token to authenticate requests and enforce usage limits. New users receive an anonymous Firebase identity without providing a name or email. A valid existing authentication session may continue to be used after an update. Authentication and security providers may process connection metadata such as IP addresses. This authentication is not a diary backup or sync service.

2.2 Diary content and app data on your device

Journal text, mood selections, guided conversation data you save, and metadata you generate in the App are stored on your device unless and until you use a feature that requires sending text for processing (see below). Diary storage uses a stable local identifier independent of AI credentials. When updating from the account-based version, the currently selected account’s diary is retained as the local diary. Other accounts’ entries and older entries without verified ownership remain preserved separately and are not automatically merged or displayed. For unassigned older entries, Recover older diary lets you confirm that the entries are yours and authenticate with your device before adding them to the local diary. Same-date writing is combined without replacing current text; photo references and guided answers are retained. Exact originals of combined entries remain archived locally. Recovery does not send diary content to AI. Entries assigned to another account are not included. The app does not provide automatic diary syncing or a server backup. Our AI service does not save diary text or AI responses in its database, application logs, or cache. Your operating system may include local app data in device backups according to your settings.

2.3 Optional AI and network-assisted features

AI chat, AI-assisted diary writing, guided questions, Reflection, and mood analysis use our Cloudflare-hosted service and OpenAI. Requests include the text relevant to the feature: for example, your guided answers for diary writing or the selected diary content for reflections. If you enable automatic AI mood suggestions, saving an entry without a mood sends its text and guided answers for mood analysis. This setting is off by default in the updated app; older versions may request mood analysis automatically after saving. Opening Reflection can automatically request a report when enough diary writing is available; Refresh requests a new report. Manual writing and editing do not require AI. Outputs are not medical or professional advice.

For text-writing and reflection requests, we request that OpenAI not store response application state (store: false). Live voice uses OpenAI’s Realtime API; our app and backend do not save audio recordings, but a conversation transcript is kept on the device and used for diary generation. This does not guarantee zero retention: OpenAI may retain abuse-monitoring data under its policies and applicable account settings. See OpenAI’s API data controls. Our service stores hashed account identifiers and expiring usage counters to enforce limits. Infrastructure providers may retain operational metadata, such as network and security records.

Voice input

Live voice lets you speak directly with AI, hear its spoken replies, and interrupt naturally. When you open a voice conversation and allow microphone access, audio is streamed to OpenAI over a secure WebRTC connection. Our Cloudflare service authenticates and sets up the connection without exposing the OpenAI project key to the app. The app and our backend do not save voice recordings. OpenAI transcribes the conversation; a transcript is kept on your device, and your spoken words are sent through Cloudflare to OpenAI to summarize the conversation as a diary and reflect on your feelings. Transcription can be imperfect. You can pause or finish a call, and leaving or locking the app stops the connection. Your voice, accent, and personality preferences are saved on your device. Separate dictation in the diary editor uses Apple’s on-device speech recognition where supported; that dictation audio is not sent to AI. Text saved or submitted from the editor follows the AI-processing rules above. Microphone and Speech Recognition permissions can be changed in iPhone Settings.

2.4 Photos

The App may store references (such as Photos library identifiers) so entries can link to images that remain in your library. Photo files are not uploaded to our servers or sent to OpenAI. Apple Photos may download an image from iCloud Photos when needed, depending on your Apple settings. Removing a photo from your library or withdrawing access can make it unavailable in an entry.

Diary export and backup

The updated app offers manual JSON backups and readable text exports under Backup & privacy. Backups contain diary entries, guided answers, moods, dates, and photo references; they do not contain photo image files, chat history, or account credentials. Photo references may not resolve on another device. Restoring a backup adds missing dates and keeps existing dates unchanged, without sending entries to AI.

Exports are not password-protected. Anyone with access to the file can read it. You choose where to save or share it, including iCloud Drive or another Files provider; that provider’s privacy and retention terms apply. We do not receive a copy through the export or restore feature. Exports do not update automatically. Deleting an entry or uninstalling the app does not delete exported copies; manage those separately.

No advertising

The subscription update removes advertising for everyone, including free users. It does not include Google Mobile Ads or request advertising tracking permission. Earlier app versions may still display ads until updated.

Optional usage analytics

Google Analytics for Firebase is off by default and starts only if you enable Share usage analytics in Backup & privacy. It includes basic feature events, sessions, app/device information, and an app-instance identifier. Diary text, moods, guided answers, photos, recordings, and purchase identifiers are not included in custom analytics events. IDFA, IDFV, automatic screen reporting, and advertising personalization are disabled. Turning analytics off stops collection and resets the local analytics identifier; previously received data remains subject to Google's retention policy. See Google's Privacy Policy.

Purchases and usage allowances

Apple processes monthly subscriptions. The app sends Apple-signed app and purchase information through our authenticated Cloudflare service to verify your plan and preserve earlier one-time purchases. We do not receive payment-card details. Apple handles payment records under Apple’s Privacy Policy.

Cloudflare stores a hashed app-installation/Apple app-transaction identity, verified purchase and renewal identifiers, subscription status, successful AI-diary counts, regeneration counts, and voice-session durations. These records enforce the first two free AI diaries and monthly voice allowances, prevent deletion from resetting free credits, and process refunds. Purchase proofs are verified in transit and are not stored as complete receipts. This billing ledger contains no diary text, conversation transcripts, or audio recordings. It persists independently of local entries; deleting an entry or uninstalling does not itself erase billing records. Contact us about access or deletion requests; limited purchase and fraud-prevention records may be retained when required.

Reading, editing, and exporting existing entries and manual writing remain free. Failed diary generation does not use a free diary credit; connected voice time still uses the voice allowance. One successful regeneration of the same conversation is included without another diary credit. Original one-time purchasers retain their original writing benefits. Subscriptions renew through Apple unless canceled in Apple subscription settings; unused voice minutes do not roll over, and there are no automatic overage charges.

2.5 Website and support

When you visit this website, hosting and security records may include IP address, browser type, and approximate region. If you use the contact form on talktomediary.com, your name, email address, and message are transmitted to us through FormSubmit, our form-delivery provider so we can respond; that provider may process technical metadata needed to deliver and protect against abuse.

3. How we use information

We use information to:

4. Legal bases (where applicable)

Depending on your region, we may rely on contract (providing the Services), legitimate interests (security and improvement), or consent (where required for certain processing). You may withdraw consent where processing is consent-based, subject to App functionality.

5. Sharing

We may share information with:

We do not sell your personal information as a traditional “sale” of data broker lists. If local law defines “sale” broadly (for example, certain California interpretations), we will honor applicable opt-out rights where required.

6. Retention

Device-stored diary data remains under your control on your iPhone or iPad until you delete it or remove the App (subject to your backups). Server-side records (such as authentication logs or support emails) are retained only as long as needed for the purposes above and applicable law.

7. Security

We use reasonable administrative, technical, and organizational measures designed to protect information. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

8. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or export certain personal information, or to object to or restrict certain processing. To exercise rights, contact us through the Contact page. You can delete individual entries in the diary editor, export your diary in Backup & privacy, and disable automatic AI mood suggestions there. Avoid AI features if you do not want relevant text or live conversation audio sent for processing. Signing out or deleting an authentication account should not be treated as erasing all local diary data; delete entries or remove the app separately, and manage exported copies and device backups separately. Contact us for account or server-record deletion requests. You may also adjust Photos, Microphone, and Speech Recognition permissions in your device’s Settings.

9. Children

The Services are not directed to children under 13 (or the minimum age required in your jurisdiction). If you believe we have collected information from a child inappropriately, contact us and we will take appropriate steps.

10. International users

If you use the Services from outside the United States, information may be processed in the United States or other countries where we or our providers operate. We take steps designed to comply with applicable cross-border transfer rules where required.

11. Changes

We may update this Privacy Policy from time to time. We will post the new version on this page and update the “Last updated” date. We will provide additional notice or request consent when required by applicable law.

12. Contact

For privacy-related requests or questions, email admin@manualmanager.com or use our Contact page.