Privacy Policy

Quietly Woven handles only what you choose to write or select inside the app:

• journal entries and reflections you write;
• moods you log;
• your answers to guided reflection questions;
• personal questions you create;
• a simple note of when you last opened the app, used only to show a gentle welcome back after time away.

The app does not ask for your name, phone number, age, contacts, photos or location. If you choose App Lock, it asks for a recovery email address and verifies it before enabling the lock.

Your journal entries, moods, reflection answers and personal questions are stored locally in the app’s storage on your device. Quietly Woven does not upload your journal entries, moods, answers or personal questions to our servers, and we cannot see or read them.

Quietly Woven does not provide cloud backup or sync. Your journal is not copied to another device automatically.

Quietly Woven does not have user accounts. There is no account sign-up or login. Optional App Lock email verification registers a recovery address for that device; it does not create a journal account or cloud backup.

App Lock is optional. You can choose a PIN or supported device biometrics. Setup verifies a recovery email before enabling the lock. If you forget the PIN or cannot use biometrics, a fresh email code lets you choose a new PIN while keeping the journal on your device.

The recovery service processes your recovery email address, a random device registration identifier, a digest of the device recovery credential, and temporary verification and abuse-prevention records. It uses a keyed digest of the request network address for rate limits. Hosting and email providers may also process network and delivery information needed to operate the service. The recovery API never receives your PIN, journal entries, moods, answers or personal questions.

Verification codes expire after ten minutes, allow a limited number of attempts and can be used once. Codes are stored as keyed digests by the recovery API; the email provider processes the delivered message. Recovery addresses are used for App Lock verification and recovery, not marketing.

Quietly Woven Premium is an optional monthly or annual subscription. Core journaling does not require a purchase.

Payments are processed entirely by Apple (App Store) or Google (Google Play), using your store account. We never receive your payment-card details.

The app uses RevenueCat, a subscription-management service, to show available subscription options, process purchases and restores through the App Store or Google Play, and confirm whether Premium is active.

The app connects to RevenueCat when it starts, whether or not you ever make a purchase, so it can check subscription status. RevenueCat uses an anonymous app user identifier; the app does not send your name, email or journal content to RevenueCat. RevenueCat, Apple and Google may process purchase, transaction, device and diagnostic information under their own privacy policies:

• RevenueCat Privacy Policy
• Apple Privacy Policy
• Google Privacy Policy

Quietly Woven does not include analytics, crash-reporting, advertising or tracking tools. It shows no ads, and we do not use your information for advertising or sell it.

For subscriptions, the app communicates with RevenueCat and the Apple App Store or Google Play. Optional email recovery also uses an API host, a PostgreSQL database provider and an authorized email provider to register recovery addresses, check verification codes and deliver recovery messages. These services receive recovery details, not journal content. The app’s typefaces and images are built into the app and are not loaded from outside services.

We do not share, sell or rent your journal content, because it stays on your device.

If you choose Export journal backup, the app opens your device’s share options so you can send a copy of your journal, including your personal questions, wherever you choose. What happens to that copy then depends on where you send it.

Quietly Woven does not request access to your camera, microphone, location, photos or files. It uses the internet for subscription services and optional email recovery, and may use your device’s vibration for gentle haptic feedback when you save. If you choose biometric App Lock, the operating system handles fingerprint or Face ID authentication. Quietly Woven receives the authentication result and does not receive or store biometric templates.

Your journal stays on your device until you remove it. You can:

• delete individual entries in the app;
• use Delete all journal data on the in-app Privacy screen to permanently remove every saved reflection, mood and personal question from that device;
• clear the app’s storage or uninstall the app, which removes all of its locally stored data.

Because there is no cloud backup, deleted data and data removed by uninstalling cannot be recovered by us. Export a backup first if you want to keep a copy.

Verified recovery registrations are retained until you request deletion through the contact address below. Clearing app storage or uninstalling removes the device’s local recovery credential, but does not automatically delete the server registration. Expired pending challenges and old rate-limit records are cleared during daily maintenance. Abandoned unverified registrations become eligible for deletion after 24 hours.

Subscription records held by Apple, Google or RevenueCat are kept under their own policies. Subscriptions are managed or cancelled in your App Store or Google Play subscription settings.

Your journal is protected by your device and its operating-system security. Optional App Lock adds a PIN or device biometrics to control opening the app. Native lock credentials use operating-system secure storage; the browser stores a salted PIN digest. App Lock does not separately encrypt your journal entries. Recovery uses HTTPS and one-time codes with expiry, attempt limits and resend limits. We recommend using a device passcode and keeping your operating system up to date.

Quietly Woven does not ask for a name or age, and journal content stays on the device. If optional App Lock is used, a recovery email address and device registration are processed as described above. A parent or guardian can use the contact address below for questions or a recovery-registration deletion request.

If the way Quietly Woven handles information changes, we will update this page and the “Last updated” date above.

Questions or privacy requests can be sent to The Quest Family at support.questfamily@gmail.com.