Privacy Policy

1. Information We Collect

We collect information to provide you with a personalized journaling and AI companion experience.

A. Personal Information

• Account Information: When you sign up, we collect your email address and authentication credentials via Firebase Authentication.
• Subscription Data: If you purchase a subscription, transaction data is processed by RevenueCat and the Apple App Store. We do not store your credit card details.

B. User Content

• Journal Entries: Text you write in your journal.
• Audio Recordings: Voice memos and voice chat interactions with our AI.
• Chat History: Text conversations with our AI companions.
• Sentiment & Usage Data: Data derived from your entries (mood tracking, emotional insights) to provide analytics.

C. Technical Data

• Device Information: Device model, OS version, and app version to help us debug issues and improve performance.
• Crash Logs: Anonymous reports when the app crashes, to help us fix bugs.

2. How We Use Your Information

We use your data strictly to provide and improve the App's functionality:

• Core Service: To store and display your journal entries and chat history across your devices.
• AI Analysis: To analyze the sentiment of your entries and provide therapeutic insights.
• Voice Features: To transcribe your voice notes and power the real-time voice chat.
• Sync: To synchronize your data between your devices using iCloud and Firebase Firestore.

3. Third-Party Services & Data Sharing

We do not sell your data. We share data only with the following trusted third-party service providers required to operate the App:

OpenRouter Data Handling

When using AI features routed through OpenRouter:

• No Prompt Storage: OpenRouter does not store your prompts or responses unless you explicitly opt in to prompt logging in their account settings
• Metadata Only: OpenRouter collects only metadata (token counts, latency) for each request, not the content of your prompts
• Zero Data Retention: Any categorization of prompts for analytics is stored completely anonymously and never associated with your account
• Provider Routing: OpenRouter routes requests to various AI providers. We configure routing to prefer providers that do not train on user data

For more details, see OpenRouter's Data Collection Policy and Logging Policy.

Note: We configure AI services to NOT train on your data where possible.

4. Data Storage and Security

• Encryption: Your data is encrypted in transit (HTTPS/TLS) and at rest on Apple's servers (iCloud).
• Access Control: Your data is accessible only by you. We implement strict security rules in our database to prevent unauthorized access.
• Local Storage: Data is also stored locally on your device using Apple's Core Data and can be protected by your device's security features (FaceID/TouchID/Passcode).

5. Your Rights and Control

You have full control over your data:

• Export: You can export your journal entries and data at any time from the app settings.
• Deletion: You can delete specific entries or your entire account directly within the app.

Account Deletion

Using the "Delete Account" option in settings will permanently wipe your data from:

• Firebase Authentication
• Firestore Database
• Cloud Storage (Audio files)
• ElevenLabs (Voice history)
• Local Device Storage

Bring Your Own Key (BYOK)

If you use the BYOK feature, your API keys are stored securely in your device's Keychain and are never sent to our servers.

6. Children's Privacy & Age-Based Access

Eristotle is committed to protecting the privacy of younger users while providing a safe journaling experience. We comply with the Children's Online Privacy Protection Act (COPPA) and related regulations.

A. Age Requirements

B. Age Verification & Parental Consent

We use Apple's Declared Age Range API (iOS 26+) to determine a user's age bracket without collecting their exact birthdate. This privacy-preserving approach:

• Does not store or transmit the user's actual date of birth
• Relies on age information already verified by the device/Apple ID
• Respects parental controls set at the device level
• Defaults to the most restrictive access if age cannot be determined

Parental Verification During Onboarding

Users under 18 must complete a parental verification challenge during onboarding to confirm that a parent or guardian has reviewed and approved our Terms of Service. This challenge:

• Consists of age-appropriate riddles or math problems that adults can quickly solve
• Allows up to 3 attempts before restarting the onboarding process
• Does not collect any personal information about the parent or guardian
• Ensures that minors have obtained proper consent before using the app

C. COPPA Compliance

In compliance with the Children's Online Privacy Protection Act:

• No collection from under-13s: We do not knowingly collect personal information from children under 13
• Parental consent: Users under 18 require parental approval for in-app purchases through Apple's Family Sharing controls
• Age-gated features: Third-party AI services (BYOK) are restricted to users 18+ as required by those providers' terms of service
• Immediate deletion: If we discover we have collected information from a child under 13, we will delete it immediately

D. Teen User Protections (Ages 13-17)

For users between 13 and 17, we implement additional safeguards:

• Parental Consent Required: Must complete parental verification during onboarding
• Restricted Voice Chat: Cannot access voice chat features (requires 18+)
• Restricted BYOK: Cannot use personal API keys (ensures AI interactions go through our monitored systems)
• No Diagnostics Access: Cannot access advanced diagnostic/debugging features
• Parental Purchase Controls: In-app purchases are subject to Apple's parental control settings
• Premium Features: Can access Cloud AI and text chat features with parental approval

E. Parental Rights

Parents and guardians of users under 18 have the right to:

• Control whether their child's age is shared with the app via device settings
• Review and delete their child's data by contacting us
• Restrict in-app purchases through Apple's Family Sharing
• Request complete account deletion

If a parent chooses not to share their child's age, the app will default to the most restrictive access level for safety.

7. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

8. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

support@eristotle.app