Last updated: July 4, 2026
This Privacy Policy is issued by Chunlong Cao (an individual developer, hereinafter "we," "us," "our," or "the Developer") and applies to Inner Talk Diary (hereinafter "the App"), a private journaling application for iOS.
The guiding principle of the App is simple: your innermost thoughts belong to you. We designed the App with privacy first—your journal entries are stored only on your own device by default. We operate no central server that stores your journal content, and we do not send your journal content to any server of ours or to any third party. We cannot see what you write. This Policy explains in detail what data we collect, why we collect it, who processes it, and the rights you have.
The App is a private journaling tool that helps you record your inner dialogue, emotions, and thoughts. We recognize that journal content constitutes highly sensitive personal information, and we have written this Policy to describe our data practices transparently and honestly.
This Policy applies to all use of the App through your iOS device. The App is offered primarily to a global, international audience, and our practices are therefore designed to comply with:
By downloading, installing, or using the App, you confirm that you have read and understood this Policy. If you do not agree with this Policy, please do not use the App.
We are committed to the principle of data minimization. The categories of data we may process are described below.
When you create an account or sign in, account identity information is involved. The App supports the following sign-in methods:
Authentication is handled by Firebase Authentication (provided by Google). Depending on the sign-in method you choose, the account information involved may include your email address, the unique user identifier returned by a third-party sign-in provider, and a display name (if you provide one).
About passwords: If you sign in with email and password, the App itself does not store your password. Your password is securely managed by Firebase Authentication as an encrypted hash, and we cannot read your plaintext password.
The App does not collect phone numbers and does not offer SMS or phone-based one-time-passcode sign-in.
To improve the stability and experience of the App, we use the following Google Firebase services:
Analytics and diagnostics may include app instance or device identifiers, product-interaction events, crash data, performance data, and other diagnostic data. They do not include your journal body content, photos, videos, audio recordings, or precise or coarse location data. We do not use this data for advertising tracking, and the App is configured not to allow ad-personalization signals or IDFV collection for Firebase Analytics. Firebase may still process app instance identifiers, device and operating-system information, crash diagnostics, performance diagnostics, and product-interaction events in order to provide analytics and crash-reporting services.
The App may ask for certain iOS permissions only when you choose to use the related feature:
Photos, videos, audio, place information, and other journal attachments are stored locally on your device by default. If you enable Premium iCloud Sync, this content may be synced to your own private iCloud database through Apple CloudKit as described above. We cannot access the journal content stored in your private iCloud database.
The App offers a Premium auto-renewable subscription. All billing is processed through the Apple App Store.
| Data category | Storage / processing location | Processor |
|---|---|---|
| Account identity and sign-in | Firebase Authentication cloud | Google (Firebase) |
| Journal content (default) | Local on your iOS device (SwiftData) | You only |
| Journal content (subscriber sync) | Your private iCloud database (CloudKit) | Apple (under your own account; we cannot access it) |
| Usage analytics, crash reports, performance data, and other diagnostics | Firebase cloud | Google (Firebase) |
| Subscription status and purchase history | Apple App Store; limited subscription analytics may be processed by Firebase | Apple; Google (Firebase) for analytics events |
The third-party sub-processors we use are:
| Data | Purpose | GDPR lawful basis |
|---|---|---|
| Account information | Create and manage your account; provide sign-in | Performance of a contract (provision of the service) |
| On-device / iCloud journal content | Provide the core journaling feature; cross-device sync | Performance of a contract |
| Usage analytics, crash reports, performance data, and other diagnostics | Fix defects; improve stability, performance, and experience | Legitimate interests |
| Subscription status and purchase history | Provide and manage the Premium service; understand subscription conversion and retention | Performance of a contract; legitimate interests |
We do not sell your personal information. Within the meaning of the CCPA/CPRA, we do not "sell" or "share" personal information for cross-context behavioral advertising. We also do not use your journal content for advertising, and we do not send your journal content to any server of ours or to any third party.
We share necessary data only with the sub-processors listed in Section 3 above, and only to the extent required to provide the corresponding functionality:
In addition, we may disclose information only where required by law (for example, valid legal process or a court order) or where necessary to protect the legitimate rights, safety, and security of us and our users.
Account deletion: The App provides a "Delete Account" function in its settings. Deleting your account will:
Account deletion is irreversible. We will make our best effort to erase the iCloud cloud copies described above when you delete your account. If cloud erasure cannot be completed because of a network issue or temporary unavailability of the iCloud service, any residual copies remain under your own iCloud account, and you may delete them yourself through Apple's iCloud management. If you have questions about account deletion, you may contact us using the details below.
We respect and support your control over your own data.
You have the right to: access your personal data; request rectification; request erasure (the "right to be forgotten"); request restriction of processing; request data portability (export); object to processing; and, where processing is based on consent, withdraw your consent at any time (withdrawal does not affect processing already carried out before the withdrawal). You also have the right to lodge a complaint with the data protection supervisory authority in your jurisdiction.
You have the right to: know what personal information we collect and the purposes for which it is used; request access to it; request deletion; request correction; and opt out of the sale or sharing of your personal information (as stated above, we do not sell or share your personal information). We will not discriminate against you for exercising your rights.
The App is intended for adult users and is not directed to children under 13 (or under 16 in certain jurisdictions). We do not knowingly collect personal information from children. If you believe that a child has provided us with personal information, please contact us using the details below, and we will take steps to delete it.
We implement reasonable technical and organizational measures to protect your data, including:
Nevertheless, no system can guarantee absolute security. Please keep your device and account credentials secure.
We may update this Privacy Policy from time to time. For material changes, we will notify you through an in-app notice or by updating the "Last updated" date on this page. Your continued use of the App after a change takes effect constitutes your acceptance of the updated Policy.
If you have any questions, requests, or complaints regarding this Privacy Policy or your data, please contact: