Your words belong to you.

Information Feltwork handles

• Account information: a stable account identifier and basic profile information supplied by Clerk. Feltwork does not receive your password.
• Journal information: the emotions, intensity, reflections, next steps, and optional drawings and captions you choose to save.
• Device drafts: unfinished web reflections are stored under an opaque account-specific key in your browser. In the iPhone and Android apps, draft fields are split into encrypted Keychain/Keystore-backed records for the signed-in account. Drafts are not synced until you complete and save them.
• Public-website analytics: Google Analytics measures visits to Feltwork’s public marketing, method, support, privacy, and terms pages. It may collect a first-party browser identifier, page URL and title, referrer, approximate location, browser and device information, and event timing. The Google tag is not included on sign-in, journal, saved-entry, account, feedback, or owner-metrics pages; it is not given a Feltwork account identifier, journal content, emotion selections, or reflection answers. Advertising signals and ad personalization are disabled in the site configuration.
• Aggregate page-view counts: Feltwork also keeps daily totals for the five public pages listed above. These counts store only the UTC date, one fixed public-page path, and a count. They do not use cookies or store IP addresses, account identifiers, query strings, or referrers, and they are not linked to journal activity.
• Product-usage information: three coarse milestones—opening the signed-in app, starting a check-in, and successfully saving a new reflection—are counted by UTC day and platform category. The account identifier is transformed with a dedicated secret into a pseudonymous value before storage. These rows do not contain journal text, drawings, captions, emotion selections, reflection answers, email addresses, device identifiers, or arbitrary event details.
• Operational information: limited request, security, and error metadata needed to operate and protect the service. Journal text, drawings, and captions are excluded from application logs and product-usage metrics.

How information is used

We use your information to authenticate you, save and synchronize your entries, provide export and sharing features, understand aggregate public-site traffic and product adoption and completion trends, prevent abuse, troubleshoot the service, and comply with applicable law. Feltwork does not sell journal information, public-website analytics, or product-usage information; use them for targeted advertising; or use journal text or drawings to train artificial-intelligence models.

Service providers and sharing

Clerk provides authentication, Cloudflare provides hosting and database infrastructure, and Google Analytics processes limited usage information from the public pages identified above. They process information only as needed to provide those services under their own contractual and security obligations. Feltwork shares an entry with another app only when you deliberately choose Share or Email; that copy is then handled by the app and recipient you select.

Beta feedback

If you deliberately submit the beta feedback form, Feltwork stores your ratings, written feedback, general device and accessibility information, and an optional contact email in a database table separate from journal entries. Authentication is required to reduce abuse, but your Clerk account identifier, journal entries, emotion selections, and reflection answers are not stored with the feedback. The complete feedback submission is automatically deleted within 90 days. Feedback is used only to improve Feltwork and is not sold, used for advertising, or used to train artificial-intelligence models.

Retention, export, and deletion

Saved entries remain in the active database until you delete an individual entry or delete all journal data. Daily pseudonymous product-usage rows and aggregate public-page counts expire after 395 days. Deleting all account data also removes the product-usage rows associated with the account’s pseudonymous value. Deletion removes the selected records from the active database immediately and cannot be undone in Feltwork. Cloudflare’s encrypted disaster-recovery history may retain an earlier database state for up to 30 days before it expires. You may download an individual readable entry or export the structured contents of your active journal at any time.

Security

Before a completed reflection is written to the database, the Feltwork Worker encrypts its emotion selection, intensity, journal text, and any drawing and caption together using authenticated AES-GCM encryption and a key kept separately as a protected Worker secret. A direct view or export of the database therefore does not reveal readable journal content. After verifying your account, the Worker decrypts entries so Feltwork can display or export them for you.

This is server-side field encryption, not end-to-end encryption: Feltwork’s server code can decrypt an entry while serving an authorized request. Feltwork also uses encrypted connections, managed infrastructure encryption at rest, signed authentication tokens, account-scoped database queries, restrictive browser security headers, and limited operational logging. No online service can promise absolute security.

Drawings and deliberate exports

Optional sketches are stored with their journal entry and follow the same access and deletion controls. Feltwork does not interpret drawings with AI. Sharing or downloading an entry or sketch creates a copy outside Feltwork; you choose its destination. Native exports use a temporary file that Feltwork removes after the share sheet closes or on the next app start if interrupted. Copies you choose to save or send remain under your control and the destination service’s policies. Saving a sketch to Photos is an explicit choice and does not give the journal access to read your photo library.

Your choices

You can review and export saved entries, permanently delete one entry, clear the unfinished draft for your account on a device, sign out, or permanently delete your Feltwork account together with all completed journal records and associated pseudonymous usage rows. Beta feedback is intentionally not connected to your account identifier and expires automatically within 90 days.

Children and changes

Feltwork is not directed to children under 13. We may update this notice as the service changes and will revise the date above when we do.