Privacy Policy

Last updated: 1 October 2026

1. Who we are and what this policy covers

Mystic Journal is operated by Nick Adlem, trading as Mystic Journal. Contact support@mysticjournal.app or legal@mysticjournal.app about privacy. Business correspondence: 17d Bellevale Shopping Centre, Liverpool, L25 2RF, United Kingdom.

Mystic Journal is a spiritual reflection, journaling and learning app. No Mystic Journal account is required. This policy describes the corrected app version accompanying this policy. Older installed versions and previously transmitted information may have different processing histories; see the legacy-services section.

2. Content stored on your device

The app stores journal entries, dreams, mood and energy notes, habits, optional profile and birth details, collections, saved scans, photos and media references, AI conversations and memories, course progress, certificates, settings and local activity statistics. These support the features you choose. Local profile details are not automatically made public.

Ordinary journaling and local reference features do not require AI consent. Optional AI features transmit the content described below only after the corresponding consent. Text, photographs, voice and spiritual reflections may identify you or reveal sensitive information; these requests are not guaranteed anonymous.

3. Crystal Scanner: backend and OpenAI

With Crystal Scanner consent, compressed copies of selected photographs are sent to the Mystic Journal identification backend, hosted for the project on Cloudflare through Rork, and then to the OpenAI Responses API. Initial identification sends photos. Refinement sends photos, a summary of the previous candidates and confidence, and your follow-up answers. Verification sends original scan photos, an optional additional photo, the previous-result summary, answers and any targeted-photo request information. Observations supplied as answers are included. Separate notes saved locally are not an additional field in the reviewed request payload.

A verification-preparation request sends candidate/result information and photo count to the backend; that step does not send photos or make its own OpenAI request. Identification is an estimate, not laboratory testing, valuation, authenticity or safety certification.

4. Herb and Photo Scanner

With separate Herb/Photo consent, your selected photo is compressed and sent to a Rork-operated AI gateway for analysis and library matching. When the multi-pass path is used, the app also sends the photo directly to Galaxy AI at image.galaxy.ai. Several analysis passes may run. The gateway model processors, Galaxy processing arrangements and account-specific retention terms have not yet been confirmed.

Wikipedia may receive the suggested item name and search terms for a reference check, not the photograph. A Wikipedia name match does not establish that the photo identification is correct. Never eat, burn, apply or prepare a plant based on the scanner.

5. AI reflection and voice transcription

With AI reflection consent, the Rork-operated AI gateway receives context for the selected feature: recent journal excerpts, mood and habit patterns, your messages, prior conversation context and saved guide memories, along with relevant celestial or card information. A personalised tarot reading can include your first name, zodiac sign and selected card. These features use the gateway text and structured-output routes; downstream model-provider identities have not yet been confirmed.

With separate voice consent, the recording you make in the journal or guide is sent to the Rork-operated speech-to-text service and its processors. Returned text is placed in your entry or draft message. Sending that text for AI guidance needs guide consent as well. Microphone access and transcription consent are separate choices. Text-to-speech uses the device speech API.

6. Purchases and other network services

Apple App Store or Google Play handles payment details. RevenueCat receives purchase/transaction information, receipt-related information and its SDK-generated App User ID to verify and restore access, prevent fraud and provide subscription analytics. This app does not set a custom RevenueCat customer ID or contact attributes. An anonymous SDK ID is not a promise that all processing is unlinked. Store and RevenueCat records are not deleted or cancelled by local deletion or consent withdrawal.

If weather is configured and you grant location permission, latitude and longitude supplied by the device are sent to OpenWeatherMap at api.openweathermap.org. The reviewed code does not round those coordinates. Without the weather API key, this path does not request location or weather. Do not assume that a lower accuracy request guarantees coarse location.

Remote artwork/media hosts receive normal requests needed to load those assets. External research links and The Old Broomstick physical-goods store open when selected; those sites handle their own visits, purchases and privacy choices. The scanner connectivity check contacts Google. Internet services necessarily receive connection information such as IP addresses; their infrastructure logging and retention need separate confirmation.

7. Local backups, security and legacy services

The app can write a local backup document and create exports you choose to share or copy elsewhere. A local document is not an independent cloud backup: iCloud/device backup inclusion depends on your device settings, available storage and successful backups. Protect exported files; they can contain readable personal information.

Optional Face ID/device authentication controls access to the app interface when enabled. It does not encrypt exported files or protect copies outside the app. The local storage integrity checksum is not encryption. Use device security and consider who can access Files, shared documents and device backups.

The corrected release no longer mounts the retired automatic cloud-sync service, even if old local settings remain enabled. Existing local content and sync settings are not erased by this retirement. Historical remote copies, if any, are not deleted automatically; contact support to establish their existence and available deletion options.

The corrected release omits automatic Rork screen/lifecycle analytics injection. Earlier native builds using that SDK could send screen paths, route parameters, SDK identifiers and lifecycle/device information through the Rork analytics relay to PostHog. Development-preview tooling is separate from the corrected release. Retention and deletion arrangements for any historical analytics must be confirmed with the operator. Local feature statistics in the corrected app are not automatically uploaded by the retired sync path.

8. Retention and provider limits

Local content is kept until you remove it or request local deletion. Uninstalling may remove the app sandbox, but it does not remove external exports, backups or provider records and does not cancel subscriptions.

OpenAI publicly states that API content is not used for model training unless the API customer opts in. Its documentation describes default abuse-monitoring retention of up to 30 days, with stated legal/safety exceptions, and default Responses API application-state retention of at least 30 days. The reviewed backend does not explicitly disable response storage. Account-specific sharing choices, retention exceptions, processing region and any approved reduced-retention controls have not been verified for Mystic Journal; no zero-retention or no-training account guarantee is made here.

Rork gateway/transcription downstream processors, Galaxy AI retention/training terms, infrastructure logs, historical cloud/analytics retention and RevenueCat/store record-retention periods have not all been established for this deployment. We do not promise immediate provider deletion, non-linkage or that local deletion erases already-transmitted information. Contact support about a specific request. These arrangements require confirmation before final publication of this policy.

9. Consent and local deletion

Crystal Scanner, Herb/Photo Scanner, AI reflection and Voice Transcription have independent versioned choices. Each prompt starts unchecked and may be declined. Withdraw the relevant choice in Me → Profile Settings → AI & Voice Consent. Withdrawal invalidates pending work and blocks subsequent transmissions; cancellation of an already-started request cannot recall bytes the recipient already received. Your local entries, scans, progress and store entitlements are preserved by withdrawal.

Me → Profile Settings → Data Management → Delete All Data is a separately confirmed destructive action. It pauses the app, stops ongoing work, removes personal AsyncStorage data, app-managed Documents/cache content including scanner photographs, recordings, local backup documents and generated exports, and cancels local notifications. The provider/navigation tree and local query state are cleared. The session stays closed until you close and reopen the app so stale background work cannot recreate deleted content. Errors are reported instead of claiming completion, and an interrupted deletion is retried on launch.

Local deletion does not cancel subscriptions or change live purchase history/entitlements. It cannot remove copies already saved in Photos, exported to Files outside this app, shared with others, or included in external device/iCloud backups. Delete those separately using the corresponding service. Information already processed by providers is subject to their retention and deletion arrangements, not this local control.

10. Your privacy requests

Depending on applicable law, you may have rights to access, correct, erase, restrict or object to processing, withdraw consent, obtain a portable copy, or complain to your data-protection authority. Contact legal@mysticjournal.app. We may need limited information to locate relevant records and verify a request. Do not email sensitive journal content unless necessary and agreed. Requests concerning providers or legally retained purchase records may have limitations which must be explained case by case.

Mystic Journal does not sell your journal content or use your scanner photos for its own advertising. This is not a guarantee about unverified third-party practices. Lawful bases, processor contracts, international-transfer safeguards and record-specific retention schedules require operator confirmation before this draft is finalised.

11. Children and changes

Mystic Journal is not designed for children under 13. The App Store age rating is determined separately from its content questionnaire; a statement in this policy is not an age-verification system. Contact support if you believe a child has supplied information requiring attention.

Changes are shown with a revised date in the app. Material changes to an AI recipient or payload require a renewed feature-consent version. The public website policy must be updated separately; editing this app does not publish a website change.