Privacy Policy

Our approach to privacy

PAL is a journalling and self-reflection tool. The content of your journal entries is personal, and we treat it accordingly. This policy explains what data we collect, how we use it, and your rights over it.

1. Information We Collect

We collect information you provide directly, information generated as you use the Service, and limited technical information:

• Account information: name, email address, and password when you register
• Journal content: entries, check-ins, and reflections you submit through the Service
• Usage data: how you interact with the app (e.g. features used, session duration) — used to improve the product
• Device and technical data: browser type, operating system, IP address, and referring URLs — collected automatically
• Payment information: processed by our payment provider; we do not store full card details

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Service
• Generate personalised AI-driven follow-up questions within your sessions
• Send transactional emails (account confirmation, password reset, billing receipts)
• Send product updates and newsletters, where you have opted in
• Analyse aggregate usage patterns to improve the product (using anonymised data)
• Comply with legal obligations

We do not use your journal content for advertising, and we do not share it with third parties except as described in this policy.

3. AI and Your Journal Content

PAL uses AI to generate follow-up questions and reflections in response to your journal entries. Your content is sent to our AI provider to generate these responses. It is processed solely for the purpose of delivering the Service to you, and is not used to train or improve AI models.

AI providers we use are contractually bound to data processing agreements that restrict secondary use of your content.

4. Data Storage and Security

Your data is stored on servers located in [data centre region]. We use industry-standard encryption (TLS in transit, AES-256 at rest) and access controls to protect your information.

No system is completely secure. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

5. Sharing Your Information

We do not sell your personal data. We share your information only in the following circumstances:

• Service providers: third parties who help us operate the Service (hosting, payment processing, email delivery) — bound by data processing agreements
• Legal requirements: when required by law, court order, or government authority
• Business transfers: in connection with a merger, acquisition, or sale of assets — you will be notified before your data is transferred

6. Cookies and Tracking

We use essential cookies to maintain your session and preferences. We use analytics cookies to understand how the Service is used in aggregate. You can manage cookie preferences in your browser settings.

We do not use third-party advertising cookies or cross-site tracking.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access a copy of the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Object to or restrict certain processing
• Data portability — receive your journal entries in a machine-readable format
• Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at privacy@pal.app. We will respond within 30 days.

8. Data Retention

We retain your account and journal data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g. fraud prevention).

9. Children's Privacy

The Service is not directed at children under 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected data from a child under 16 without appropriate consent, we will delete it promptly.

10. Changes to This Policy

We may update this policy from time to time. When we do, we will revise the 'last updated' date and notify you by email or through the Service for material changes. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.

11. Contact

Questions about this policy or your data? Contact our privacy team at privacy@pal.app or through our contact page.