Privacy Policy

What we collect

• Your account. An email address and a password. The password is stored only as a cryptographic hash — we cannot read it.
• What you write.Journal entries, margin notes, and your reading and practice history. These are private to your account: they are not visible to other users, and we don’t read them except as needed to run the service or if you ask us to look at something.
• Billing records. If you subscribe, payment is handled by Stripe. Your card number goes directly to Stripe and never touches our servers; we keep only your subscription status and a reference to your Stripe customer record.
• Service records. Ordinary server logs (such as IP addresses and requested pages) for security and debugging, and per-request token counts when an AI feature runs, for cost accounting.

Cookies

We set one cookie: a session cookie that keeps you signed in. There are no advertising cookies, no analytics trackers, and no third-party scripts watching what you do.

AI reflections

When you ask for a reflection on a journal entry, the text of that entry (and the day’s passage, if the entry was written against one) is sent to Anthropic, the AI provider, to generate the response. That is the only time your writing leaves our systems, it happens only when you request it, and it is used only to produce your reflection. The daily passage commentary is generated from the public-domain texts alone — no user data is involved.

Who we share data with

We share data only with the services that run the app, and only what each one needs:

• Anthropic — journal entry text, when you request an AI reflection (see above).
• Stripe — payment processing and subscription management.
• Resend — delivers our transactional email (verification and password-reset messages).
• Railway — hosts the application and its database.

We never sell your data, and we don’t share it with advertisers or data brokers.

Email

We send transactional email only: verifying your address and resetting your password. No marketing lists, no newsletters you didn’t ask for.

Deleting your account and data

You can delete your account yourself from the account page. Deletion is immediate and permanent: your journal entries, margin notes, and reading history are removed, and remaining service records are disconnected from your identity. There is no recovery, so export anything you want to keep first.

Children

A Stoic Mind is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has created an account, contact us and we will delete it.

Changes to this policy

If we change how we handle your data, we will update this page and its effective date. Material changes — anything that shares more data than described here — will be announced in the app before they take effect.

Contact

Questions about this policy or your data: hello@astoicmind.com — or see the contact page.