Are my entries private?

Your privacy in Spilled works like this:

Your entries live on your phone. They are stored locally on your device.

When you log a new entry, the text is sent to a third-party language service for tagging. The service returns the tags and the text is then discarded. Spilled does not store your entry text on any server.

When you tap a pattern flag as a Pro user, a summary of your recent entries is sent to the same third-party language service to write a personalized read. Once the read is written, the input text is discarded.

What we do store on our servers:

• Your account profile (email, name from Apple Sign In, account creation date)
• Your subscription status
• Anonymous pattern signals (which pattern fired, what zone the score was in, age of the connection in days) if you have anonymous insights turned on

What we never store:

• The text of your entries
• The names of your connections
• Any identifying information about the people you log about

You can turn off anonymous insights anytime in the Account tab. With it off, no data leaves your phone except what is needed to tag entries and generate guidance.

Because your entries live only on your phone, they are removed if you delete the app or lose the device. To keep a copy, use the backup feature in the Account tab to save a file you control. See "How to back up and restore your data" for the steps.

You can also delete your account at any time. Deletion removes your profile from our servers. Your journal entries are stored only on your phone, so they are removed when you uninstall the app unless you have saved a backup file first.