Privacy Policy

Supabase

All content such as journals, goals, and current state is stored encrypted in Supabase (https://supabase.com/). Processing takes place exclusively on European servers (AWS Europe (Frankfurt)).

Hetzner Cloud

As part of our free AI features, we use models hosted exclusively on servers of Hetzner Online GmbH in Germany. Hetzner meets the highest European data protection standards (GDPR-compliant) and operates its data centers according to strict security guidelines in accordance with ISO 27001. Personal data processed through these free AI models remains within the EU, is stored only for the duration of processing, not used for training purposes, and is optimally protected against unauthorized access.

Cloudflare

Service for security (DDoS protection) and fast delivery of applications (https://cloudflare.com/). No personal data is stored.

MailerSend

For sending emails, Journetta uses the service MailerSend, provided by MailerSend, Inc. (228 Park Ave S, PMB 54955, New York, New York 10003-1502, US, "MailerSend"). This allows you to receive confirmation or information emails, for example.

The following data is transmitted to MailerSend when sending:

• Your email address
• The content of the email (including subject and message text)

Data processing by MailerSend is based on our legitimate interest (Art. 6 para. 1 lit. f GDPR) so you reliably and efficiently receive emails from Journetta. MailerSend processes your data exclusively on our behalf and in accordance with GDPR regulations. More info at: https://www.mailersend.com/legal/how-mailersend-stays-gdpr-compliant.

Further information on data processing by MailerSend can be found in the Privacy Policy.

MailerSend, Inc. processes data in the USA. The transfer is based on EU standard contractual clauses pursuant to Art. 46 GDPR.

Stripe

For processing payments and managing subscriptions, we use the payment service provider Stripe, provided by Stripe Payments Europe, Ltd. (The One Building, 1 Grand Canal Street Lower, Dublin 2, Ireland, "Stripe").

When completing a paid subscription, the following data is transmitted to Stripe:

• Your email address
• Payment information (e.g. credit card data – processed exclusively by Stripe, not stored by us)
• Subscription and transaction data

Processing is based on contract performance (Art. 6 para. 1 lit. b GDPR), as it is necessary for processing your subscription. Further information can be found in the Stripe Privacy Policy.

OneSignal

For sending push notifications (e.g. journal reminders, coaching impulses), we use the service OneSignal, provided by OneSignal, Inc. (2100 Geng Road, Suite 210, Palo Alto, CA 94303, USA, "OneSignal").

The following data is processed:

• A device-generated push identifier (Player ID)
• Basic usage events for notification delivery (e.g. session duration)

Processing is based on your consent when activating push notifications (Art. 6 para. 1 lit. a GDPR) and additionally on our legitimate interest in reliable delivery (Art. 6 para. 1 lit. f GDPR). As OneSignal also processes data in the USA, the transfer is based on EU standard contractual clauses pursuant to Art. 46 GDPR. You can deactivate push notifications at any time in your settings. OneSignal Privacy Policy.

OpenRouter (AI Coach Chat)

For the AI Coach Chat in the Pro plan, your messages are forwarded via the intermediary service OpenRouter, Inc. (Delaware, USA) to the underlying AI model (currently Claude by Anthropic) to generate a response.

Processing is based on contract performance (Art. 6 para. 1 lit. b GDPR, see section "Processing of Personal Data by AI Features"). As these providers also process data in the USA, the transfer is based on EU standard contractual clauses pursuant to Art. 46 GDPR. Your content is not used to train the AI models. OpenRouter Privacy Policy.