BrightLog — Privacy Policy

Effective date: July 14, 2026

Summary: BrightLog stores your journal entries locally on your device. Your data may be backed up to your private cloud storage (Google Drive on Android, iCloud on iOS) and sent to Google's AI service to generate optional insights. We never see what you write. We do not sell your data, and we never share it with data brokers or advertisers.

1. Introduction

BrightLog ("the App") is a personal well-being journal that helps you track daily events and reflect on patterns over time. This Privacy Policy explains what data is collected, how it is used, and your choices regarding that data.

The App is developed by Cristian Milia ("Developer", "we", "us"). By using BrightLog, you agree to this Privacy Policy.

2. Data We Collect

2.1 Journal Data (stored locally)

All journal data you create is stored only on your device in a local SQLite database:

  • Entries: event type (good/neutral/bad), situation category, free-text description, intensity level, spectrum score (for neutral entries), date
  • Emotion data (optional): when you use the Feelings Wheel, the chosen core, sub and specific emotion are stored alongside the entry
  • Notes: free-text notes attached to entries
  • Attachments: photos, audio recordings, or documents attached to entries (up to 5 per entry)
  • Goals & habits: the goals and personal values you set, their tasks, your daily check-in history, and any notes or photos attached to a check-in
  • Gratitude Pot: the gratitude notes you save, each with an optional photo or video
  • AI Insights: generated summaries stored locally after creation

2.1a Microphone & Voice Input

When you tap the microphone icon to dictate an entry, the App requests permission to access the microphone and speech recognition. Recognition is performed by the operating system (Apple Speech on iOS, Google's on-device speech recognition on Android where available). Only the resulting text is stored as part of your journal entry — no raw audio is uploaded or retained by BrightLog. You can revoke microphone or speech-recognition permission at any time in your device settings.

2.2 Google Account Information (optional)

If you choose to sign in with Google, we receive:

  • Your display name and email address
  • Your profile photo URL
  • An authentication token to verify your identity

This information is used solely to authenticate you and enable cloud backup and AI insight features. We do not store your Google credentials.

2.3 Feature-Usage Statistics

We do not collect your data. We count which features get used.

The version of BrightLog published on the App Store and Google Play uses Firebase Analytics (Google) to record a small set of feature-usage events — for example, that the Journal tab was opened for the first time, that the monthly Insights screen was viewed, or which sign-in button was tapped. BrightLog is built by one person. These counts are the only way we can tell whether a feature is ever used at all, and therefore what to improve and what to remove.

What is recorded: the name of the event (such as insights_monthly_open) and nothing else. We record that a screen was opened — never what is on it.

What is never recorded: your journal entries, your moods, your emotions, your gratitude notes, your photos, your videos, your voice notes, your documents, or any word you have written. None of it is ever sent to us, and none of it is ever part of an analytics event. We never see what you write.

These events are attached to a random identifier that Firebase generates for each app installation. It is not your name, your email address or your account, and it cannot be used to read anything you have written — but because it is a per-installation identifier, we describe it here rather than calling it fully anonymous.

Beta builds (TestFlight and Firebase App Distribution) send no analytics events at all.

2.4 Data We Do NOT Collect

  • We do not collect, transmit, or store the content of your journal, moods, emotions, gratitude notes, photos, videos, voice notes, or documents on any BrightLog server
  • We do not sell, rent, or share your personal data with data brokers or advertisers
  • We do not currently display advertisements
  • We do not collect crash reports automatically
  • We do not collect device identifiers, IP addresses, or geolocation from sensors. The postcode and country you optionally provide for the Experts tab are stored locally on your device and sent to OpenStreetMap services only while that tab is open — see §3.4 below

3. How Your Data Is Used

3.1 Local Storage

Your journal entries, notes, and generated insights are stored in a local SQLite database on your device. This data never leaves your device unless you explicitly use the backup or AI insight features described below.

3.2 AI-Powered Insights (optional, requires Google Sign-In)

If you are signed in with Google, the App can generate monthly and yearly summaries of your journal entries using Google's Gemini AI (via Firebase AI). When you request an insight:

  • Your entry data (type, situation, description, intensity, date) for the relevant period is sent to Google's servers
  • Google's AI processes the data and returns a summary
  • The generated insight is stored locally on your device
  • Google's use of this data is governed by Google's Privacy Policy and Firebase Privacy Policy

3.3 Cloud Backup (optional)

If you enable backup, your journal data is uploaded to your private cloud storage: Google Drive on Android (in a hidden appDataFolder only BrightLog can access) or iCloud on iOS (in a hidden app-specific directory). On Android, backup requires Google Sign-In; on iOS, iCloud uses your device's Apple ID automatically.

  • Backups contain your entries, notes, and AI insights in JSON format
  • Up to 3 backups are retained, and backups older than one month are automatically cleaned up
  • You can disable backup at any time from Settings
  • Uninstalling BrightLog or revoking its access in your Google Account settings will remove the app's access to this data

3.4 Experts Tab — OpenStreetMap (optional)

When you open the Experts tab, the App queries two free public services run by the OpenStreetMap Foundation to find nearby mental-health professionals:

  • Your postcode and country code are sent to Nominatim (nominatim.openstreetmap.org) to resolve an approximate latitude / longitude
  • That coordinate is then sent to the public Overpass API (overpass-api.de and its mirrors) to fetch matching healthcare entries from OpenStreetMap
  • No account, sign-in token, device identifier, IP-binding payload or journal content is included in either request
  • Both look-ups are cached on your device for 24 hours so identical queries are not repeated

Listings are © OpenStreetMap contributors and made available under the Open Database License (ODbL). See OpenStreetMap's copyright and licence page for full attribution terms. The OpenStreetMap Foundation's own privacy policy is published at wiki.osmfoundation.org/wiki/Privacy_Policy.

4. Third-Party Services

BrightLog uses the following third-party services:

  • Firebase Analytics (Google) — feature-usage events (see §2.3) in the App Store / Google Play release only. It never receives your journal content. See §2.3 above, and Google's Firebase privacy documentation

We do not use any advertising or automatic crash-reporting services.

5. Data Retention & Deletion

  • Local data: Remains on your device until you delete it within the App or uninstall the App
  • Cloud backups: On Android, backups remain in your Google Drive appDataFolder until you delete them from the App, revoke BrightLog's access, or delete your Google Account. On iOS, backups remain in iCloud until you delete them from the App or manage iCloud storage from Settings
  • AI processing: Data sent to Google Gemini for insight generation is processed in real-time and is subject to Google's data retention policies

To delete all your BrightLog data at once, go to Settings > Delete All BrightLog Data. This will:

  1. Delete all cloud backups (Google Drive or iCloud)
  2. Revoke your sign-in session (Apple token revocation or Firebase user deletion)
  3. Erase all local entries, notes, attachments, and cached AI insights

Your Apple ID or Google account will not be affected. You can also delete data manually:

  1. Delete individual entries within the App
  2. Disable and delete backups from Settings
  3. Optionally, revoke BrightLog's access at Google Account Permissions
  4. Uninstall the App

6. Data Security

We take reasonable measures to protect your data:

  • Local data is stored in a private SQLite database accessible only to the App
  • Communication with Google services uses encrypted HTTPS connections
  • Authentication tokens are stored securely using the device's secure storage (Android Keystore / iOS Keychain)
  • Cloud backups are stored in private app-specific folders (Google Drive appDataFolder on Android, iCloud container on iOS)

7. Children's Privacy

BrightLog is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided personal information through the App, please contact us so we can take appropriate action.

8. Your Rights

You have the right to:

  • Access your data — all data is visible within the App
  • Export your data — use the App's export feature to generate a PDF or CSV of your entries, or export AI insight reports as PDF
  • Delete your data — delete individual entries or all data from within the App
  • Revoke access — sign out of Google or revoke app permissions at any time
  • Use the App without an account — core journaling features work without signing in to Google

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of the App after changes constitutes acceptance of the updated policy.

10. Contact

If you have questions or concerns about this Privacy Policy or BrightLog's data practices, please contact:

Cristian Milia
Email: mlicst.apps@gmail.com

© 2026 BrightLog. All rights reserved.