Privacy Policy

Calluna · last updated: 2 August 2026

1. What stays on your phone

Everything you write is stored locally, in the app's private storage:

• your good things and their "thanks to what, or to whom";
• your daily moods;
• the first names of people you link to your moments;
• the names you give your plants, and your garden;
• your settings (language, reminders, appearance, lock).

This data is not sent to any server of ours. It disappears if you uninstall the app or use "Erase everything" in the settings.

2. Google Drive backup (optional)

If you turn it on, Calluna places a copy of your journal in your own Google Drive, in a folder called "Calluna". Two files are kept there: the latest backup and the previous one.

The permission requested is drive.file, the most restricted one Google offers: it grants access only to files the app itself created. Calluna cannot read the rest of your Drive, and we have no access to your Google account or to those files — they are with you, not with us. You can revoke this permission at any time from your Google account settings.

3. Evening reminders (optional)

If you enable reminders, we must store on our server (hosted with Cloudflare) the bare minimum needed to notify you at the right time:

• the notification address provided by your browser or phone, and the two technical keys used to encrypt it;
• the time and days you chose, and your time zone;
• the date of the last send, so you aren't notified twice.

No journal content is transmitted: reminder texts are generic and composed on your device. This notification address is a technical identifier, not an identity: it contains no name, no email address, no phone number. It is deleted as soon as you turn reminders off, and automatically if it becomes invalid.

4. Usage statistics (can be switched off)

To understand whether the app is useful — do people come back, do they manage to note their three things — we use PostHog, on its European hosting. What is measured:

• explicit usage events, as counters, booleans and categories. No event parameter contains free text: the content of your notes is never transmitted;
• an anonymous identifier kept on your device, which lets us tell repeat visits apart. It is never tied to an account, a name or an email address;
• technical errors in the app, so we can fix them;
• session recordings, meaning the sequence of your interactions with the interface. The text you type and the content of your notes are masked before anything is sent.

As with any internet connection, PostHog receives your IP address as part of the request. You can switch this collection off entirely in Settings → Privacy → Anonymous statistics.

5. What we don't do

• No advertising, no ad networks, no advertising trackers.
• No selling, renting or passing of data to brokers.
• No profiling, no automated decisions about you.
• No account, no email address, no password required to use the app.

6. Children

Calluna is not intended for and is not directed at children under 13.

7. Your rights

You stay in control directly from the app, without having to write to us:

• Access and portability: "Export to a file" hands you all of your data in a readable format.
• Erasure: "Erase everything" deletes it all locally. Turning reminders off deletes the corresponding record on our server. Deleting the "Calluna" folder from your Drive erases your backups.
• Objection: statistics can be switched off with one tap in the settings.

For any question or GDPR request, write to the address below. You may also lodge a complaint with your national data protection authority (in France, the CNIL).

8. Changes

If this policy changes, the date at the top of the page will be updated. Substantial changes will be signalled in the app.