PRIVACY

Privacy Policy Last updated: July 30, 2026 Loud Unicorn LLC ("we," "us," "our") built Grief Journal. This policy explains what data Grief Journal collects, why, and how it is handled. 1. What Data We Collect and Why Journal and Memory Data (the most sensitive data in the app): - Journal entries — the text you write, including anything you choose to record about a person you have lost. Stored on your device only. - Check-ins — the mood and reflection responses you log. - Milestones — the date of loss and any anniversary or milestone dates you add, used to schedule reminders. - Memory vault items — photos you add from your photo library and any notes attached to them, stored inside the app's own storage on the device. Local Device Data: - App preferences and settings — stored locally via UserDefaults - Entry lock preference — whether entries are protected behind device authentication - Subscription and purchase status — whether you have unlocked paid features, verified locally via Apple StoreKit 2 2. What We Do NOT Collect - We do not collect email addresses, phone numbers, or government-issued identifiers - We do not collect advertising identifiers (IDFA/IDFV) and do not use advertising SDKs - We do not sell or share data with advertisers or data brokers - We do not use analytics SDKs (no Firebase, Amplitude, or Mixpanel) - We do not use crash reporting services - We do not access your location, camera, microphone, or contacts - We do not read your health records and do not write to Apple Health - We do not operate backend servers, and there is no account, login, or cloud sync - We never see, receive, or store anything you write 3. Where Your Data Lives Everything you write stays on your device. Grief Journal has no account, no login, and no cloud sync. Journal entries, check-ins, milestones, and memory items are stored in on-device storage and are additionally encrypted at rest by the app before being written. We have no server, so there is no copy of your journal anywhere but your own device. This also means we cannot recover your journal if you lose or reset your device. 4. Why This Policy Is Strict A grief journal contains some of the most private writing a person will ever do. We designed the app so that this data never has anywhere to go. There is no sign-up, no sync, no backup to us, and no analytics that leave your device. The app writes a small number of fixed event names (for example "entry_created") to the iOS system log so we can debug a crash report you choose to send us, and those never include anything you wrote. The only way your entries leave the device is if you deliberately use the export feature and choose where to send the file. If you back up your iPhone to iCloud or a computer, your journal is included in that backup and is governed by Apple's backup encryption, not by us. 5. Third-Party Services - Apple StoreKit 2 — purchase and subscription processing. Apple handles all payment data. We receive only anonymized transaction receipts. - Apple UserNotifications — local notifications scheduled on your device. Notification content is generated on-device and no data leaves your device. - Apple Photos (PhotoKit) — only when you pick a photo to add to a memory. We access the specific photo you select and nothing else. We do not integrate any third-party analytics, advertising, or tracking libraries. 6. Children's Data Grief Journal is intended for users aged 13 and older. Grief affects children too, and a bereaved teenager may be a legitimate user. The app collects nothing off-device and has no social features, so there is no online collection of a minor's information. If you are under 18, please also talk to a trusted adult. Contact maxthemoltbot@gmail.com with any concerns. 7. Data Retention and Deletion - Journal entries, check-ins, milestones, and memory items: retained on your device until you delete them in the app or uninstall the app - Exported files: once you export, the file is yours and outside our control - Subscription and purchase records: managed by Apple Uninstalling the app deletes everything. There is no server-side copy and no way for us to restore it. 8. Security Journal content is encrypted at rest by the app in addition to iOS application sandboxing and device-level encryption. You can require Face ID, Touch ID, or your passcode before entries can be opened. Because nothing is transmitted, there is no network or server-side attack surface. 9. Changes to This Policy Material changes will be communicated via in-app notice. Continued use constitutes acceptance. 10. Contact Loud Unicorn LLC maxthemoltbot@gmail.com Arizona, USA ──────────────────────────────────────── GDPR — Your Rights (EU/EEA Users) Last updated: July 30, 2026 1. Data Controller Loud Unicorn LLC is the data controller for personal data processed through Grief Journal. Contact: maxthemoltbot@gmail.com 2. Legal Basis for Processing - Contractual necessity (Art. 6(1)(b)): On-device storage of your entries and milestone dates is required to provide the journal. - Consent (Art. 6(1)(a)): Notification permission and photo library access are requested explicitly and can be revoked at any time in iOS Settings. 3. Your Rights Under GDPR Right of Access (Art. 15): Your entire journal is visible in the app and exportable from settings. We hold no server-side copy, so there is nothing for us to disclose. Right to Rectification (Art. 16): Edit or correct your data directly in the app. Right to Erasure (Art. 17): Delete items inside the app, or uninstall the app to remove all local data. Right to Restriction (Art. 18): Disable optional permissions and notifications in app settings or iOS Settings. Right to Data Portability (Art. 20): Use the in-app export to produce a copy of your journal at any time. Right to Object (Art. 21): Stop processing by uninstalling the app. 4. How to Exercise Your Rights Email: maxthemoltbot@gmail.com — we respond within 30 days. 5. Supervisory Authority You may lodge a complaint with your local EU/EEA data protection authority. 6. International Data Transfers No data is transferred to our servers or outside the EU/EEA. All data remains on your device. 7. Contact maxthemoltbot@gmail.com | Loud Unicorn LLC | Arizona, USA ──────────────────────────────────────── CCPA/CPRA — Your Rights (California Residents) Last updated: July 30, 2026 1. Categories of Personal Information We Collect - Journal entries, check-ins, milestone dates, and memory photos you create — stored on your device only, encrypted at rest, never transmitted to us - App preferences — stored locally - Device identifiers used by Apple for StoreKit transaction verification We hold no server-side copy of any of this. There is no user profile for us to disclose, sell, or lose. We do NOT collect: email address, phone number, financial account data, biometric data, precise advertising identifiers, or the categories of sensitive personal information defined by CPRA beyond what is described above (your own journal writing, which may touch on health or emotional state and which never leaves your device). 2. Do We Sell or Share Personal Information? No. We do not sell or share personal information with third parties for advertising or cross-context behavioral advertising. 3. Your CCPA/CPRA Rights Right to Know: Your entire journal is visible in the app and exportable from settings. We hold no server-side copy, so there is nothing for us to disclose. Right to Delete: Delete items inside the app, or uninstall the app to remove all local data. Right to Correct: Edit your data directly in the app. Right to Opt-Out of Sale/Sharing: We do not sell or share — no action required. Right to Non-Discrimination: We will not discriminate against you for exercising CCPA/CPRA rights. 4. Contact maxthemoltbot@gmail.com | Loud Unicorn LLC | Arizona, USA