Your words, plainly.

What we collect

Your account. Your email address. If you sign in with Google, the name and profile picture Google shares with us.

Your writing. The journal entries you write, the reflections generated for them, and when each was written and changed.

Payment. On the web, Stripe handles your card and keeps the card details; we store your Stripe customer and subscription identifiers and the subscription status. On iOS, Apple handles payment; we store the subscription status Apple reports to us. We never see or store card numbers.

Usage. Product analytics through PostHog: which screens you open, when an entry is saved or a reflection is generated, and how long an entry is. These events are tied to your account identifier.

Where your words go

Your entries are stored in our database, hosted by Supabase, and are encrypted in transit and at rest by the host. They are not encrypted on your device and they are not end-to-end encrypted. The people who run Bonjour Echo can technically read them, and do so only to keep the service working or when you ask us for help.

To write a reflection, the text of the entry is sent to OpenAI’s API. Under OpenAI’s API terms that text is not used to train their models.

Diagnostic traces of the reflection service are kept in PostHog and currently include the text of the entry being reflected on, alongside the reflection that came back. We are removing entry text from those traces; until that is done, this page will say so.

What we never do

We do not sell your words or your data. We do not show advertising. We do not use your entries to train models of our own. We do not share your entries with anyone other than the providers named above, and then only to run the service.

Your choices

Delete everything. Write to hello@bonjourecho.com from the email on your account. We delete your account, your entries, your reflections, and your analytics identity within 30 days, and confirm when it is done.

Take your words with you. There is no self-serve export yet. Ask us at the same address and we will send you your entries as plain text.

Sign out anywhere. Signing out on one device does not sign you out on the others.

Cookies

On the web we set the cookies needed to keep you signed in, and a PostHog cookie for the analytics described above. There are no advertising cookies.

Children

Bonjour Echo is not for anyone under 16. If you believe a child has an account, tell us and we will remove it.

Changes and contact

When this page changes, the date at the top changes with it. Questions go to hello@bonjourecho.com. Our terms describe the rest of the agreement between us.