1. Private by design

The Service is a private place for the user's own words. It is not designed for evaluation or distribution. The Operator does not view, publish, or provide the user's diary or memory content to any third party — including AI training datasets — without the user's consent.

2. Information we collect

• Account data: identifier from the user's chosen sign-in provider (Google account ID, or LINE ID in Japan), display name, profile image, and email address.
• Diary data: text (diaries, memories) and images or videos the user saves, whether written in the app or saved from a connected AI.
• Payment data: plan status, purchase amount, and dates. Card details are entered on Stripe's page and are never stored by the Operator.
• Access logs: usage information, IP address, browser metadata.

Diary entries may include information about the user's health, feelings, or relationships. The Operator processes this only to provide the Service at the user's direction, and never sells it or uses it for advertising. We do not collect government-issued IDs or passwords, and we do not perform behavioral profiling for advertising.

3. How we use it

1. Operating, providing, and authenticating the Service.
2. Reflective notifications (Memory Notification) that surface the user's own past entries by email, web push, or LINE (Japan).
3. In-app AI features the user uses, such as suggesting a title or tidying up a draft, and a one-time follow-up message after the user's first entry.
4. Executing features the user has explicitly enabled, including connections from external AI apps (see section 4).
5. Processing payments and responding to user inquiries.
6. Improving the Service and investigating system issues.

4. Connecting an AI app (ChatGPT, Claude, Muse)

When the user connects Unsent Diary to an AI app — such as OpenAI's ChatGPT, Anthropic's Claude, or Meta's Muse — the user's diary text, including the full content of entries returned for analysis, is sent to that AI app only in response to the user's own requests there (saving an entry, asking for a list, or asking for a reflection). On the free plan, the AI can read entries from the last 30 days.

Once sent, that content is handled under the AI app's own terms and privacy policy. In particular, under Meta's terms for Muse connectors, Meta may use content returned to Muse to personalize the user's experience and to operate and improve Muse. Please review the AI app's policy before connecting.

The user can disconnect at any time from the AI app's settings. Disconnecting revokes access and stops further data transmission. The diary itself stays in Unsent until the user deletes it.

5. Service providers

The Operator uses the following providers to run the Service. They process data only on the Operator's behalf.

• Hosting: Vercel
• Database: Supabase
• File storage: Cloudflare R2
• Email: Amazon SES
• Payments: Stripe
• In-app AI features: Google Gemini API (only the text needed for the feature the user uses)
• Notifications in Japan: LINE

These providers may store data on servers outside the user's country.

The in-app AI features use the paid tier of the Google Gemini API, through a project with an active billing account. Under Google's terms for paid services, Google does not use the text sent to it or the responses to improve its products, and processes them under its data processing terms. For users in Japan, this includes the text of the user's first entry, used once to write a follow-up message; other users receive a fixed message instead. The Operator sends only the text needed for each feature. Connecting an AI app (section 4) does not involve Gemini.

6. Third-party disclosure

Apart from the service providers above, the Operator does not provide personal information to third parties without the user's consent, except:

1. When the user has connected an AI app and asked it to read or write the diary (section 4).
2. When the user chooses to share entries with a partner inside the Service.
3. When necessary to protect a person's life, body, or property.
4. When required by law.

7. Storage and retention

1. When the user deletes their account, the Operator immediately and permanently deletes the user's data (diaries, images, and AI connections). There is no retention period after account deletion.
2. Records required for accounting and tax purposes (such as payment history) are kept for the period required by law.
3. Operational logs are retained for up to 90 days for incident investigation and then deleted.

8. User rights (GDPR / CCPA and U.S. state laws)

Users have the right to access, correct, export, or delete their personal information, and to withdraw consent at any time — including under the GDPR (European Economic Area), the CCPA / CPRA (California), and other U.S. state privacy and consumer health data laws. Most of this can be done directly in the app (export and account deletion). For anything else, contact the address below. We respond within 30 days. We do not sell personal information.

9. Contact

For questions about this Policy, please contact:
Email: support@unsent.jp