Privacy

We collect as little as we can get away with. This page explains what that is, who processes it on our behalf, and how to make us delete it.

What this covers

One policy, two places: this website, and The Void mobile app. Where something applies to only one of them, we say so.

What the website collects

• Email address when you ask for early access or send a message via the contact form. Asking for early access also creates an account for you, so the app can sign you in with a magic link the first time you open it.
• Contact message contents if you write to us.
• Marketing attribution: the utm_source, utm_medium, utm_campaign, utm_term, utm_content, referring URL, and landing path at the moment you signed up. These tell us which post or ad brought you here.
• Anonymous product analytics: page views, clicks, scroll depth, form-interaction events, and page performance, only if you accept the consent banner. We use PostHog. We do not record your screen or replay your visit. If you sign up without accepting, we still count that a signup happened — without your email, and without linking it to your visit.
• Advertising pixels from Meta, TikTok, and Google, only if you consent via the banner. With that consent, a signup is also reported to Meta and TikTok from our server, with your email hashed. These let us measure whether an ad worked.

What the app collects

• An account. The app creates an anonymous account the first time you open it — no email, no name, nothing you had to type. Adding an email address later is optional; it exists so you can get back in on a new phone.
• Your entries. The text you write, and the audio of the voice entries you record.
• Microphone audio, only while you are actually recording an entry. The app does not listen in the background.
• Transcripts of your voice entries.
• AI annotations: the short summary, the mood color, and the themes generated for each entry, plus the weekly review built from them.
• Entry metadata: timestamps, whether an entry was voice or text, and how long a recording was.
• Usage analytics: which parts of the app you open, such as switching the journal to a month view. Each event carries your app version, roughly how long you have had the app, and roughly how many entries you have (a range, never the entries). It is tied to your account ID, and it is recorded with the IP address it was sent from, which is not used to work out your location. Never what you write or say: no entries, transcripts, summaries, colors, or themes. Switch it off any time in Settings → privacy → usage analytics.
• Service diagnostics: timing, error flags, the model used, and token counts from the AI calls that transcribe and annotate your entries. They are tied to your account ID but never include the content. Our servers send them to PostHog, and the usage-analytics switch does not turn them off.
• Purchases, if you buy a paid plan: which plan, when it started and when it ends or renews, whether it began as a free trial, and the store’s record of the transaction. Payment itself happens in the App Store; we never see your card or billing address.

What happens to a voice entry

You hold the app open and talk. The recording is uploaded to our Supabase storage bucket, sent to an OpenAI speech-to-text model to be turned into text, and the transcript is sent to Anthropic Claude to produce the summary, color, and themes. All of it lands back in your private entries, which only your account can read. Nobody at The Void browses your entries, and we do not sell your data, ever. We never use your entries to train AI models.

Every step travels encrypted (TLS), and Supabase stores your entries and audio encrypted at rest (AES-256).

What the app does not collect

No location, no contacts, no photo library, no advertising or tracking pixels inside the app. The microphone is used only while you are recording.

Why we collect it

To run the app: store your entries, transcribe them, annotate them, and build your weekly review, to sell you a paid plan and honor it, and to learn which parts of the app get used. And to run the site: send you beta invitations and product updates, answer your messages, measure which channels work, and improve the marketing pages.

Who processes it on our behalf

These are our sub-processors. Each handles a narrow slice and only what is necessary to do their job.

• Supabase (United States): database, file storage, and authentication — your account, your entries, and your uploaded audio, plus early-access and contact records.
• Anthropic (United States): Claude, which produces entry summaries, mood colors, themes, and weekly reviews from your transcripts and text. Anthropic processes this on our instructions and, under its API terms, does not use it to train its models.
• OpenAI (United States): a speech-to-text model that transcribes your voice recordings. OpenAI processes the audio on our instructions and, under its API terms, does not use it to train its models.
• Cloudflare (global): site hosting, request routing, DDoS and bot protection, and transactional email delivery (confirmations, replies). Cloudflare may process IP addresses to block abusive traffic.
• PostHog (United States): product analytics. On the website, it loads only after you consent. If you consented, a signup is linked to your earlier visits. It never receives your email address. In the app, it records usage events tied to your account ID, and the IP address each was sent from, never the content of your entries or your location. It also receives the service diagnostics described above, sent from our servers rather than from your phone.
• RevenueCat (United States): manages in-app purchases. On an iPhone the app gives it your account ID when it opens, so that a purchase can be matched to your account and restored on a new phone; if you buy, it receives the store’s record of the purchase from Apple. While usage analytics is on, it also sends purchase events, such as a trial starting or a renewal, to PostHog, tied to your account ID; switching usage analytics off stops that. Our own servers keep a copy of your plan’s status so the app can check it.
• Featurebase (Estonia / European Union): the public feedback board at /feedback. It loads only after you click to open it, and you can post and vote without an account. Anything you post there is public.
• Meta, TikTok, Google: advertising attribution pixels on the website only, loaded only after you consent. With the same consent, Meta and TikTok also receive a server-side record of your signup, with your email hashed. None of them are loaded inside the app.

Legal basis

For people in the EU/UK: storing your entries, transcribing them, annotating them, and building your weekly review is performance of our contract with you — it is the service. So is recording a paid plan you buy, so that you get what you paid for. On the website we rely on consent for advertising pixels and for early-access signups, and on legitimate interest for essential analytics and security. Answering a contact message is the step necessary to respond to your request. In the app, usage analytics and service diagnostics rest on legitimate interest, and you can switch usage analytics off in Settings.

A journal entry can contain things the law treats as special-category data — health, beliefs, sex life. We process it only to give you the service you asked for, on the basis that you made it explicit by writing it down (Art. 9(2)(a)), and for nothing else.

How long we keep it

• Entries, audio, transcripts, and annotations: until you delete them or delete your account.
• Early-access and marketing emails: 24 months from your last interaction, or until you unsubscribe or ask us to delete them.
• Contact messages: 24 months, or until you ask us to delete.
• Analytics events: 12 months.
• Purchase records: our copy until you delete your account. RevenueCat and Apple keep their own records of a purchase for as long as tax and accounting law require.
• At our AI providers: Anthropic deletes what we send it within 30 days, or keeps it for up to 2 years if a request is flagged under its usage policy. OpenAI keeps no abuse-monitoring copy of transcription requests.

Deleting your account

In the app: Settings → Delete account. Your account is scheduled for permanent deletion; signing back in within 30 days cancels it, and after 30 days your entries and stored audio are removed for good. Encrypted backups purge on their normal rotation within a further 30 days. If you only ever asked for early access and never opened the app, email privacy@thevoid.you from that address instead. Deleting your account does not cancel a subscription: cancel it in your device’s subscription settings too. Full detail on the account deletion page.

Your rights

You can ask us to access, correct, export, or delete your personal data — entries included — and to withdraw consent at any time. Email privacy@thevoid.you and we will respond within 30 days. You can also export your entries yourself in the app: Settings → Export entries. Marketing email has an unsubscribe link at the bottom of every send; unsubscribing does not touch your account or your entries.

One catch worth knowing: if your account is anonymous — no email ever added — we have no way to match you to a request sent by email. Use the delete option inside the app instead.

Cookies

The site remembers your consent choice in your browser’s local storage, not a cookie. Nothing else is stored until you accept the consent banner. If you do, PostHog sets a first-party cookie (ph_…) holding a random identifier, so your visits and a later signup count as one person, and the Meta, TikTok, and Google pixels set their own cookies. The app does not use cookies.

Children

The Void is not directed to children under 13 (or under 16 in the EU/UK). We do not knowingly collect their data.

Changes

If this changes materially, we will update the date at the top and tell you before the change takes effect — by email if we have an address for you, and in the app if we do not.

Questions? Say something to the void.