Privacy Policy
Last updated: October 23, 2026
This Privacy Policy explains how J. Ahn ("WholeLifeLog", "we", "us") handles information when you visit www.wholelifelog.com (the "Website"), join our waitlist, or use the WholeLifeLog mobile app and its backup service (the "App"). We've written it to describe what our systems actually do.
The short version
- Your journal stays on your device. If you turn on backup, it is encrypted on your device before upload. We store the encrypted file but cannot read it.
- The Website has no analytics, advertising trackers or cookies for visitors.
- If you join the waitlist, we keep your email address (plus a country code and browser type) to tell you about our launch and send occasional WholeLifeLog updates. You can unsubscribe at any time.
- We don't sell your information or use it for advertising.
1. Information we collect
1.1 Waitlist (Website)
When you submit the "Notify me" form, we store:
- Your email address, so we can email you about the launch and send occasional product updates and news about WholeLifeLog. By submitting the form you agree to receive these emails; you can unsubscribe at any time (see Section 5).
- An approximate country code, which our hosting provider (Cloudflare) derives from your IP address. We do not store your IP address in the waitlist.
- Your browser's user-agent string (for example, browser and operating system), used to spot spam and abuse.
- The date and time you signed up.
The form includes a hidden field to filter out bots; submissions that fill it are discarded and not stored.
1.2 Browsing the Website
The Website does not use cookies, advertising pixels or third-party tracking scripts. Our hosting provider, Cloudflare, processes technical request information (such as IP address, requested page, browser type and time) to deliver pages and protect against abuse. We use Cloudflare's built-in analytics and request logs to see aggregate traffic (for example, page views and visitor countries) and to troubleshoot errors. These do not use cookies on your device (see Section 4 for retention).
1.3 Your account (App)
The App uses Clerk to handle sign-in. You can sign in with your email address or with a supported third-party account such as Google or Apple. Depending on the method you choose, Clerk processes your email address and basic profile information provided by that sign-in provider (for example, your name), together with sign-in records needed for security. Our servers receive a unique account identifier from Clerk to keep your backup separate from everyone else's. Clerk's handling of this information is described in its own privacy policy, and Google's or Apple's policies apply to signing in with those accounts.
1.4 Encrypted backup (App)
If you use backup, the App:
- turns your journal data into a file on your device;
- encrypts it on your device with a key derived from a passphrase you choose (PBKDF2 and AES-256-GCM); and
- uploads only the encrypted file.
We store:
- The encrypted backup file (up to 20 MB). We keep one backup per account; each new upload replaces the previous one.
- Backup metadata: your account identifier, the file size and the time of the last backup.
We never receive your passphrase or encryption key, so we cannot read, recover or reset access to the contents of your backup. If you forget your passphrase, the backup cannot be decrypted by anyone.
Backup is optional: a backup is created only when you choose to back up in the App.
1.5 Information that stays on your device
Your plans, logs, notes and reflections are stored on your device and are not sent to us unless you use encrypted backup. The App does not include third-party advertising, analytics or crash-reporting SDKs; when the App talks to our servers, those requests are covered by the Cloudflare request logs described above.
2. How we use information
| Information | Why we use it |
|---|---|
| Waitlist email | To send launch news and occasional WholeLifeLog updates (you can unsubscribe at any time) |
| Country code, user-agent | To understand where interest comes from and to detect spam |
| Account information (via Clerk) and account identifier | To sign you in, authenticate requests and keep each user's backup separate |
| Encrypted backup + metadata | To store, restore and delete your backup when you ask |
| Cloudflare analytics and request logs | To understand aggregate usage, keep the service running, debug errors and prevent abuse |
We do not sell personal information, share it for cross-context behavioural advertising, or use it to train AI models.
3. Service providers
We use the following providers to run WholeLifeLog. They process information on our behalf:
| Provider | Purpose | Information involved |
|---|---|---|
| Cloudflare, Inc. (USA) | Website and API hosting, DNS, encrypted backup file storage (R2), analytics and request logs | Request data, encrypted backup files |
| Neon (Databricks, Inc.; servers in Singapore) | Database hosting | Waitlist entries, backup metadata |
| Clerk, Inc. (USA) | App account sign-in | Account and sign-in information |
| Google / Apple | Optional sign-in with your Google or Apple account; App distribution via Google Play / App Store | As described in their own policies |
If we start using an email delivery service to send waitlist emails, we will add it to this list.
We may also disclose information if required by law, or to protect the rights, safety and security of our users or the service.
4. Retention
- Waitlist: until you ask us to remove it, or until we stop sending WholeLifeLog emails. If you unsubscribe, your address is kept only as an unsubscribed record so we don't email you again.
- Encrypted backup and metadata: until you delete the backup in the App or your account is deleted. If your account is deleted, any remaining backup is deleted within 30 days.
- Account information held by Clerk: until your account is deleted.
- Analytics and request logs: kept only for a limited period, according to Cloudflare's retention settings.
5. Your choices and rights
- Delete your backup: use the delete option in the App. This removes the encrypted file and its metadata from our servers.
- Restore your backup: available in the App when signed in.
- Delete your account: use the delete account option in the App. This deletes your sign-in account, and any backup stored on our servers is deleted along with it (within 30 days at most). You can also email us at wholelifelog@gmail.com from the address linked to your account and we will do it for you.
- Unsubscribe from emails: every WholeLifeLog email includes an unsubscribe link that stops future emails immediately. You can also email wholelifelog@gmail.com. If you unsubscribe, we keep your address only marked as unsubscribed, so we don't email you again; ask us if you'd like it deleted entirely.
- Access or correct your information: email wholelifelog@gmail.com.
Depending on where you live (for example, the EU/UK, California or South Korea), you may have additional rights, such as to access, correct, delete or port your personal information, or to object to or restrict certain processing. To exercise them, contact us at wholelifelog@gmail.com. We will respond within the time required by applicable law. You may also complain to your local data protection authority.
6. Security
We protect information with HTTPS for all connections, per-account separation of backups, client-side encryption of backup contents, access controls on our administrative tools, and secrets kept out of our source code. No system is perfectly secure, but encrypting backups on your device means that even we cannot read their contents.
7. International transfers
Our providers operate globally, and your information is processed outside your country, including in the United States (Cloudflare, Clerk) and Singapore (Neon). Information is transferred over encrypted connections when you use the Service. The providers, countries and categories of information are listed in Section 3. Where required, we rely on the safeguards offered by these providers, such as standard contractual clauses. If you do not want your information transferred abroad, you can choose not to join the waitlist or create an account; the App's on-device features work without either.
8. Children
WholeLifeLog can be used by people of all ages. However, children under 14 (or the age set by law where they live, such as 13 in the United States) must have a parent or guardian's consent before creating an account, using backup or joining the waitlist. If we learn that we have collected a child's information without that consent, we will delete it. Parents or guardians can contact us at wholelifelog@gmail.com to review or delete their child's information.
9. Changes to this policy
If we make material changes, we will update the date at the top and, where appropriate, notify you in the App or by email.
10. Contact and privacy officer
WholeLifeLog is operated by J. Ahn, who is also responsible for privacy matters (privacy officer / 개인정보 보호책임자).
- Operator: J. Ahn
- Privacy officer: J. Ahn
- Email: wholelifelog@gmail.com