BrightLog — Privacy Policy

Effective date: April 10, 2026

    Summary: BrightLog stores your journal entries locally on your device. Your data may be backed up to your private cloud storage (Google Drive on Android, iCloud on iOS) and sent to Google's AI service to generate optional insights. We do not collect, sell, or share your personal data with third parties.

1. Introduction

BrightLog ("the App") is a personal well-being journal that helps you track daily events and reflect on patterns over time. This Privacy Policy explains what data is collected, how it is used, and your choices regarding that data.

The App is developed by Cristian Milia ("Developer", "we", "us"). By using BrightLog, you agree to this Privacy Policy.

2. Data We Collect

2.1 Journal Data (stored locally)

All journal data you create is stored only on your device in a local SQLite database:

Entries: event type (good/neutral/bad), situation category, free-text description, intensity level, spectrum score (for neutral entries), date
Emotion data (optional): when you use the Feelings Wheel, the chosen core, sub and specific emotion are stored alongside the entry
Notes: free-text notes attached to entries
Attachments: photos, audio recordings, or documents attached to entries (up to 5 per entry)
AI Insights: generated summaries stored locally after creation

2.1a Microphone & Voice Input

When you tap the microphone icon to dictate an entry, the App requests permission to access the microphone and speech recognition. Recognition is performed by the operating system (Apple Speech on iOS, Google's on-device speech recognition on Android where available). Only the resulting text is stored as part of your journal entry — no raw audio is uploaded or retained by BrightLog. You can revoke microphone or speech-recognition permission at any time in your device settings.

2.2 Google Account Information (optional)

If you choose to sign in with Google, we receive:

Your display name and email address
Your profile photo URL
An authentication token to verify your identity

This information is used solely to authenticate you and enable cloud backup and AI insight features. We do not store your Google credentials.

2.3 Data We Do NOT Collect

We do not use analytics or tracking SDKs
We do not display advertisements
We do not collect crash reports automatically
We do not collect device identifiers, IP addresses, or location data
We do not collect usage statistics or behavioral data

3. How Your Data Is Used

3.1 Local Storage

Your journal entries, notes, and generated insights are stored in a local SQLite database on your device. This data never leaves your device unless you explicitly use the backup or AI insight features described below.

3.2 AI-Powered Insights (optional, requires Google Sign-In)

If you are signed in with Google, the App can generate monthly and yearly summaries of your journal entries using Google's Gemini AI (via Firebase AI). When you request an insight:

Your entry data (type, situation, description, intensity, date) for the relevant period is sent to Google's servers
Google's AI processes the data and returns a summary
The generated insight is stored locally on your device
Google's use of this data is governed by Google's Privacy Policy and Firebase Privacy Policy

3.3 Cloud Backup (optional)

If you enable backup, your journal data is uploaded to your private cloud storage: Google Drive on Android (in a hidden appDataFolder only BrightLog can access) or iCloud on iOS (in a hidden app-specific directory). On Android, backup requires Google Sign-In; on iOS, iCloud uses your device's Apple ID automatically.

Backups contain your entries, notes, and AI insights in JSON format
Up to 3 backups are retained, and backups older than one month are automatically cleaned up
You can disable backup at any time from Settings
Uninstalling BrightLog or revoking its access in your Google Account settings will remove the app's access to this data

4. Third-Party Services

BrightLog uses the following third-party services:

Google Sign-In — for authentication (Google Privacy Policy)
Firebase Authentication — for managing sign-in sessions (Firebase Privacy)
Firebase AI / Google Gemini — for generating journal insights (Gemini API Terms)
Google Drive API — for cloud backup on Android (Google API Terms)
iCloud (CloudKit) — for cloud backup on iOS (iCloud Terms)

We do not use any advertising, analytics, or crash reporting services.

5. Data Retention & Deletion

Local data: Remains on your device until you delete it within the App or uninstall the App
Cloud backups: On Android, backups remain in your Google Drive appDataFolder until you delete them from the App, revoke BrightLog's access, or delete your Google Account. On iOS, backups remain in iCloud until you delete them from the App or manage iCloud storage from Settings
AI processing: Data sent to Google Gemini for insight generation is processed in real-time and is subject to Google's data retention policies

To delete all your BrightLog data at once, go to Settings > Delete All BrightLog Data. This will:

Delete all cloud backups (Google Drive or iCloud)
Revoke your sign-in session (Apple token revocation or Firebase user deletion)
Erase all local entries, notes, attachments, and cached AI insights

Your Apple ID or Google account will not be affected. You can also delete data manually:

Delete individual entries within the App
Disable and delete backups from Settings
Optionally, revoke BrightLog's access at Google Account Permissions
Uninstall the App

6. Data Security

We take reasonable measures to protect your data:

Local data is stored in a private SQLite database accessible only to the App
Communication with Google services uses encrypted HTTPS connections
Authentication tokens are stored securely using the device's secure storage (Android Keystore / iOS Keychain)
Cloud backups are stored in private app-specific folders (Google Drive appDataFolder on Android, iCloud container on iOS)

7. Children's Privacy

BrightLog is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided personal information through the App, please contact us so we can take appropriate action.

8. Your Rights

You have the right to:

Access your data — all data is visible within the App
Export your data — use the App's export feature to generate a PDF or CSV of your entries, or export AI insight reports as PDF
Delete your data — delete individual entries or all data from within the App
Revoke access — sign out of Google or revoke app permissions at any time
Use the App without an account — core journaling features work without signing in to Google

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of the App after changes constitutes acceptance of the updated policy.

10. Contact

If you have questions or concerns about this Privacy Policy or BrightLog's data practices, please contact:

Cristian Milia
Email: mlicst.apps@gmail.com