Privacy Policy

1. The short version

Phi is a voice journal with an AI companion. To run it, your recordings and entries are processed by our servers and by the companies listed in “Who processes your data”. We don't sell your data. You can delete your account and data in the app.

2. What we collect

• Account: your email address, and your name if you sign in with Google or Apple and allow it.
• Voice recordings of your journal entries. Voice messages you send in Communion are transcribed and not kept as audio.
• Transcripts, and what we work out from them: summaries, moods, themes and scores.
• Communion chats: your messages and the companion's replies.
• Personality insights (Mirror): Big Five, MBTI, Enneagram and attachment-style estimates inferred from your entries.
• Echo voice copy, only if you use Echo: an AI copy of your voice, made from your recordings.
• Echo consent details: your full name, date of birth, email, IP address, browser and device info, and the signed consent form.
• Safety flags: a record that a Communion message suggested a risk of harm to someone else. The flag doesn't contain the message.
• Usage and diagnostics: in-app actions such as “entry saved”, plus error reports and performance data.
• Reminders: your device's push subscription, if you turn on notifications.
• Subscription status from Stripe or Apple. We never see your card details.
• On your device: Phi keeps copies of some entries and settings in your browser's storage.

3. How we use it

To run Phi's features: transcription, insights, Communion, Mirror, Echo, reminders and billing. To act on safety risks (see “Who can see your data”). To fix bugs and understand which features get used. We don't use your data for advertising.

4. Who processes your data

• Supabase stores your account, entries, recordings, chats, insights and consent forms.
• Vercel hosts Phi and runs our servers. Recordings pass briefly through Vercel's upload storage and are deleted after transcription. Our server logs include your user ID.
• OpenAI receives your recordings to transcribe them (Whisper), and entry text to write short memory summaries (gpt-4o-mini).
• Anthropic (Claude) receives your entries, past entries, profile and Communion messages to produce insights, Mirror and Communion replies.
• The Vercel AI Gateway passes entry text and chat messages to OpenAI, which builds the search index that lets Communion find your past entries, and to Cohere, which ranks which past entries are most relevant. Zero data retention is on for the Gateway.
• ElevenLabs (Echo only) receives up to 20 of your recordings to create your voice copy, and Communion replies to read aloud in that voice. Our model-training opt-out is on.
• Resend sends our emails. It handles your signed Echo consent form, which is emailed to you, and safety alerts.
• Sentry receives error reports and performance data. These are filtered to remove entry and chat text before they're sent.
• PostHog receives named in-app events and your device type. Automatic click tracking and session recording are off. Events don't include your recordings, entries or chats.
• Stripe (web) and Apple (iOS) process payments and tell us your plan status.
• Google and Apple sign-in confirm who you are and share your email, and your name if you allow it.
• Your browser's or device's push service delivers reminders.

5. Who can see your data

Your data isn't public, and other Phi users can't see it. Our servers process it to run features; for example, Communion reads your past entries to reply. Phi staff with system access can reach stored data. We only do so to run, fix or secure Phi.

If a Communion message suggests a risk of harming someone else, the message text and your user ID are emailed to an inbox the Phi team monitors. If a message suggests you may be in crisis, Phi shows support resources in the chat and doesn't send an email.

6. AI training

Phi doesn't train AI models on your data. Our AI providers are used under API terms that don't train on your data.

7. How long we keep it

Until you delete it or delete your account.

8. Deleting your account

Go to Settings → Subscription → Delete account. This permanently deletes your entries, recordings, transcripts, chats, insights, Echo voice copy, consent forms and profile, and clears Phi's data from the device you delete from.

We keep a minimal record that you consented to Echo and that your voice copy was deleted: the form version, the dates, the deleted voice's ID and a hashed copy of your email. It contains no name, date of birth or recordings.

Copies in our vendors' logs and email, such as Resend, Sentry, PostHog and Vercel, expire on those vendors' schedules.

Deleting your account doesn't cancel your subscription. Cancel it first under Settings → Subscription, or in your Apple ID settings if you subscribed on iPhone.

9. Age

Phi isn't for anyone under 17.

10. Changes

If this policy changes, we'll update this page and the date at the top.

11. Contact

support@phijournal.app