Privacy Policy

1. Your diary stays in the app's local storage

The app stores saved clips, thumbnails, dates, project information and preferences locally on your iPhone. It may also store a local Photos identifier to recognize media already used in your diary. We do not operate an account system or a server that receives your diary. You do not need to create an account or give the app your email address to use it.

Imported media is saved as an independent local copy. Deleting an original from Photos does not remove a second you have already saved in the app.

2. Photos access and media processing

When you open the library, the app requests access through Apple's permission system. It can read the Photos items you allow, including dates needed to suggest media for the selected day. You can manage or revoke access in iPhone Settings and use limited access where available.

Selected media is processed locally to create clips, thumbnails and movies. The app does not edit or delete originals in Photos. This version does not request camera, microphone, contacts or location permission. Apple may need a connection to make an original stored in iCloud Photos available to your device.

3. No advertising or tracking SDKs

The app contains no advertising, third-party analytics SDKs or tracking SDKs. It does not build an advertising profile or upload your diary for analytics. Apple may provide developers with sales information, aggregate usage information or diagnostics through its own services, subject to Apple's policies and your settings. Those Apple services are separate from a diary server operated by the app.

4. Purchases

The optional Pro upgrade is handled by Apple's App Store and StoreKit. Apple processes payment and purchase restoration. The app checks purchase entitlement to enable Pro features; Buenaventura Labs does not receive your payment-card information from the app. Purchase and restore operations may communicate with Apple. See Apple's privacy policy.

5. Face ID and device authentication

If you enable Pro lock, iOS handles Face ID or device-passcode authentication. The app receives the authentication result and keeps the lock preference; it does not receive or store your biometric templates. The lock protects access within the app. It does not add password protection to movies or ZIP files that you export.

6. Home Screen widgets

The app shares a small local snapshot with its widget through an iOS App Group. It covers today and the two previous days, including saved/empty state and, when allowed, thumbnails. When Photos permission already exists, the widget may obtain local suggestions for those dates without requesting new permission or downloading iCloud originals itself.

With Face ID lock enabled, widget photos are hidden by default and the shared photo snapshots are removed. You can explicitly choose to show photos while locked; they will then be visible without authenticating on the Home Screen. Opening the diary still requires authentication. iOS controls widget refresh and may temporarily retain an earlier rendered view.

7. Exports, manual backups and system backups

You choose whether to save or share a movie or backup ZIP through the iOS share sheet. Destinations such as Files, iCloud Drive, email or another app have their own privacy practices. Files shared outside the app are no longer controlled by the app. Backup ZIPs are not password-encrypted by the app; keep them in a trusted location and share them carefully.

The app does not provide its own automatic cloud synchronization. Your iPhone's system backup settings may nevertheless include app data in an Apple or computer backup. Review those settings if you do not want device backups to include your diary.

8. Retention and deletion

Your active diary remains in local app storage until you remove its contents or delete the app. Deleting a saved second removes it from the active diary, not from the original Photos library. Removing the app removes its local app data, but does not delete previously exported movies, ZIP backups or copies held in system backups or other destinations. Manage those copies separately. We do not keep a server copy from which we can recover your diary; keep a backup before deleting the app or changing devices.

9. Contacting support

If you email buenaventuralabs@proton.me, the email address, message and any attachments you choose to send are handled through our email service so we can respond. This is separate from using the app; the app does not automatically send your diary to support. Do not send private media, full backups, passwords or payment details unless there is a clear need and you have considered what the files contain.

You can contact that address about personal information you have voluntarily sent to support, including to ask for its deletion. Applicable obligations and the email provider's backup/retention practices may affect what can be removed and when.

10. Website scope

This policy describes the iPhone app. Visiting the Buenaventura Labs website can involve technical hosting logs and other website processing. Any website-specific practices must be described in the site's applicable privacy information. The app's local-storage design is not a claim that the website processes no data.

11. Changes and contact

We may update this policy when the app or its data practices change. The publication date above identifies the current version. For questions about the app’s privacy, contact buenaventuralabs@proton.me.