The details are yours.
The choices are, too.

Information you choose to save

On your device, the app stores the profile and context you enter, including optional names, people, relationships, goals, preferences, exclusions, pronunciation hints, and memories. It also stores desires, stories, scene choices, affirmations, feedback, journal entries, favorites, practice history, and app preferences.

Prepared audio is cached locally when storage is available. Older recordings may be evicted; recording files and reminder schedules are not uploaded through account synchronization. Names and places are details you type, not an upload of your phone’s contacts or continuous device-location collection. The app does not record your microphone to create narration.

Optional personal AI processing

When you request a personal story, scene set, or affirmation deck, the app asks permission to send your request and relevant saved details to OpenAI through our server. These can include names, goals, places, relationships, selected memories, preferences, and feedback you chose to enter. Narration sends the story text, selected AI voice, and matching pronunciation hints. Relevant exclusions and input limits are applied before generation.

You can decline and continue with the included library and local reflection tools. In Settings → Remove AI permission, you can revoke permission for future requests. Removing permission does not recall completed requests or delete content already saved. Included recordings and previously prepared audio do not require a new narration request.

OpenAI processes requests as our AI service provider. Its handling of API data is described in OpenAI’s privacy policy and API data controls. Do not put information into a personal AI request that you do not want sent for this processing.

Accounts, cloud data, and service usage

An optional email account uses your email, account name, password authentication information, verification status, and session information. Account verification and password recovery emails use Resend when those account services are enabled. Verification links and recovery tokens support account access.

Connected services use Cloudflare for hosting and request handling and Neon for account and synchronized data storage. A service session can be created without an email registration to support access and usage allowances. Authentication and security records can include an IP address, device/browser information, session identifiers, and request-rate information. Daily usage records count personal-generation attempts. Subscription verification associates an app service identifier with your entitlement.

Signing into an existing account does not automatically upload this device’s saved library. You choose restoration or inclusion of device data before synchronization. When you enable it, supported saved records such as profile/context, stories, affirmations, desires, reflections, and practice history can be synchronized. Recordings, exports, and device notification schedules are not cloud-synchronized.

Subscriptions and payment providers

Apple or Google Play processes native subscription payments. RevenueCat helps associate purchases with an app service identifier, verify entitlement, restore purchases, and reflect subscription changes. This involves purchase/subscription status, transaction-related information, and information used by their SDK to provide these services. We do not receive your full payment-card details.

Manage subscriptions through Apple subscription settings or Google Play subscriptions. Store and RevenueCat records follow those providers’ transaction and retention practices. Deleting your account or data does not cancel a store subscription.

Sharing, exports, and support

You decide whether to share a story, affirmation card, or export through your device’s share controls. Review the text first. Sharing does not automatically publish your entire profile or journal. Copies you export or send to someone else are outside the app’s deletion controls.

If you contact support, we receive the email address, message, attachments, and technical details you choose to provide. We use them to help with your request and related account or privacy questions. Please do not send credentials, payment-card details, or unnecessary sensitive content.

How long information is kept

Saved device records remain until you remove them through the app or applicable device controls. Device backups and copies you exported or shared can remain separately. Audio cache files can be removed earlier as storage fills.

Account and synchronized records remain while the account is kept, unless you delete cloud data or the account. Account deletion removes the account’s authentication/session records, owned cloud records, and linked usage records from the active app database. Some service information, including security/rate-limit records, verification records, support correspondence, and transaction or billing-event records, is managed separately and may be retained for the service, security, or applicable legal requirements.

Providers may retain backups or other records under their own processes and legal obligations. We do not promise an exact deletion period for every provider’s backups. Contact support@highcountrysoftware.com for a request concerning retained information; we can explain the applicable records and any limits when handling your request.

Your controls and deletion

• Settings → Export my data: export saved records on this device.
• Settings → Account and sync → Export cloud data: export synchronized records without uploading or changing the device library.
• Settings → Remove AI permission: stop permission for future personal AI requests.
• Settings → Delete all local data: remove the app’s local saved records and private caches. This is separate from cloud/account deletion.
• Account and sync → Delete cloud data: remove synchronized records while retaining the account and local library; automatic re-upload is paused.
• Account and sync → Delete my account: confirm with your account password to remove the account and its cloud records.

Request deletion outside the app if you no longer have access. If you used connected services without registering an email account, contact us about the associated service data; do not send session tokens or passwords. We may need information to identify and verify the request.

Depending on applicable law, you may have rights to request access, correction, deletion, restriction, or other control of your personal information. Contact support@highcountrysoftware.com. We may verify your identity before handling account information.

This website and other disclosures

This website has no advertising pixels, analytics scripts, account login, or contact form. Cloudflare processes ordinary request information to deliver and protect the pages. Following an external link takes you to another provider’s site and policy. Email contact opens your email app; clicking it does not submit a message on this website.

The app is designed for adults and is not directed to children. Personal information may be processed in countries where our service providers operate. This policy may change as the service changes; the current version and update date will appear here.

Privacy questions: support@highcountrysoftware.com. Provider policies: Cloudflare, Neon, Resend, RevenueCat, Apple, and Google.