What we do with your writing.

Journals are about the most personal thing software gets handed. This page says what Jotgraph stores, where it goes, and what you can delete — in the same words the product uses. Last updated August 1, 2026.

The three onboarding answers

The questions before sign-in — what your head is full of, how often the thought repeats, where those thoughts go now — are saved in your browser only, under a single localStorage key. They are never sent to us, never attached to your account, and never used for advertising.

They exist to do two jobs: let you refresh or bounce off the sign-in screen without starting over, and let the writing surface open on the thing you said was on your mind. Clearing your browser storage deletes them outright, and the product still works without them.

Your journals

Once you sign in, entries are stored in your account so they follow you between devices, and cached in your browser so they survive going offline. Only your signed-in account can read them — the database rules deny every other reader.

Sharing a map

One thing does make part of an entry public, and only when you ask for it. Pressing “Create the link” in the share sheet publishes that entry's map: its topic, the wording of each thought, and the branches between them. What you wrote is not published — every verbatim quote a thought was drawn from is blanked out first — and neither is your name, your email, or anything else about your account.

The 22-character random id in the link is the only thing guarding the page: anyone holding it can open the map, and anyone without it cannot find one. Search engines are told not to list these pages. Stop sharing and the published copy is deleted and the link stops working straight away — and deleting the entry takes its link down too.

What leaves our servers

Turning an entry into a map is the one thing we cannot do alone. The text of that entry is sent to a third-party language model, reached through OpenRouter, and the map it returns is saved to your account. Nothing else from your account travels with it — not your name, not your other entries — and we do not hand your writing to anyone to train on.

Account and billing

Signing in with Google gives us your name, email address and profile picture. Signing in with Apple gives us your name and email address — and if you use Apple's Hide My Email, we only ever see the forwarding address, never your real one. If you subscribe, payment is handled by Stripe — card details go to Stripe, never to us. We keep your subscription status, a Stripe customer id, and a count of maps generated, which is how the first 3 free maps and the weekly fair-use cap are enforced.

Analytics

There are none. Jotgraph runs no analytics, advertising or session-recording scripts today. If that ever changes, this page changes first, and journal text will never be part of an event.

Deleting things

Deleting an entry deletes its text and its map, and takes down its share link if it had one. Clearing site data in your browser removes the onboarding answers and the offline cache.

Deleting your account

You can delete the whole account yourself, from your account settings. It happens immediately and it is permanent: the subscription is cancelled on the spot with no refund for the rest of the period you paid for, and your entries, your maps, every link you shared and your usage records are destroyed. There is no grace period, no deactivated state and no undo — once it is done, we cannot bring any of it back for you.

Getting in touch

A contact address for privacy and deletion requests will be published here before launch. We would rather say that than print a mailbox nobody is reading.

The other half of the agreement — what a subscription costs, how it renews and how to cancel — is in the terms of service.