How privacy and security work in Solstice Diary

Journal content is designed to be private

Solstice is built for personal reflection rather than social sharing. Much of your saved journal content is encrypted on your device before it is stored in Firestore.

Cloud storage supports account-based access

Encrypted and related account data is stored in cloud services so the app can provide its features. Access controls and other safeguards are used to protect that data, but no storage or transmission method can guarantee absolute security.

How requested AI features process your writing

AI summaries, memories, search, Story, and insights work by decrypting relevant content on Solstice Diary servers and sending the needed context to OpenAI, Anthropic, or Cohere for the applicable feature. Your raw Firebase user ID or email is not used as your identity with those AI providers, although the writing itself may contain details that identify you.

This controlled server-side processing is why these requested features can work across your journal. It also means the service is not end-to-end encrypted. Our long-term direction is to reduce dependence on general-purpose AI providers as privacy-preserving technology and the product mature.

You can request deletion

The app supports deleting individual content and requesting deletion of specific data or an account. The Account and Data Deletion page explains the available routes, verification steps, Solstice-controlled active records, provider-held records, subscriptions, backups, and device-local data.

Legal pages are the canonical source

This page is a plain-language product overview. Read the Privacy Policy and Account and Data Deletion page for the full current wording about collection, processing, retention, service providers, and your choices.