Your words belong to you
Privacy, by design.
Effective October 10, 2026 · Publisher: Will Piot
Applies to the Rivendell iPhone app and rivendel.app.
Rivendell does not collect your journal entries, feelings, practice responses, Refuge words, saved choices, support notes, or app usage activity. There are no accounts, advertising, tracking, subscriptions, or in-app purchases. We do not operate a database or service that receives your reflections. Rivendell does not send your writing to an AI service.
The iPhone app
The iPhone app stores check-ins, responses, interactive tools, drafts, Refuge words and selections, saved practices, and your support plan in private on-device SwiftData storage. CloudKit and iCloud synchronization are disabled. The app’s private Library directory, including the journal database and preferences, is excluded from device backups.
Optional app lock uses Face ID or your device passcode through iOS. Rivendell does not receive biometric data or your passcode. A privacy cover appears when the app becomes inactive. Device security and content you deliberately share are outside the app’s control.
The first-minute guide uses the choices you make in that guide on your phone. It does not interpret your journal. Immediate-help sessions do not create journal entries. Beginning a normal practice or interactive tool creates a local draft. Choosing “This helped” saves the practice ID locally.
The web app
At rivendel.app, journal records, drafts, support notes, Refuge words, saved practices, and appearance choices are stored in this browser’s local storage on this device. They are not uploaded to us and do not sync with the iPhone app or other devices. The website uses no advertising cookies, analytics, fingerprinting, third-party fonts, or tracking scripts.
A service worker stores public app files and the practice library in your browser so they can work offline after the first successful online load. This cache is separate from your local journal. Browser storage can be cleared by you, by private-browsing rules, or by browser storage cleanup. Browser or device backup behavior is controlled by your browser and operating system; the web app cannot exclude its storage from those backups. The web privacy cover is not a password or biometric lock.
Website hosting
Cloudflare hosts the public website and receives ordinary request information, such as IP addresses and browser/network details, to deliver and protect it. We do not attach journal content to website requests or use Cloudflare analytics to track your app use. Worker logging and tracing are disabled in our deployment configuration. Cloudflare’s infrastructure processing is governed by its own policies. This hosting activity is separate from the offline iPhone app’s local journal.
Your choices and exports
You can delete individual journal entries or erase all saved app data through Your space. Deleting the iPhone app removes its local records. Clearing this website’s browser data removes the web records. We cannot restore data after deletion or device loss because we do not have a copy.
You can choose to export journal text. The iPhone app also generates PDF files entirely on the phone and hands them to the native Files picker. The web app provides a local text download and a print view that can be saved as PDF through your browser or operating system. The web app itself does not upload either export.
Exports include check-ins, practice responses, interactive tools and drafts, and your Refuge words. Support notes, pins, bookmarks, and helpful selections are excluded. Exported or printed copies are outside Rivendell’s privacy controls. Deleting data inside Rivendell does not remove copies saved elsewhere.
External services you choose
Research and directory links in the app ask you to confirm before opening an external website. Rivendell does not include your writing in those links. External websites, phone calls, messages, email, and chosen export destinations have their own privacy practices.
If you email support, your email provider and our email provider handle the message. We receive the address and information you choose to send so we can respond. Please do not send journal exports or sensitive health details. A support email is separate from app data collection; the app does not automatically send it.
Apple operates iOS and the App Store under its own policies. Rivendell includes no analytics or crash-reporting SDK. Third-party keyboards, screenshots, compromised devices, and deliberately shared content are outside Rivendell’s control.
Questions and policy changes
Contact saml3elow@gmail.com for privacy questions or to request deletion of a support email you sent us. There is no account to delete and no server copy of your journal to request.
Updates to this policy will be published on this page with a revised effective date. Any future change to how the app handles data will be reflected here and in the App Store disclosures before release.