Privacy Policy

Effective July 6, 2026 · Atreeum for iPhone, iPad, and Mac

Atreeum is a journal. What you write in a journal is among the most personal data there is, so Atreeum is built so that we hold as little of it as possible: no account, no analytics, no ads, no trackers, and no Atreeum servers that store your journal. This page explains exactly what happens to your words.

The short version

• Your journal is stored on your device, encrypted at rest.
• If you turn on sync, your journal is end-to-end encrypted with a passphrase only you know before it ever reaches your iCloud, so no one else can read it there.
• AI analysis is optional and asked about up front. It never trains on your words, and entries you mark private are never analysed.
• Anything you attach, photos, voice notes, or a place, stays inside that same encrypted journal.
• Heart data stays on your device.
• We collect nothing about you. There is no Atreeum account and no usage tracking.

Your journal on your device

Entries are saved locally on your device and encrypted at rest with industry-standard authenticated encryption. The encryption key lives in your device Keychain, protected by Apple's security hardware. You can additionally require Face ID or Touch ID to open the app.

Syncing through your own iCloud

Syncing is optional. When you turn it on, Atreeum seals your journal with a passphrase that only you set and only you know: your entries are end-to-end encrypted on your device before they are placed in your personal iCloud storage. We never receive that passphrase, so no one, not us and not Apple, can read your journal in iCloud. The sealed copy syncs to your other devices, where your passphrase unlocks it.

This storage lives under your own Apple Account, and no copy of your journal ever touches a server we operate. Because we cannot read your synced copy, we also cannot recover it: if you forget your passphrase, the copy in iCloud stays sealed, though the journal already on each of your devices is unaffected. Heart readings are excluded from sync entirely.

AI analysis, only if you choose it

Atreeum can reveal patterns in your writing: tags, moods, connections between entries, and a written reflection. When you turn insights on, entries you write are sent over a secure, encrypted connection to our AI service provider for analysis. Three commitments hold at all times:

• Your words are never used to train AI models. Our provider processes them only to produce your result, under API terms that exclude training.
• Entries you mark private are never analysed. The private flag is enforced in code at every path that could reach the AI.
• You can turn it off anytime in Settings. Off means nothing is sent for analysis, and the rest of the app keeps working.

Requests travel through a secure relay we operate so that the app never carries service credentials. The relay forwards your text and does not store or log it. To keep the relay from being abused, the app attaches a random, rotating token that confirms the request comes from a genuine copy of Atreeum; that token is not tied to you or to your journal. Importing a file with Smart Import works the same way and asks for its own consent first.

Voice

Dictation and the guided journal listen with Apple's on-device speech recognition. Your voice is transcribed on your device, and your audio recordings are never uploaded, to us or to anyone. When the guided journal speaks, the guide's own lines are turned into audio by a voice service; your recordings and transcripts are not part of that request beyond the guide's reply itself.

Photos, voice notes, and places you attach

You can attach a photo, a voice recording, or a location to an entry. These stay on your device and, when sync is on, travel only inside the same end-to-end encrypted journal, sealed with your passphrase. Photos and voice recordings are never sent for AI analysis. If you attach a place and you have insights turned on, only the place's name, never its coordinates, may inform your reflection.

Heart data

With your permission, Atreeum reads heart rate and heart-rate variability from Apple Health around the moments you write, strictly read-only. These numbers stay on your device: they are never sent to us, never synced through iCloud by Atreeum, and never sold, shared, or used for advertising. If you additionally turn on Heart context, your reflection may consider a coarse pattern only, described as calm, near resting, or elevated, never the numbers.

Notifications

Reminders and daily notes are generated and scheduled on your device. There is no push server.

Service providers

Atreeum relies on a small number of vetted providers to deliver specific features. Each one processes data only to provide its feature, is contractually bound to protect it, and may not use your content for training or advertising:

• Apple: iCloud storage under your own Apple Account, on-device speech recognition, and Apple Health. Your journal in iCloud is sealed so that Apple cannot read it either.
• An AI analysis provider: analyses the entries you allow, under terms that exclude model training. It receives only the text needed for your result, never your identity.
• A voice provider: turns the guided journal's own spoken lines into audio. It does not receive your recordings or transcripts.
• Infrastructure providers: run the secure relay that lets the app reach the AI provider without ever carrying credentials. They do not store your journal content.

For security, we describe these providers by the role they play rather than by name, so as not to publish a map of how Atreeum is built. The specific companies behind each role are available on request at hello@getatreeum.com.

Your control and deletion

• Mark any entry private to keep it out of all analysis.
• Turn AI insights off entirely in Settings.
• Delete any entry; deletions sync to your other devices.
• Deleting the app removes your journal from that device. Your iCloud copy is under your control in iCloud settings.

Because there is no Atreeum account and we store nothing about you, there is no server-side data for us to delete, export, or lose.

Children

Atreeum is not directed at children under 13.

Changes to this policy

If our practices change, we will update this page and note the new effective date. Material changes to what leaves your device will always be asked about in the app, not slipped into a policy.

Contact

Questions about privacy: hello@getatreeum.com