wordsfortoday

Privacy Policy

Effective date: August 5, 2026

Words for Today is designed around a simple principle: your private writing should remain private.

This Privacy Policy explains how Words for Today (“Words for Today,” “we,” “us,” or “our”) handles information when you use the Words for Today application, website, and related services (collectively, the “Services”).

Words for Today is operated by Kinotiq Inc.

1. Your journal data

Your journal entries and other writing are stored locally on your device.

Journal data is encrypted at rest. We do not receive, store, or have access to the plaintext contents of your journal.

If you use an optional backup or device-sync feature, your journal data is encrypted on your device before it is transmitted. Only encrypted data is sent to or stored on our servers. The encryption keys required to read your journal are not available to us.

As a result:

  • We cannot read your journal entries.
  • We cannot search or analyze your journal entries.
  • We cannot provide your journal entries to advertisers or data brokers.
  • We generally cannot recover your journal contents if you lose access to your devices, credentials, recovery materials, or encryption keys.

No security system can guarantee absolute security, but the Services are designed so that plaintext journal data never touches our servers.

2. Information we may collect

Although we cannot access the contents of your journal, we may process limited information necessary to provide and maintain the Services.

Account and service information

If you create an account or use optional online features, we may process information such as:

  • An email address or other account identifier
  • Authentication and account-recovery information, including public identifiers and public keys from a .vault.key file
  • Subscription or entitlement status
  • Device identifiers generated for synchronization or security
  • Encrypted backup and temporary synchronization records
  • The dates and times that certain service operations occur

We do not use this information to inspect or infer the contents of your writing.

Purchase information

Purchases made through the Apple App Store are processed by Apple. We may receive information confirming your purchase or subscription status, but we do not receive your complete payment-card information.

Purchases made through another payment provider may be processed by that provider under its own privacy policy.

Support communications

If you contact us, we receive the information you choose to provide, such as your email address, the contents of your message, and any attachments you send.

You should not include journal entries or other sensitive information in a support request unless you intentionally want us to receive that information.

Technical and diagnostic information

We may receive limited technical information needed to operate, secure, and troubleshoot the Services, such as:

  • App version
  • Operating-system version
  • Device type
  • Crash or error information
  • General timestamps
  • Network and service-performance information

We do not intentionally include plaintext journal contents in diagnostic information.

Apple may separately provide diagnostics or usage information according to your device settings and Apple’s own policies.

Optional usage analytics

If you choose to enable usage analytics, we may receive privacy-preserving product interaction events, such as whether onboarding, tours, settings, sync, backup, subscription, feedback, highlighting, and writing-goal milestones were used.

Usage analytics are opt-in and can be changed later in Settings. These events are designed not to include journal text, highlight text, entry dates, filenames, file paths, account identifiers, device identifiers, passphrases, key material, .vault.key contents, or raw error messages.

Website information

When you visit our website, our hosting and infrastructure providers may automatically process basic technical information such as your IP address, browser type, requested pages, and request timestamps. This information may be used to deliver the website, maintain security, prevent abuse, and diagnose technical problems.

3. How we use information

We may use the limited information available to us to:

  • Provide and operate the Services
  • Authenticate users and devices
  • Process and verify purchases or subscriptions
  • Provide encrypted backup and synchronization
  • Respond to support requests
  • Diagnose crashes and technical problems
  • Protect the security and integrity of the Services
  • Prevent fraud, abuse, and unauthorized access
  • Comply with applicable law
  • Improve the reliability and usability of the Services

We do not use journal contents for advertising, profiling, artificial-intelligence training, or product analytics because we do not have access to those contents.

4. How we share information

We do not sell your personal information.

We may share limited information in the following circumstances:

Service providers

We may use carefully selected providers for services such as hosting, authentication, payments, customer support, error reporting, and email delivery. These providers may process information only as necessary to perform services for us and are subject to their own contractual and legal obligations.

Encrypted journal data may be stored or transmitted through infrastructure operated by service providers, but it remains encrypted.

Legal requirements

We may disclose information available to us when we reasonably believe disclosure is required to comply with applicable law, legal process, or a valid governmental request, or when necessary to protect the rights, safety, or security of our users, the public, or the Services.

Because we do not possess plaintext journal data or the keys necessary to decrypt it, we cannot disclose plaintext journal contents that we do not have.

Business transfers

If Words for Today or its operating business is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, limited user information may be transferred as part of that transaction. Any successor would remain subject to this Privacy Policy unless users are notified otherwise.

5. Data retention

Journal data stored only on your device remains there until you delete it, delete the application and its associated data, erase the device, or otherwise remove it.

Synchronization deliveries are temporary and are deleted after the receiving device acknowledges them, subject to retry leases, expiry, and routine operational records.

If a cloud-backup subscription lapses, the last encrypted backup remains retained and restorable, but it cannot be replaced with a newer backup until the subscription becomes active again. Disabling cloud backup or requesting deletion is a separate deletion action. Deleted data may remain for a limited period in infrastructure backups, object-store versions, security records, or deletion queues.

Account, transaction, support, and technical records are retained only for as long as reasonably necessary for the purposes described in this policy, including legal, accounting, security, and fraud-prevention requirements.

6. Deleting your data

You can delete locally stored journal data through the application or your device, as applicable.

If you use an account, encrypted backup, or synchronization service, you may request deletion of the associated server-side information by using any deletion controls provided in the Services or by contacting us at admin@wordsfortoday.app.

Deleting server-side encrypted data does not necessarily delete copies stored locally on your devices. Similarly, deleting the app from one device may not delete encrypted backups or data stored on another connected device.

We may retain limited records when required by law or reasonably necessary for security, fraud prevention, dispute resolution, or enforcement of our agreements.

7. Your privacy rights

Depending on where you live, you may have rights concerning personal information that we hold about you, including rights to:

  • Request access to that information
  • Request correction or deletion
  • Object to or restrict certain processing
  • Request a portable copy of certain information
  • Withdraw consent where processing is based on consent
  • Appeal or complain to an appropriate data-protection authority

These rights are subject to applicable exceptions and limitations.

Because we cannot access or identify the plaintext contents of your journal, we may be unable to retrieve, review, correct, export, or decrypt that content for you. Local journal-management and export features must generally be used directly from your device.

To submit a privacy request, contact admin@wordsfortoday.app. We may need to verify your identity before completing the request.

8. Security

We use administrative, technical, and organizational safeguards intended to protect the information processed through the Services.

The application is designed to encrypt journal data at rest and to encrypt journal data before it is transmitted for optional backup or synchronization. However, no application, device, transmission method, or storage system can be guaranteed to be completely secure.

You are responsible for maintaining the security of your devices, account credentials, recovery materials, and any device backups you control. Cloud backup recovery requires both your YubiKey and the strict .vault.key file; we do not provide a passphrase, PIN, email, QR, recovery-card, operator, or legacy-format fallback.

9. Children’s privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13.

If you believe a child has provided personal information to us, contact us at admin@wordsfortoday.app so that we can investigate and take appropriate action.

Users in some jurisdictions may need to meet a higher minimum age or obtain permission from a parent or legal guardian.

10. International processing

We and our service providers may process limited service information in countries other than the country where you live. Those countries may have different data-protection laws.

Where required, we use appropriate safeguards for international transfers of personal information.

This does not change the encryption protections described in this policy: plaintext journal contents are not transmitted to or processed by our servers.

11. Third-party services and links

The Services may interact with third-party platforms or contain links to third-party websites. For example, purchases may be processed through an app store or payment provider.

Those third parties operate under their own terms and privacy policies. We are not responsible for their independent privacy practices.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to the Services, our practices, or applicable law.

When we make changes, we will update the effective date at the top of the policy. If a change materially affects how we handle personal information, we will provide additional notice when reasonably appropriate.

13. Contact us

Questions, privacy requests, and concerns may be sent to:

Kinotiq Inc
Email: admin@wordsfortoday.app