Privacy Policy

Last updated: February 15, 2026

Calm Diary ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our journaling application.

1. Information We Collect

When you create an account, we collect:

• Account information: Your name, email address, and date of birth.
• Journal content: The notes, tags, moods, and images you create within the application.
• Usage data: Basic usage information such as login timestamps and session data necessary for the application to function.

We do not collect analytics, tracking cookies, or any third-party advertising data.

2. How We Use Your Information

We use your information solely to:

• Provide, maintain, and improve the Calm Diary application.
• Authenticate your identity and secure your account.
• Store and retrieve your journal entries.
• Send password reset emails when requested by you.

3. Data Storage & Security

Your journal data is stored on the server where Calm Diary is hosted. We implement industry-standard security measures to protect your data, including:

• Passwords are hashed using bcrypt and never stored in plain text.
• CSRF tokens protect against cross-site request forgery.
• Rate limiting and account lockout protect against brute-force attacks.
• Session data is managed securely with proper expiration.

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

4. Data Sharing

We do not sell, trade, rent, or otherwise share your personal information or journal content with third parties. Your journal entries are private and accessible only to you.

5. Cookies

Calm Diary uses only essential cookies required for session management and authentication. We do not use advertising cookies, tracking cookies, or any third-party cookies. Your theme preference (light/dark mode) is stored in your browser's local storage.

6. Data Retention

Your journal data is retained for as long as your account is active. If you wish to delete your account and all associated data, please contact us and we will remove your information within 30 days.

7. Your Rights

You have the right to:

• Access your personal data at any time through the application.
• Correct any inaccurate information in your account.
• Delete individual journal entries or request full account deletion.
• Export your data in a portable format.

8. Children's Privacy

Calm Diary is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us so we can remove it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated "Last updated" date. We encourage you to review this page periodically.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

privacy@calmdiary.com