Privacy Policy for Summer Ledger

Last Updated: September 14, 2025

This Privacy Policy describes how Summer Ledger ("the Service", "we", "us", "our") collects, uses, and protects your information. Your privacy is the cornerstone of our Service, and we are committed to protecting it.

1. Information We Collect

We collect information necessary to provide you with a secure and personal journaling experience.

A. Information You Provide Directly:

  • Account Information: When you sign up, you provide an email address, a hashed password, and a separately hashed Gallery Code.
  • Journal Content: You may provide detailed information about partners and encounters, including names, notes, dates, locations (including geographic coordinates if you use the map feature), activities, ratings, and contact details. This is your core data and is treated as highly sensitive.
  • Media Files: You may upload photos and videos to your account profile and private galleries. These files are stored securely and linked to your account.
  • Audio Data: If you use the voice memo feature, your audio recordings are collected and sent for processing.

B. Information Collected Automatically:

  • Usage Information: To maintain security and prevent abuse, we may collect your IP address for rate-limiting purposes on sensitive actions like login and gallery unlocking. We do not use this for tracking.

2. How We Use Your Information

Our primary use of your information is to operate the Service and provide you with its features. We do not sell your personal data.

  • To Provide the Service: We use your journal content to display it back to you in your ledger, on your dashboard, on maps, and within your galleries.
  • To Secure Your Account: We use your email, hashed credentials, and registered passkeys to authenticate you and secure your account.
  • To Process AI Features:
    • Voice Transcription: When you record a voice memo, the audio data is sent to our AI service provider (Cloudflare) to be converted into text. The audio data is processed for this purpose and is not used to train AI models.
    • Content Summarization: When you use AI summary features, the relevant text notes are sent to our AI service provider (Cloudflare) for processing to generate a summary. This data is not used for model training.
  • To Check Storage Quotas: We calculate the total size of your uploaded media to enforce storage limits.

3. Data Storage and Security

We are built on a privacy-first architecture using modern security practices.

  • Data Storage: Your account and journal data are stored in a Cloudflare D1 database. Your uploaded media (photos, videos) are stored in Cloudflare R2 object storage.
  • Encryption: Your password and Gallery Code are never stored in plain text; they are cryptographically hashed using bcrypt. All data is encrypted in transit using TLS (HTTPS).
  • Media Access Control: Access to your media files, especially those in the locked gallery, is strictly controlled. The gallery requires a separate unlock action (via Gallery Code or Passkey) which grants a temporary, short-lived (5-minute) access token.

4. Third-Party Services

We use a minimal number of trusted third-party services to provide our features.

  • Cloudflare (D1, R2, AI): Our primary infrastructure provider for database, storage, and AI processing. We process your data through Cloudflare, but they do not have permission to use it for their own purposes.
  • Nominatim (OpenStreetMap): When you search for a location in the map selector, your search query is sent to the Nominatim service to find geographic coordinates.
  • Map Tiles: Map visuals are provided by third-party tile servers (ArcGIS, CartoCDN). Your browser requests these map tiles directly; no personal journal data is shared with them.

5. Data Retention and Deletion

You are in control of your data.

  • Retention: We retain your data for as long as your account is active.
  • Deletion: You can delete individual partners, encounters, or media files at any time through the app interface. When you use the "Delete Account" feature in your settings, all of your associated database records and stored media files in R2 are permanently and irreversibly deleted.

6. Your Rights and Choices

You have the right to access, manage, and export your data.

  • Access and Correction: You can access and update your account information, partner details, and encounters directly within the application.
  • Data Portability: You have the right to export your data. The "Create Backup" feature allows you to download your journal data and, optionally, all associated media files.
  • Deletion: You have the right to delete your account and all associated data at any time.

7. Children's Privacy

The Service is intended for a general audience. If you are a minor in your jurisdiction, you represent that you have the permission of your parent or legal guardian to use the Service. We do not knowingly collect personal information from children under the age of 13 without verifiable parental consent. If we learn we have collected such information without such consent, we will take steps to delete it.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes. Your continued use of the Service after such changes constitutes your acceptance of the new policy.

9. Contact

If you have any questions about this Privacy Policy, please contact us at [email protected].