Consumer Health Data Privacy Policy — Diary BFF

Last updated: 2026-10-14

This page is for people in Washington State and Nevada. It covers information that could say something about your physical or mental health (“consumer health data”). Our full Privacy Policy covers everything else.

What we collect

• What you write in your journal and on the chat page, including anything you write about how you feel, how you sleep, or your health.
• The replies the app writes back to you, your Sunday letters, and the short notes the app keeps about earlier nights so it can remember you.
• Photos you attach to your entries.

Why we collect it

Only to provide the journal you ask for: to store what you write, to write replies and Sunday letters when you ask for them, and to show a crisis line if what you write looks like you might be in danger. We do not use it for advertising, and we do not sell it.

Where it comes from

From you, when you write, speak, or attach photos in the app. The replies, letters, and notes are written by an AI model from what you wrote.

Who receives it

Only service providers that process it for us under contract. We do not share it with anyone else.

• Anthropic writes the replies, letters, and notes. Nothing is sent to it until you agree on the consent screen.
• Supabase stores your journal (database, file storage, and functions).
• Cloudflare (R2) and GitHub (Actions) keep and run the encrypted nightly backup of photos.
• RevenueCat handles subscriptions. It receives no journal content.

Your rights

• See it: Settings → Export & Import gives you a copy of your entries, photos, replies, Sunday letters, notes, and chat page.
• Stop sending it to the AI: say no on the consent screen, or turn off the replies in Settings. Nothing more is sent.
• Delete it: delete one entry, one chat message, or everything with Settings → Delete account. Photo backups are kept for at most 7 days.
• Ask us: email hello@diarybff.app. We answer within 45 days. If we need longer, we will tell you why within those 45 days, and we will answer within 45 more.
• Appeal: if we decline a request, reply to our answer to appeal. We answer an appeal within 45 days and tell you what we decided and why. If you disagree, you can contact the Washington State Attorney General at atg.wa.gov/file-complaint.