← Postscriptum

Legal

Privacy Policy

Last updated: October 2026

What we collect

When you use Postscriptum, we collect:

  • Account information — your email address and authentication data, managed by Clerk.
  • Journal entries — everything you write: questions, answers, and mood ratings.
  • Backstory — any personal context you provide to improve AI responses.
  • Memory themes — patterns automatically extracted from your entries to personalise future questions.
  • Payment information — processed entirely by Stripe. We store only your Stripe customer ID — no card numbers.
  • Usage data — streak count, entry dates, and settings preferences.

How we use it

Your data is used to:

  • Generate personalised journal questions via Google Gemini (your entries are sent to Google's API for processing)
  • Produce AI insights, memoir drafts, and post-entry reads
  • Track your streak and award badges
  • Send optional email reminders and weekly digests via Resend

We do not sell your data. We do not train AI models on your journal entries.

Advertising measurement

We advertise on Instagram and Facebook, and use the Meta Pixel to learn which ads work. It runs only on our public pages: the homepage, sign-up, onboarding, shared cards, and these legal pages. Nothing is reported from inside your journal.

When you create an account, we tell Meta that a sign-up happened. With it we send a one-way hash of your email address and account ID, your IP address, your browser type, and Meta's own ad-click cookies. Meta uses these to match the sign-up to an ad. We also keep a record of which ad or link brought you here.

We never send Meta anything you write: no entries, answers, memory themes, insights, or memoir text.

If your browser sends a Global Privacy Control signal, we don't load the pixel and don't report your sign-up to Meta.

Third-party services

  • Clerk — authentication and account management
  • Neon — PostgreSQL database hosting (your entries are stored here)
  • Google Gemini — AI question generation and insight writing
  • Stripe — payment processing
  • Resend — transactional and digest emails
  • Vercel — application hosting
  • Meta — measuring our Instagram and Facebook ads (see above)

Your rights

You can:

  • Delete your account and all associated data permanently from Settings → Delete account
  • Request a copy of your data by emailing us

Data retention

Your data is retained as long as your account is active. When you delete your account, all journal entries, memory themes, insights, and personal data are permanently deleted within 24 hours. Payment records are retained by Stripe per their legal obligations.

Contact

Questions about this policy: support@postscriptum.space

Terms of ServiceBack to app