Privacy
Last updated 6 November 2026. This page describes exactly what Voxfolio stores, where, and who processes it. We've kept it plain on purpose.
The short version
- Your journal belongs to you. It is never sold, never used for advertising, and never used to train AI models.
- The microphone is only on while you are recording.
- Speech-to-text is done by OpenAI if you leave it switched on. You can turn it off in Settings.
- You can export everything, delete audio but keep the text, or delete your account permanently at any time.
What we store
| Data | Where | How it is protected |
|---|---|---|
| Email address and a scrypt hash of your password (never the password itself) | Our database on our own server | HTTPS in transit. The database file is protected by server access controls. |
| Audio recordings and photos | Files on our own server | Encrypted with AES-256-GCM before they are written to disk. |
| Titles, transcripts, notes, tags, moods, highlights and collections | Our database on our own server | HTTPS in transit. They are stored readable by the server so search works; we do not claim end-to-end encryption. |
| Session tokens | Database (as a SHA-256 hash) and an HttpOnly cookie in your browser | Expire after 60 days, revoked when you sign out or change your password. |
| Monthly transcription minutes used | Database | Used only to apply your plan's allowance. |
| Recordings waiting to upload, and an optional app-lock PIN hash | Your own device (browser storage) | Removed from your device once uploaded. |
Who processes it
- OpenAI, for transcription only, and only while “Transcribe my recordings automatically” is on. The audio of each recording is sent to OpenAI's speech-to-text API. Under OpenAI's API terms, data sent through the API is not used to train their models. Turn the setting off and no audio leaves our server.
- Stripe, if you subscribe to Plus. Stripe handles your payment details; we never see or store your card. We store your Stripe customer and subscription IDs to know which plan you are on.
- No analytics, advertising or tracking services are used in the app.
What we never do
- We never sell your data or use it for advertising.
- We never use journal content to train AI models.
- We never record raw audio, transcripts or passwords in server logs. Logs contain only the request type, status and timing.
Your controls
- Transcription: Settings, then “Transcribe my recordings automatically”.
- Audio retention: on any entry, choose “Keep text only” to delete the audio permanently.
- Export: Settings, then Export everything. You get every entry as JSON and Markdown, plus your audio and photos.
- Delete: Settings, then Delete my account permanently. Your entries, recordings, photos and settings are deleted straight away and any subscription is cancelled. Server backups, if any, roll over within 30 days.
- Demo journals are deleted automatically after 24 hours.
Not a medical service
Mood and energy check-ins are personal notes. Voxfolio does not diagnose or treat anything and is not a substitute for professional help.
Contact
Questions or requests: admin@concise.design.