Aquarion Labs ("we", "us", or "our") operates the Caldera Spiritual Journal mobile application (the "Service"). Caldera Spiritual Journal is a private, on-device diary. This page explains what data stays on your device, the little we ever receive, how it is used, and the choices you have.
Your journal never leaves your device. Everything you write is encrypted on your iPhone and analyzed on-device. We do not upload, sync, transmit, or read your journal entries — not for insights, not for backups, not for anything.
What Stays on Your Device
The heart of Caldera Spiritual Journal never touches our servers:
- Your journal entries. Morning intentions, evening reviews, dream notes, Yama & Niyama self-checks, and everything else you write are encrypted on your device and stored only there.
- Your insights. The reflections the app shows you — recurring themes, sentiment, dream patterns — are produced on your device using Apple's on-device NaturalLanguage framework. Your text is never sent anywhere for analysis.
- Your practice data. Streaks, milestones, and app preferences (theme, language, planetary-day settings) are stored locally on your device.
Information We Receive
We collect only the minimum needed to give you an account and unlock your purchase.
- Account (optional). If you sign in with Sign in with Apple, we receive your unique Apple-issued user identifier. If you choose to share them, we also receive your name and email address. Signing in is used to restore your one-time unlock and greet you by name; it is not required to write in your journal.
- Purchase status. When you buy the one-time unlock, Apple's StoreKit tells the app your transaction and entitlement status so the app can unlock insights and remove ads. We never see or store your payment card details.
- Advertising & technical data (free version). The free, ad-supported version uses Google Mobile Ads. Depending on your choices, Google may process limited technical signals such as device type, iOS version, app version, language, time zone, an advertising identifier when permitted, and ad-interaction data.
How We Use Information
We use what little we receive to: provide and restore your account and one-time unlock; generate your reflections and streaks entirely on your device; and — only in the free version, and only with your consent — show advertising. We do not build profiles of you from your journal, because we never receive it.
On-Device Analysis
Caldera Spiritual Journal reflects your own writing back to you — recurring words, sentiment, and dream themes — using Apple's NaturalLanguage framework, which runs entirely offline on your device. Your entries are read by your phone, never by us and never by a server. Nothing you write is transmitted for this purpose.
Encryption, Face ID & Security
Your journal is encrypted on-device using Apple's CryptoKit, with the encryption key held in the device Keychain. You can additionally protect the app behind Face ID or your device passcode using Apple's LocalAuthentication; the app receives only a success/failure result and never your biometric data, which stays within Apple's Secure Enclave. No method of storage is ever 100% secure, but because your entries stay on your device and are encrypted at rest, there is nothing for us to lose on your behalf.
Do We Sell Personal Information?
No. We do not sell personal information, and we never share your journal because we never receive it.
Third-Party Services
We rely on a small number of third-party services to operate Caldera Spiritual Journal:
- Apple — Sign in with Apple, StoreKit (the one-time purchase), Keychain, LocalAuthentication (Face ID / passcode), and the on-device NaturalLanguage framework.
- Google Mobile Ads (AdMob) and Google's User Messaging Platform — advertising, frequency capping, and consent management in the free version only. Google may use a device identifier to serve personalized or non-personalized ads depending on your choices.
Each provider has its own privacy policy that governs its handling of your information.
App Tracking and Advertising
The free version uses Google Mobile Ads and Google's User Messaging Platform for ads, consent, and frequency capping. The one-time unlock removes ads entirely. We do not track you across other companies' apps and websites unless you grant permission via the App Tracking Transparency prompt. If you grant permission, your advertising identifier may be used for personalized advertising; if you decline, ads are served non-personalized and contextual where applicable. You can change your choice at any time in iOS Settings → Privacy & Security → Tracking → Caldera Spiritual Journal.
Payments
The one-time unlock is processed by Apple via StoreKit. We never see or store your payment card details. The app receives only the product ID and entitlement status needed to unlock insights and remove ads. Buy once — it is yours forever on your Apple ID.
Legal Bases (EEA / UK)
If you are in the European Economic Area or the United Kingdom, we process the limited data we receive under these legal bases: performance of a contract (to provide your account and unlock), consent (for tracking-based advertising), and legal obligations.
Your Rights & Deleting Your Data
Because your journal lives on your device, you are always in control of it. You can delete individual entries in the app, and deleting the app removes all local entries, insights, streaks, and the encryption key from your device.
If you created an account with Sign in with Apple, you may also request access to or deletion of the limited account data associated with your Apple identifier by contacting us. You can revoke the app's Sign in with Apple access at any time in iOS Settings → Apple ID → Sign in with Apple. Depending on where you live, you may have additional rights to access, correct, export, or restrict processing, and to lodge a complaint with a supervisory authority.
Children's Privacy
Caldera Spiritual Journal is not directed to children under the age of 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.
Data Retention
Your journal, insights, streaks, and preferences live on your device until you delete them or uninstall the app; we hold no copy. Account data (your Apple identifier, and name/email if shared) is retained while your account is active or until you request deletion.
Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the latest revision. Material changes will be communicated within the app before they take effect.
Contact
Questions, requests, or complaints? Reach us at hello@aquarionlabs.com.