Privacy Policy

1. Introduction

RozVibe is a privacy-first journaling application designed to provide a secure and calm space for personal reflection, mood tracking, and daily writing. Our core commitment is to protect your personal thoughts through strong technical safeguards, particularly client-side encryption.

We design RozVibe so that we cannot access the content of your journal entries. This Privacy Policy describes our practices in detail.

2. Zero-Knowledge Architecture & Encryption

RozVibe uses a zero-knowledge architecture. All journal entries, titles, and mood data are encrypted on your device before they are ever transmitted to our servers.

We use AES-256-GCM encryption with keys derived locally on your device using PBKDF2-HMAC-SHA256 (100,000 iterations). Your encryption keys are never stored on our servers and exist only in memory during active use.

This means:

• We cannot read your journal entries
• We cannot access your decrypted thoughts
• Even in the event of a data breach on our servers, your entries remain encrypted and unreadable without your personal device credentials

3. Information We Collect

3.1 Account Information

• Email address (if you sign up with email/password)
• Basic profile information from Google Sign-In (if chosen)

3.2 Technical & Usage Data

• Device model and operating system version
• App performance and crash data (via Firebase Crashlytics)
• Anonymized usage statistics (via Firebase Analytics)

3.3 Metadata for Synchronization

To enable cloud sync across devices, we store limited metadata such as:

• Randomly generated entry identifiers
• Timestamps (for sorting and calendar view)
• Basic account status flags

All actual journal content remains encrypted on your device before upload.

4. Information We Do Not Collect

We do not collect or store:

• The plain text content of your journal entries
• Your mood selections or emotional data on our servers
• Search queries performed within the app
• Precise location data
• Microphone, camera, or file system access
• Keystroke patterns or typing behavior

All emotional insights, mood patterns, and search functionality are processed locally on your device.

5. Third-Party Services

• Google Firebase: Used for authentication, encrypted data storage (Firestore), analytics, and crash reporting.
• Google AdMob: Used to display advertisements. AdMob may use anonymous device identifiers to show relevant ads. We do not share your journal content or personal thoughts with advertising networks.

We use Google’s User Messaging Platform (UMP) to obtain consent for personalized advertising where required.

6. Data Usage

We use the collected information only to:

• Provide account authentication and synchronization
• Maintain and improve app performance and stability
• Show relevant advertisements
• Respond to support requests

7. Data Sharing

We do not sell your personal information. We may share data only in these limited cases:

• With Google Firebase and AdMob as necessary for the services above
• When required by law (with effort to notify users where possible)

8. Data Retention & Deletion

You can delete your account and all associated encrypted data at any time through the "Danger Zone" feature in the app settings. Once deleted, the encrypted data is permanently removed from our servers.

Because we do not hold your decryption keys, we cannot recover deleted entries.

9. Your Rights

Depending on your location, you may have rights to:

• Access your account metadata
• Request deletion of your data
• Withdraw consent for certain processing

You can exercise most of these rights directly within the app.

10. Children’s Privacy

RozVibe is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent and believe your child has provided us with personal information, please contact us.

11. International Data Transfers

Your data may be transferred to and processed in countries outside your jurisdiction, including India and the United States, where Firebase servers are located. We rely on standard contractual protections and Google’s security measures for such transfers.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through the app or via email. Continued use of RozVibe after such changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy, please contact us:

Email: support.rozvibe.me@gmail.com

Developer: Keshav Chauhan