Unwriting · effective 4 August 2026
Nothing you do inside the journal leaves your device. No account, no sign-in, no analytics, no advertising, no tracking. Your progress, your answers and the pages you have restored are yours alone.
The one exception is honest and narrow: if you buy the unlock, a payment receipt is checked by Apple and by our payment processor. That is described in full below, and it is the only data anyone receives.
Everything. The app keeps a small local database containing your progress: which leaves you have restored, which keys you have recovered, and which ending you signed. It never leaves your phone. There is no server to send it to and no backup service holding a copy of it.
Answers you type are checked on-device against a stored one-way hash. The text you type is not recorded, not transmitted, and not kept after the check.
Deleting the app deletes all of it, permanently. So does choosing the third ending, which is a deliberate part of the story and is confirmed twice before it happens.
At points the journal implies it knows something about you. It is using only what you typed into it and the timing of your own session, held in memory on your device. It has no access to your identity, contacts, location, photos, camera, microphone, calendar, health data, files, other apps, or your browsing. The fiction claims to see you; the software never does. This policy is the honest description, and the app's behaviour can be inspected in the public source.
The app offers one optional one-time purchase, which unlocks restoring the later leaves. Purchases are processed by Apple, and entitlement is verified through RevenueCat, Inc., which acts as our processor for that check.
When you buy or restore, RevenueCat receives the App Store transaction receipt and a randomly generated anonymous identifier for the installation. It does not receive your name, email address, Apple Account, device contacts, or anything you did inside the game. We never see your payment details. Apple does not share them with us.
RevenueCat's own policy: revenuecat.com/privacy. Apple's: apple.com/legal/privacy.
If you never make a purchase and never tap Restore, the app makes no network requests at all.
The app is not directed at children and collects no personal information from anyone, including children. Its subject matter, a woman escaping a controlling marriage, is handled in text and is rated accordingly on the App Store.
Because we hold no personal data about you, there is nothing for us to export, correct, or delete on request. The usual GDPR and CCPA rights have no data to act on here. Your game data is under your control on your own device and is removed by deleting the app.
For purchase records held by Apple or RevenueCat, contact them using the links above, or email us and we will help.
If a future version collects anything, this page will say so before that version ships, and the change will be described plainly rather than buried.
simon@simonbuilds.app with the subject line Bindery.