← MyDiarySkills

Privacy Policy

Last updated: May 8, 2026

MyDiarySkills ("the app", "we") is a private diary and skill tracking service. This policy describes what we collect, why, who we share it with, and the controls available to you. We try to keep this short and concrete — if anything is unclear, write to us at support@thehnh.tech.

1. Data we collect

  • Account data: email, name (optional), timezone, password (stored only as a bcrypt hash — we never see your raw password).
  • Diary content: the text you write each day, stored encrypted at rest, plus metadata (date, word count, save timestamps, whether the day was analyzed).
  • Skills: skill names, emojis, levels, progress, and descriptions managed by the AI skill engine.
  • AI update history: raw AI skill updates attached to a date, kept so you can audit them. You can disable this in Settings → AI analysis ("Retain analysis history").
  • Session cookie: an encrypted, HTTP-only cookie used to keep you signed in. It does not track you across other sites.
  • Server logs: standard request logs (timestamps, IPs, user agents) retained for up to 14 days for security and debugging. We do not run third-party analytics or advertising trackers.

We do not collect: location, device contacts, photos, microphone or camera input, third-party advertising IDs, or biometric data.

2. How we use your data

  • To provide the daily writing surface, calendar, skill dashboard, and export.
  • To authenticate you and protect your account from unauthorized access.
  • To send AI analysis requests, only when you tap Analyze.
  • To respond to your support requests when you write to us.

We do not sell, rent, or trade your data. We do not use your diary content to train AI models.

3. Third parties we share with

  • Google Gemini API. When you tap Analyze, that day's diary text is sent to Gemini to generate skill suggestions. If Gemini is overloaded or quota-limited, the request can fall back to Groq or local template suggestions. AI providers process the request to return a response; we do not use your diary content to train AI models. See policies.google.com/privacy and groq.com/privacy-policy.
  • MongoDB Atlas (MongoDB, Inc.) — hosts the database where your account, diary, skills, and suggestions are stored. See mongodb.com/legal/privacy-policy.
  • Vercel, Inc. — runs the web app and API endpoints. Standard request logs are processed by Vercel. See vercel.com/legal/privacy-policy.

We disclose data to law enforcement only when compelled by a valid legal request.

4. Where data is stored

Account, encrypted diary, skills and suggestion data are stored in MongoDB Atlas. The web app is served from Vercel's edge infrastructure. Your data may be processed in the United States and the European Union depending on the closest available region.

5. Retention and deletion

  • Account data and diary content are kept for as long as your account exists.
  • Sign in to Settings → Privacy and tap Delete account. This permanently erases your account, diary entries, skills, and AI suggestions from our database within 30 days. Backups are rotated within 35 days.
  • You can also export everything as a JSON file at any time from Settings → Privacy.

6. Your rights

Depending on where you live (notably the EU/EEA, UK, Switzerland, and California), you may have rights to access, correct, export, restrict, or delete your personal data, and to object to processing. The export and delete features above already cover most of these. For anything else, write to support@thehnh.tech.

7. Children

MyDiarySkills is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect data from children under 13. If you believe a child has signed up, please contact us and we will delete the account.

8. Security

Passwords are hashed with bcrypt. Diary text is encrypted before it is stored in MongoDB. Sessions use encrypted, HTTP-only, SameSite=Lax cookies. Database connections use TLS. No system is perfectly secure — please use a unique, strong password and contact us at once if you suspect your account has been compromised.

9. Changes to this policy

If we change this policy materially, we will update the "Last updated" date and, when appropriate, surface a notice in the app.

10. Contact

Questions, deletion requests, or store-review queries: support@thehnh.tech.