Privacy policy
What stays on your device and what external services handle.
Operator and scope. AutoSecureLogin operates Kavanah Journal. This policy covers the native offline Android app and the browser journal. Updated September 7, 2026.
Journal content. Memories, photos, profiles, reminders, growth records, appointments, collections, books and selected attachments stay on your device. We do not receive new offline journal content, backup passwords or backup keys. There are no journal accounts, advertising trackers or automatic journal uploads.
Android. The native app has no internet permission. Journal records are encrypted in private app storage. Android’s picker gives the app files you choose; notifications are optional local reminders. Uninstalling or clearing storage can remove the journal. Device encryption does not hide content from someone using an already unlocked app.
Browser. The website initially downloads public app files, then works offline after caching. Encrypted journal records and a local encryption key are stored in your browser. Clearing site data or browser cleanup can erase them. The web host processes technical request information such as IP address, requested public file and request time to deliver and secure the website. It does not receive journal entries or backup files.
Exports and recipients. You choose when and where to export. Encrypted exports require the matching bundle, key file and password. Android document providers such as Google Drive use their own accounts and privacy policies. Provider packages are selected files, not hosted links. A recipient’s downloaded copy cannot be remotely revoked. Readable HTML, JSON and PDF exports are unencrypted.
Optional external services. Donations open donate.autosecurelogin.com in a separate browser page. That website and its payment provider handle donation information under their own policies; no journal is included. Support messages you deliberately send are used to respond. Do not send journal content, passwords or recovery keys.
Earlier records. The retired hosted service’s records and recovery backups remain separate for ownership-verified export and disposition. They are not an active journal service and do not contain new offline journals.
Your choices and contact. Edit or delete local records, make independent exports, or remove app/browser storage. Manage exported copies separately. For privacy or legacy-record requests contact contact@autosecurelogin.com. We will post material policy changes with a revised date.