← Confido

Privacy Policy

Effective date: 2026-05-28. Last updated: 2026-05-28.

Summary. Confido is a local-first journaling app. By default, everything you write, record, and capture stays on your iPhone. Cloud features that send data to our servers are explicitly opt-in, clearly labeled, and can be disabled at any time.

1. Who we are

Confido (“the app”) is developed and operated by Lin Chiang-Yu, an individual developer based in Taiwan (“we,” “us”). This privacy policy describes what data the app handles, when data leaves your device, and how to exercise your rights.

2. Local-first by default

Confido is designed so that the core journaling experience runs entirely on your device:

3. Optional cloud features

Confido offers cloud-backed features that you can choose to enable. Each requires you to sign in with Apple ID (Sign in with Apple). When you opt in, specific categories of data are processed on our servers as described below.

3.1 Sign in with Apple

When you sign in, Apple provides us a pseudonymized user identifier and, depending on your choice, your name and an email address (which may be Apple’s private relay address). We store this identifier with your Confido Cloud account so we can associate your future requests with the right account.

3.2 AI Companion and Diary Generation

When you use AI features such as the AI Companion or automatic Diary generation, the relevant journal text is sent to our Cloud Gateway, which forwards it to Google’s Gemini API for processing. The generated response is returned to your device. We do not retain prompts or responses beyond the request lifetime on our Gateway.

3.3 Speech transcription (two engines)

Confido offers two speech-to-text engines that you can switch between in Settings:

You can switch back to on-device transcription at any time from Settings.

3.4 Usage metering

When cloud features are enabled, our Cloud Gateway counts your API call volume and total audio seconds processed. We use these counters solely for service availability (rate limiting and fair-use enforcement). We do not use this data to analyze your behavior, profile you, or target advertising.

3.5 Profile picture (optional)

If you choose to upload a profile picture, it is stored in our backend storage and shown only to you. You can remove it at any time.

4. What we do not collect

Even with all cloud features enabled, Confido never:

5. Third-party processors

When you use cloud features, the following third parties process data on our behalf:

We do not control these third parties’ own data practices. We choose providers whose terms align with the limited, request-scoped processing described in this policy.

6. Data retention

7. Your rights and choices

8. Children’s privacy

Confido is not directed to children under 13 and we do not knowingly collect data from children under 13. If we become aware that a child under 13 has provided us data through cloud features, we will delete it.

9. Security

All network communication between the app and our Cloud Gateway uses HTTPS / TLS. API credentials and authentication tokens are stored in the iOS Keychain. Our Cloud Gateway and Supabase backend enforce server-side authentication and authorization for every request.

No system is perfectly secure. If you discover a vulnerability, please contact us via the Support page.

10. International data

Our Cloud Gateway and Supabase instance may process and store data in regions outside Taiwan (your country of residence) depending on the providers’ infrastructure placement. By using cloud features, you consent to this processing.

11. Changes to this policy

We may update this privacy policy from time to time, for example when we add new features that change what data we handle. We will revise the “Last updated” date at the top of this page. For material changes that affect existing users, we will surface the change inside the app on next launch.

12. Contact

If you have questions about this privacy policy, please contact us: