Always private, always yours.
Your journal is the most personal thing you'll ever write. Here is who can read it, what the AI sees and how we keep it safe, in plain English.
Five things to know
- Only you can read your journal.
- It's never sold, and there are no ads.
- It's never used to train AI.
- Our team never reads it without your permission.
- The AI reads only what it needs to search and answer for you.
Our full privacy policy is coming soon. Questions? info@lifearchivejournal.com
Who can read your journal
Three kinds of reader, and the plain answer for each.
It reads to answer you. That's all.
Ask a question, and only the passages that could answer it are sent to the AI. Here is the whole journey, step by step.
Your entries are indexed privately
So you can find an entry by what it means, not just its exact words, each entry's text is turned into a search index by Cloudflare's AI, inside the cloud we already use. The index is stored with your account and only searched for you.
You ask, and it picks a few passages
Life Archive searches your own entries and picks the passages that could answer your question. Only those, with your question, go to the AI.
Through our private gateway to Claude
The AI is Claude, made by Anthropic. Requests go through Cloudflare's AI Gateway with its logs switched off, so the gateway doesn't keep what passes through.
Not used for training, and deleted
Under Anthropic's terms for businesses, what we send isn't used to train its models, and it's deleted from Anthropic's systems within 30 days (kept longer only if it's flagged for breaking their usage rules).
The answer comes back only to you
With a link to every entry it used. Scanning works the same way: photos of your pages go to Claude to be typed up, and nowhere else.
How we keep it safe
No jargon here. The names of the actual technologies are in the box underneath.
Encrypted on the way to you
Every page and file travels over an encrypted connection (the padlock in your browser). Unencrypted connections are turned away.
Your files are encrypted in storage
Photos and the scans of your notebooks are stored encrypted by our cloud provider. Your entries live in a private database that only the app can reach.
Private storage only you can open
There are no public links to your files. Each photo or scan is checked against your account before it's shown, and it's never kept in a shared cache.
Your photos lose their location
Before a photo is stored, its GPS location is removed on your device, and checked again on our side.
No passwords to steal
You sign in with Apple, Google, or a 6-digit code we email you. A code works once and expires in 10 minutes. Repeated attempts are slowed down, and you can sign out of every device at once.
No ads, no trackers
No analytics, no ad networks and no tracking pixels. The only outside script is Cloudflare's bot check on the sign-in page. The only cookies are the ones that keep you signed in.
For the technical: what it runs on
- Hosting
- One Cloudflare Worker serves the site and the app. No other servers.
- Connections
- HTTPS only, with HSTS (one year, subdomains included). A Content-Security-Policy allows scripts from our own address only (plus Cloudflare Turnstile on the sign-in page); the site can't be framed.
- Entries
- Cloudflare D1. Every read and write is scoped to the signed-in account on the server; the browser never talks to the database.
- Files
- A private Cloudflare R2 bucket (encrypted at rest), keyed by account. Served only through an owner-checked address with Cache-Control: private, no-store. No public or signed links.
- Sign-in
- Better Auth on our own server. Sign in with Apple, Google (verified email only) or a 6-digit emailed code (stored hashed, single use, 10 minutes). No passwords. Sessions last 30 days and never more than 90; rate-limited, with a Cloudflare Turnstile bot check.
- AI
- Anthropic's Claude, called only from our server through Cloudflare AI Gateway (logging off). The Anthropic key never reaches your browser.
- Search index
- Cloudflare Workers AI embeddings stored in Cloudflare Vectorize, filtered by account. Cloudflare's terms: customer content isn't used to train models.
- Deleting
- A deleted entry and its files are removed at once. The database keeps a rolling 30-day point-in-time recovery history (D1 Time Travel) for disasters, after which it's gone.
- Logs
- Routes, status codes and ids only. Never entry text, questions, answers or email addresses.
Your journal, your rules
What you can do today, and what's on its way. Try the example settings: nothing here touches a real account.
Delete an entry
AvailableOpen the entry and delete it. It's gone from your journal at once, along with its photos.Your journals →Sign out of all your devices
AvailableIn Settings → Security. It ends every session, everywhere, at once.Settings →Delete your account
AvailableIn Settings → Delete account. Your account and everything in it (entries, photos, scans, conversations) is removed at once, and Sign in with Apple's access is revoked.Settings →Export everything
Coming soonOne download with every entry, photo and scan, on every plan.Request a copy of your data
Coming soonA copy of everything we hold about you, on request.Keep an entry out of AI
Coming soonSwitch an entry off and Ask will never use it.
What we'll never do
We will never Sell your data
Not your journal, not your email address, not anything about you.
We will never Show you ads
There are no ads in Life Archive, and none are planned.
We will never Read your journal without your permission
Not even when you write to us for help, unless you say we may.
We will never Use it to train AI
Not our own, not Anthropic's, not anyone's.
Questions about your privacy?
Email info@lifearchivejournal.com. Our full privacy policy and terms are coming soon.
Email us