Privacy Policy

Journal content you create. The text of your diary and journal entries, your reading notes and marginalia, the books you add, habits, moods, tasks, budgets and study logs — everything you write into khoshra.

Account information. The email address you sign up with and a display name. If you sign in with Google, we receive the name and email Google shares with us — never your Google password.

Usage details. Basic, anonymous information such as the pages you visit within khoshra and the device type you use, used to keep the app working and to understand which features matter.

• To show your journal, books and tools back to you, across your phone and the web.
• To sync your entries to your account so they survive a lost phone or a new device.
• To derive the quiet “khoshra remembers” notes, monthly summaries and reflections from your own writing.
• To send you the emails you asked for — a welcome note, journal-theme change alerts, or sign-in confirmations.
• To keep the service secure and to fix what breaks.

We never sell your journal entries, your reading history, or your personal information to anyone.

You can sign in with an email and password, or with Google. Passwords are hashed by the authentication service — khoshra never sees or stores them in plain text. If you use Google, the sign-in happens with Google; we only receive the profile details Google returns.

Your account data is stored on the khoshra backend (hosted on the Lovable Cloud infrastructure). Entries are protected by row-level security so that only your signed-in account can read or change your own journal. When you write offline, the entry is kept on your device and merged to your account when you reconnect.

Khoshra is the data controller for your account and journal data. We do not share your journal content with advertisers. We share data only:

• With the hosting and email providers that run khoshra on our behalf, under their own privacy terms.
• With Paddle, our Merchant of Record, when you make a “buy a coffee” donation — Paddle processes the payment, billing, tax and invoicing for that order and receives the details needed to complete it (we never see your card details).
• With professional advisers (legal, accounting) where needed.
• To meet a legal obligation, or to protect the rights, safety or property of our users, where we believe disclosure is necessary.

khoshra relies on a small number of trusted services:

• Authentication & database — the backend that stores accounts, entries and books.
• Google Sign-In — for optional one-tap sign-in.
• Email delivery — to send the welcome note, theme-change alerts and sign-in emails you requested.
• News headlines — The Gazette fetches public headlines from editorial sources; no personal data is sent in those requests.
• Payments — “Buy a coffee” donations are processed by Paddle, our Merchant of Record; we receive a confirmation and your chosen email, never your card details. Paddle’s handling of payment data is covered by its own privacy notice.

We keep your journal entries, books and notes for as long as your account is open. You can delete individual entries, books or your entire account at any time from your profile. When you delete your account, your journal content is removed from the active database within a reasonable period; residual encrypted backups may persist briefly as part of normal disaster recovery.

khoshra uses local storage on your device to keep you signed in and to remember your offline entries until they sync. We do not use advertising cookies or tracking pixels. You can clear local storage from your browser settings, which will sign you out.

Depending on where you live (including under the GDPR and similar laws), you may have the right to:

• Access the personal data we hold about you.
• Correct data that is wrong.
• Delete your account and the data linked to it.
• Object to or restrict certain processing.
• Receive a copy of your data in a portable format.

To exercise any of these, write to us at the address below and we’ll respond within a reasonable time.

khoshra is intended for personal journaling by adults and is not directed at children under 16. We do not knowingly collect data from anyone under 16. If you believe a minor has created an account, please contact us and we will remove it.

We may update this policy as khoshra grows. When we do, we’ll change the “Last updated” date at the top and, for material changes, note it in the app. Continued use after a change means you accept the updated policy.

Questions about your data or this policy? Email hello@khoshra.online and we’ll help. You can also read the Terms of Service.