This Privacy Policy explains how the Bladder Journal app ("the App"), developed by JheroCode ("we", "us" or "our"), handles your information: what stays on your device, what leaves it and why, who receives it, and the choices you have.

The short version

  • Your diary is stored on your device, and in your own private iCloud if you turn on sync. We cannot see it.
  • Audio Analysis runs entirely on your iPhone. No recording is stored or sent anywhere.
  • The optional PRO AI features (Deep Insights, Smart Alerts and AI Chat) send the diary data they need to our server and an AI service provider to produce their results. Nothing is sent unless you use them.
  • We collect usage analytics that contain no health data.
  • We do not sell your data, and we never use your health data for advertising.

1. Information stored on your device

  • Diary entries: urination (time, volume, duration, urgency, stream, pain, color), drinks (type and amount), leaks (severity and pad changes), night-time flags, and any notes you write. This is health data.
  • Profile and settings: anything you choose to tell the App about yourself, your hydration goal, reminders, sleep period, units, theme and security settings (passcode, Face ID or Touch ID).
  • AI Chat history, if you use AI Chat.

This information stays on your device unless you turn on iCloud sync or use a feature described below that sends it.

2. Apple Health (optional)

  • With your permission, the App reads water intake, bladder-related events, sleep and workouts from Apple Health, and writes water intake and bladder-related events to it. You can change these permissions at any time in the Health app or in iOS Settings.
  • Health data leaves your device only as part of the AI features in section 5: sleep data for Deep Insights and AI Chat, and workouts you have linked to diary entries for Smart Alerts. It is never used for analytics or advertising.

3. Calendar (optional, for Smart Alerts)

  • Calendar access is off by default. If you allow it, Smart Alerts reads only the calendars you choose, and only when upcoming events start and end and whether they last all day, so alerts can take your busy times into account.
  • Event titles are read only if you separately turn that on, which is also off by default. If you do, titles are sent with Smart Alerts requests and may appear in our server logs (see section 5).

4. iCloud sync (optional)

If you turn on iCloud sync, your diary is stored in your own private iCloud database using Apple's CloudKit, so it stays consistent across your devices. We cannot access this data. If you turn sync off, your data stays on your device.

5. PRO AI features: Deep Insights, Smart Alerts and AI Chat

These features are optional and part of PRO. Only when you use one does the App send the following:

  • Deep Insights: your recent diary entries (including notes), your profile, goals and sleep period, and sleep data from Apple Health if connected.
  • Smart Alerts: your recent diary entries (including notes), workouts linked to them, your profile, goals and alert settings, and your calendar availability if you have allowed it.
  • AI Chat: your question, the diary entries from the date range you choose (including notes), your profile and sleep period, and sleep data from Apple Health if connected. Your chat history is kept on your device (and in your iCloud if sync is on), not on our servers.
  • With every request: your language, units, app version, and the current date, time and time zone.

How this data is handled:

  • It is sent encrypted (HTTPS) to our server, hosted by Google Cloud in the United States, which passes it to an AI service provider acting on our behalf (OpenAI, Google or Anthropic), also in the United States, and returns the result to your device.
  • Requests contain no name, email address, account or device identifier. AI Chat uses a random conversation identifier created on your device so that a conversation can continue. Diary entries in a request may carry random identifiers created on your device; they are not linked to you, your account or your device.
  • We do not store your diary content on our servers. Our server keeps operational logs, such as request counts and error messages, to run the service; these can include technical data such as IP addresses. If you have turned on calendar event titles, those titles and the resulting alert titles may appear in these logs.
  • The AI service provider may keep requests and responses for a limited period, currently up to 30 days, to provide the service (for example, to continue a chat) and to monitor for abuse. Under its terms for business customers, it does not use this data to train its models.

6. Audio Analysis

  • The App uses your microphone only while a urination timer that you started is running.
  • Audio is analyzed entirely on your device to estimate volume. No recording is stored on your device or sent to any server; the audio is discarded as soon as it has been analyzed.

7. Streaks

To show where your streak ranks among other users, the App stores a record on our server (Google Cloud): a random identifier created on your device, your streak count and when it was last updated. It contains no health data and is not linked to your name, email address or account. Updates to it may appear in our server logs, which are kept for up to 30 days.

8. Analytics and diagnostics

  • PostHog (product analytics, United States): usage events, such as when the App opens, which tabs and features are used, and progress through onboarding. They are linked to a random identifier, not to your name, email address or account, and contain no health data, diary content or onboarding answers.
  • Apple: if you choose to share analytics with app developers in iOS Settings, Apple provides us with crash reports and diagnostics.

We use this information to fix problems and improve the App.

9. Purchases

PRO subscriptions are bought, renewed and cancelled through your Apple ID. Apple confirms your purchase to the App so that PRO features unlock. Apple also sends your subscription transactions, such as the product, price and renewal status, to RevenueCat (United States), which we use to manage subscriptions. We never receive your payment details.

10. Support

If you contact us through our support form, which is provided by Typeform, or by email, we receive what you choose to send and use it only to answer you.

11. Who receives data

We do not sell your data. Data is shared only with these providers, for the purposes described above:

  • Google (Google Cloud): our server for the AI features and the streak ranking.
  • An AI service provider (OpenAI, Google or Anthropic): to generate Deep Insights, Smart Alerts and AI Chat responses.
  • PostHog: product analytics.
  • RevenueCat: subscription management.
  • Apple: iCloud sync, Apple Health and App Store purchases, under Apple's own privacy policy.
  • Typeform: our support form.

We may also disclose information when required by law.

12. International transfers

Some of these providers process data in the United States. Where data protection law requires it, these transfers rely on safeguards set out in each provider's data processing terms, such as the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework.

13. How long data is kept

  • On your device and in your iCloud: until you delete it.
  • AI service provider: for a limited period, currently up to 30 days.
  • Our server logs: for a limited period, up to 30 days.
  • Streak record: as long as needed to show the streak ranking.
  • Analytics: only as long as needed to fix problems and improve the App, within PostHog's retention settings.
  • Subscription records (RevenueCat): as long as needed to manage your subscription and meet legal obligations.

14. Legal bases (EEA, UK and Switzerland)

  • Apple Health, calendar access and iCloud sync: your consent, including explicit consent for health data (GDPR Art. 6(1)(a) and 9(2)(a)), which you give by turning the feature on and can withdraw at any time by turning it off.
  • The AI features: your explicit consent (GDPR Art. 6(1)(a) and 9(2)(a)). AI features only send data with your consent. The App asks for it on a permission screen that explains what is sent and to which providers; you can also give it by turning Deep Insights or Smart Alerts on, and AI Chat sends data only when you use it. You can stop at any time: turn Deep Insights and Smart Alerts off in Settings, and AI Chat sends nothing unless you use it.
  • Purchases and support: performance of our agreement with you (Art. 6(1)(b)).
  • Analytics, diagnostics and the streak ranking: our legitimate interest in keeping the App working, improving it and running the ranking (Art. 6(1)(f)). You can object at any time by turning off Share Anonymous Usage Data in the App's Settings, under About > Privacy Policy; while it's off, no usage events are sent.

15. Your rights and choices

  • In the App: view, edit, export (PDF or CSV) or delete your entries, or delete all data in Settings. Deleting the App removes data stored on the device; manage iCloud data through the App while sync is on, or in your iCloud settings.
  • Permissions: turn Apple Health, calendar access, event titles and iCloud sync on or off at any time.
  • AI features: optional. If you do not use them, your diary is not sent anywhere. They only send data with your consent; you can turn Deep Insights and Smart Alerts off at any time in Settings, and AI Chat sends nothing unless you use it.
  • Your data protection rights: depending on where you live, you may have the right to access, correct, delete, restrict or port your data, to object to processing, and to complain to a data protection authority. Because we do not ask for your name or email address, we may need your help to identify data linked to a random identifier. Contact us at the address below.

16. Children

The App is not intended for children under 16, or the minimum age required where you live. We do not knowingly collect personal information from children, and we will delete it if we learn that we have.

17. Changes to this policy

We may update this policy. We will post changes here and update the date at the top.

18. Contact

JheroCode, c/o Cloud in the Sky Studios, 384 Bank St., Suite 201, Ottawa, ON K2P 1Y4, Canada
[email protected]

19. Disclaimer

Bladder Journal is a self-tracking tool. It is not a medical device and does not provide medical advice, diagnosis or treatment. Always consult a qualified healthcare provider about any health concern.