Your journal. Nobody else's.
AES-256 encryption at rest. TLS 1.3 in transit. Your entries are never sold
to advertisers or data brokers, and never shared. Private by design.
No credit card required
How we protect your words
Privacy isn't a feature toggle. It's the architecture.
AES-256 encryption at rest
Your journal entries are encrypted using AES-256, the same encryption standard used by banks and governments. Even if someone accessed the database directly, your entries would be unreadable.
TLS 1.3 in transit
Every connection between your device and Dayora is encrypted with TLS 1.3. Your entries cannot be intercepted or read in transit -- on any network, including public Wi-Fi.
Where your entries go
Your entries are sent to OpenAI to generate your insights, and under our agreement with OpenAI that content can also be used to train and improve OpenAI's models. We don't train a model of our own on your writing and we never sell it. Section 2.1 of the privacy policy explains the arrangement.
No data selling, ever
We have no advertising partners, no data brokers, and no third-party analytics that access your entries. We don't monetize your data. There is no business model that depends on selling what you write.
How Dayora compares on privacy
Most journal apps are vague about what happens to your data. We're specific.
| Privacy measure | Dayora | Most apps |
|---|---|---|
| Encryption at rest (AES-256) | Varies | |
| TLS 1.3 in transit | ||
| No AI model training on data | ||
| No data selling | Unclear | |
| No advertising | ||
| No third-party data sharing | ||
| Account deletion removes all data | Varies | |
| Free without privacy tradeoffs |
Private doesn't mean limited
AI insights on every entry
Every entry gets a 3-part AI response: Summary, Insight, and Next Step. The AI processes your entry to generate personal insights without storing your data in any training pipeline.
Reflect chat stays between you and the AI
The Reflect feature lets you have a deeper conversation with the AI about your entries. These conversations are encrypted and private -- the same as your journal entries.
Delete everything, anytime
If you ever want to leave, you can delete your account and all data is permanently removed. No 30-day holds, no "we keep backups" fine print.
Frequently asked questions
Can Dayora employees read my journal?
Your entries are encrypted at rest with AES-256. We do not have a system for employees to browse user journals, and we have no reason to. Your entries exist to serve you, not us.
Does the AI store my entries for training?
Yes, by OpenAI. Your entries are processed to generate insights in real time, and under our data-sharing agreement OpenAI may also use that content to train and improve its models. Dayora does not fine-tune a model of its own on your entries.
What happens if I delete my account?
All your data is permanently deleted. Entries, mood data, conversations, account information -- everything. This is immediate and irreversible.
How is this free if you don't sell data?
Dayora is a passion project built by a small team. We keep costs low and prioritize building something genuinely useful. There is no business model that depends on your data.