Effective date: August 25, 2026
at8pm is built to hold your private journal — so this policy is short, because there isn't much for us to collect. at8pm has no company servers, no user accounts, and no analytics or tracking SDKs. Here's exactly what exists and where it lives.
Text, photos, voice notes, and location tags you add to entries are stored on your device and synced only through your own private iCloud account, using Apple's CloudKit. We do not operate a backend that stores or has access to your journal content — Apple encrypts and syncs it the same way any of your other private iCloud data does. Deleting the app or your iCloud data removes your entries from sync.
App lock uses Apple's on-device LocalAuthentication (Face ID). Biometric data is processed entirely by iOS and never reaches at8pm, us, or any third party.
Microphone access is used only when you choose to record a voice note for an entry. Recordings are stored the same way as the rest of your journal content — locally and via your private iCloud — and are never uploaded to us.
When you add a photo to an entry, you pick it yourself through Apple's system photo picker. That picker runs outside the app, so at8pm only ever receives the specific photo you select — it doesn't get browsing access to the rest of your photo library. Separately, at8pm requests add-only photo library permission, used solely to save a shared entry card to your photos when you choose to share one.
The location field in an entry is a free-text field you type into yourself. at8pm does not request location-services permission and does not track your location in the background.
Subscriptions (at8pm Pro) and consumable unlock packs are processed by Apple's App Store and by RevenueCat, our subscription infrastructure provider. RevenueCat receives purchase and transaction data needed to validate your entitlement — it does not receive your journal content. See RevenueCat's privacy policy for details on their handling of purchase data.
Sharing an entry as a card to Instagram Stories is something you initiate yourself, using iOS's standard share handoff. No entry data is sent anywhere unless you tap share.
at8pm is not directed at children under 13, and we do not knowingly collect data from children under 13.
Because your journal lives on your device and in your own iCloud, you control it directly: delete an entry before it locks, delete the app to remove local data, or manage/delete at8pm's iCloud data from your device's iCloud settings. There's no account for us to delete, since we never had one.
If this policy changes, we'll update the effective date above. Material changes will be reflected here before they take effect.
Questions about privacy? Reach us at hello@at8pm.today.