Effective date: 2026-09-21
Between Days is developed and operated by Ruxue Gou (苟儒雪), an independent developer based in China. In this policy, “I,” “me” and “my” refer to that developer. For privacy questions or requests, contact support@betweendays.net.
The short version
- Your journal stays on your device by default. There is no Between Days account or developer-operated journal server.
- iCloud sync is optional. Turning it on sends the saved content you authorize to your private iCloud database.
- The app has no advertising, tracking or third-party analytics SDKs. AI features and AI requests are disabled in this release.
- Reminders can show a preview of a record. Your iPhone notification settings control lock-screen previews.
- Exported ZIP files are readable and unencrypted. You choose where to save or share them.
- Support email and visits to this website involve separate processing, explained below.
Records and settings on your device
The app stores the moments you save, including text, dates, photos, voice recordings, any transcripts and tags. It also stores local reminders, unfinished text drafts, app preferences, your home name and companion settings. Historical moods and previously confirmed action items remain saved when upgrading from earlier versions, even though their creation tools are unavailable in this release.
Stories stores the things you choose to follow over time: titles, intentions, text/photo/voice updates, optional measurements, milestones, comparison selections and your own reflections. Stories content is separate from Moments. The app does not generate these reflections or infer progress with AI.
Journal records and saved media are encrypted locally. Encryption keys and any AI credentials retained from earlier test versions are kept in the device Keychain. Keys are not included in readable exports. App Lock uses device authentication to restrict access to the app; it does not protect copies exported elsewhere.
Statistics and local companion responses are calculated on the device. They are not sent to a developer analytics service. Text drafts are saved locally; unsaved Stories photos and recordings remain only for the current app session.
Optional iCloud sync
iCloud sync is off by default. After you enable it and confirm the scope, saved moments, photos, recordings, transcripts, tags and previously confirmed action items can synchronize through Apple's CloudKit private database associated with your Apple Account. Stories, their updates, media, milestones and reflections are also included.
If an earlier version had permission to sync only Moments, sync pauses until you approve the expanded scope. Update your participating devices before enabling it again. Local reminders, unfinished drafts, API keys and device preferences do not sync through this feature.
The app synchronizes while open and unlocked. Apple operates iCloud under its own terms and privacy information. I do not operate the sync server or have app-provided access to read your private CloudKit database.
Local encryption and iCloud protection are separate. Apple encrypts iCloud data; end-to-end protection for the encrypted CloudKit fields and assets used by Between Days depends on Advanced Data Protection being available and enabled for your Apple Account. See Apple's iCloud data security overview.
Turning sync off stops synchronization but keeps existing local and cloud copies. Turning it on again can apply changes and deletions made while it was off. Sync is not a separate backup.
Permissions, transcription and reminders
Camera, photo-library, microphone, speech-recognition and notification permissions are requested when needed for the features you choose. You can review permissions in iPhone Settings. Photos or recordings you save become part of your journal and follow your export and sync choices.
Speech transcription uses on-device recognition when supported by your device and language. The app does not fall back to cloud transcription when on-device recognition is unavailable.
Reminders are iOS local notifications. Their previews may contain an excerpt of your record or transcript, or a description of its media. These previews can appear on the lock screen according to your iPhone settings. To limit visibility, review iPhone Settings → Notifications → Between Days → Show Previews, or turn off notifications. Tapping a reminder opens the original record, subject to App Lock when enabled. Notifications are not a developer-operated push service.
AI and earlier test versions
This release does not provide AI chat, AI settings, connection checks or action-item extraction. The app makes no AI requests, including when an earlier version saved a provider configuration or consent. Cat interactions do not send your writing to an AI service.
An update preserves earlier configurations, Keychain credentials and confirmed action items. Those credentials are not used for requests in this release, and the former key-management screen is unavailable. Disabling AI cannot recall material you previously sent to a provider; requests about that provider's retained copies should be directed to it. Any future AI release requires updated disclosures before it becomes available.
Exporting and deleting content
Settings → Data & storage → Export moments creates an unencrypted ZIP after confirmation. It includes Moments, saved Stories (including archives), updates, milestones, reflections, tags and original media; unfinished drafts are excluded. The export is for reading outside the app and cannot be imported through the current app interface.
The iOS share sheet lets you choose the destination. That destination handles its copy under its own terms. Temporary export files are cleaned up after sharing and during startup cleanup. Copies you save or send elsewhere remain under your or the recipient's control.
Deleting an individual moment removes it from the active journal, subject to the brief undo opportunity shown in the app. Delete all moments removes Moments currently stored on this iPhone and their attachments, tags, drafts and reminders. It keeps preferences, stored API keys and purchases, and does not delete Stories.
Stories has separate permanent-delete actions. Deleting a story also deletes its updates and milestones; there is no undo after confirmation. Archiving keeps the story and its content. Deletions can propagate when iCloud sync is enabled now or later.
Delete all moments does not erase every record in your iCloud account: records not yet downloaded to this device are outside that local operation. Sync may retain deletion markers to prevent deleted records returning. Apple controls retention within its infrastructure. Deleting content in the app does not delete external exports or copies previously sent to an AI provider. Do not uninstall the app as a way to erase cloud copies.
Purchases and Apple platform information
Apple handles App Store payments. Between Days uses StoreKit to check entitlements and keeps the resulting access state locally. I do not receive your full payment-card details or operate a payment-account backend.
The app includes no third-party crash-reporting SDK. Depending on Apple's services and your settings, Apple may provide sales reports, diagnostics or TestFlight feedback to me. These are separate from an app-operated journal upload. See Apple's App Store privacy information.
When you contact support
I receive the email address, message and attachments you choose to send. I use this information to answer you, investigate problems, handle privacy requests and keep necessary support records. Please send a short description or redacted example, not passwords, API keys or a journal export. Email is optional and is not required to use the app.
Support email is handled using Spacemail by Spaceship. Support information may be processed in the United States, as described in Spaceship's privacy policy, as well as China, where I handle support requests. See Spaceship's privacy policy for its processing and transfer practices.
Retention: I delete support emails, attachments and other support copies I control within 12 months after the request is resolved. Where a longer period is required by law, I retain only the necessary records for that purpose. This period applies to copies under my control; the email provider operates its own backup systems.
Spacemail scans ordinary email for spam and other threats and may use external security processors, including OpenAI, under its service terms. Its terms describe daily server backups retained for up to four weeks. See the Spacemail terms for its security processing and backups. These email-service practices are separate from the app, which has no AI requests in this release.
When you visit this website
The website at https://betweendays.net uses Cloudflare Pages to deliver these pages and help protect them. Network information such as IP address, requested URL, browser information and request time is processed for delivery, reliability and security. Opening a legal or help page does not send your journal to this site.
The website does not include advertising, analytics beacons, contact forms, third-party fonts or embedded social content. I do not use cookies or local storage for advertising or analytics. Cloudflare may process security data or use necessary security cookies when protections apply. See Cloudflare's privacy policy.
Website and security-log retention: I do not keep a separate archive of routine website visitor logs. Cloudflare retains network and security information according to the services used and for as long as needed for its stated processing purposes and legal obligations. Its retention periods are governed by its policies and service terms; this website does not promise a single deletion deadline for all Cloudflare records. Cloudflare operates a global network, so network data may be processed outside the country where you live. Support processing locations are listed above; Apple's independent processing is described in its own privacy information.
Your choices and privacy rights
You can leave iCloud off, turn it off later, change iOS permissions and notification previews, export your records, or delete content using the controls described above. Withdrawing a permission does not recall copies already exported or affect processing that lawfully happened before withdrawal.
For information I hold through support or this website, contact support@betweendays.net. Depending on applicable law, you may have rights to access, correct, delete or receive a copy of your information, object to or restrict processing, withdraw consent, or complain to a privacy regulator. I may need proportionate information to verify a request; do not send identity documents unless specifically needed and a suitable method is agreed. I will respond within the period required by applicable law.
Where a lawful basis is required, support processing is used to respond to a request and provide the service, protect legitimate interests in resolving issues and securing the website, or meet legal obligations. Optional processing that requires consent depends on that consent. Required information and safeguards for a particular market will be provided where applicable; these terms do not waive mandatory privacy or consumer rights.
I cannot retrieve or erase your private journal remotely. Requests concerning Apple's or another provider's independent processing should also be directed to that provider. If you are a parent or guardian and believe a child has sent me personal information through support, contact me to discuss removal. The app's store age rating is not a statement about the age of consent under privacy law.
Changes to this policy
The effective date identifies the published version. If data practices change materially, I will update this policy and provide additional notice or seek consent where required. Privacy questions and complaints can be sent to support@betweendays.net.