Privacy Policy

Last updated: September 14, 2026

Green Journal LLC (GREEN JOURNAL LTD. LIABILITY CO., “Green Journal”, “we”, “our”, or “us”) operates the Green Journal app and this website. We are responsible for the personal information described in this policy. Contact us at darren@greenjournalapp.com with questions or privacy requests.

Green Journal connects personal journaling, products, stash, sessions, places, activity tracking, and optional community features. The information processed depends on the features you use, the permissions you grant, and what you choose to share. Private account records are different from content you publish to other people.

1. Information we handle

Account and profile. We process your email address, account identifier, sign-in credentials through our authentication service, username, profile information, age, country or region, and postal code where provided. These support account access, age eligibility, profile features, and regional functionality. If you contact us, we receive the contact details and information in your message.

Journal, products, stash, and sessions. Information may include product and strain names, brands, purchase locations and prices, receipts, quantities, storage details, dates, ratings, moods, effects, notes, photographs, and session method, amount, and timing. Labels, laboratory reports, COAs, and QR codes can supply product and batch information. This content may reveal sensitive information about your health, habits, or cannabis use.

Scans, voice input, and AI requests. When you use assisted features, we process the images, text, voice transcripts, document information, questions, and relevant journal context needed for the request. For example, Herbie can receive recent journal context together with your question, and receipt or flower analysis can send an image to an AI provider. Content you include in these requests may contain personal or sensitive information. Review what you provide and avoid including unnecessary information about yourself or others.

Health and fitness, with permission. Supported features use Apple Health/HealthKit for information such as heart rate and workouts. Heart-rate readings may be attached to check-ins and stored with your account records. Run information can include time, distance, pace, and route points; supported Watch workouts can be saved to Apple Health. Information displayed in widgets, Live Activities, or on Apple Watch may be visible to someone who can see your device. Manage Health permissions and device privacy settings through Apple’s controls.

Location and Tap In. With location permission, we use your location for nearby places, maps, Tap In visits, and route tracking. A recorded run can continue collecting route information in the background while tracking is active. Saved visits, place coordinates, timestamps, and routes may be stored with your account. Place activity can also contribute to aggregate activity information. Sharing a run or visit can reveal locations you have visited.

Community, messages, and rooms. We process the profile details, posts, shared entries, comments, reactions, messages, invitations, connections, room participation, and reports you create. Live voice and video features transmit microphone or camera content when you enable them. Other participants receive the content you share with them. Connection and participation information is also needed to operate and secure rooms.

Purchases and service information. Apple and RevenueCat process subscription and entitlement information, which can include account identifiers, transaction details, product identifiers, purchase dates, renewal status, and subscription events. Apple handles App Store payment details; we do not receive your full payment-card details from those purchases. Device information, push-notification tokens, timestamps, usage events, errors, and connection information may be processed for delivery, support, security, subscription analytics, and reliability. These records are not necessarily anonymous.

2. How we use information

We use information to create and secure accounts; save and synchronise records; provide scans, AI assistance, personal patterns, location, fitness, and community features; deliver notifications; manage subscriptions; respond to support and privacy requests; investigate abuse and technical problems; and meet legal obligations. Personal insights are based on your records, and are not medical diagnoses or guaranteed outcomes.

The current iOS build disables Google Analytics for Firebase collection. This does not disable authentication, cloud storage, operational logging, subscription analytics, or website services. We do not use HealthKit information for advertising.

3. Service providers and external services

Providers process information needed for their roles; they do not all receive every category of your data.

Google Firebase: account authentication, Firestore database records, uploaded files, notifications, and backend operations. Firebase privacy information.
OpenAI: AI requests, including relevant text, journal context, images, and imported information for the feature you use. Provider processing and retention depend on the API and account settings; AI requests should not be treated as remaining only on your device. OpenAI API data controls.
RevenueCat and Apple: App Store purchases, subscription status, entitlement management, and related transaction information. RevenueCat privacy policy and Apple privacy policy.
LiveKit: connection, participant, and live media processing for voice and video rooms. LiveKit privacy policy.
Apple services: maps and place searches, HealthKit, Watch connectivity, notifications, and supported speech or device features, according to the features and permissions you use.
Squarespace: website hosting, site traffic information, cookies, and information submitted through website forms. Squarespace privacy policy.

Opening external links, including a COA or retailer website, may send your IP address and browser information to that site. Its own privacy practices apply. Our use of service providers does not remove our responsibility for information we control.

Journal entries are private by default. Content you publish or share is visible to its selected audience, which may include other members or the public. Profiles, community contributions, room participation, and shared routes can expose information beyond your private journal. Review each feature’s visibility controls before sharing. Recipients may keep copies of information you send them.

We may disclose information to service providers for the purposes above, to recipients you choose, and when reasonably necessary to comply with law, respond to lawful requests, prevent fraud or abuse, or protect users and the service. If the business is transferred, personal information may be included subject to applicable law and appropriate notice. Aggregate information should not be assumed to be anonymous merely because a name is omitted.

5. Website cookies

Squarespace processes technical information such as IP address, browser and device information, referring pages, and page activity when you visit this website. Cookies and similar technologies may support site operation, security, preferences, and analytics. You can manage cookies through your browser and any cookie controls presented by the website. Blocking cookies may affect some functions. See Squarespace’s cookie policy for more information.

6. Retention, deletion, and security

Account and journal records are generally retained while you use the service so that your history remains available. Deleting the app or signing out does not itself delete cloud records. Retention of support, transaction, security, and operational records depends on their purpose, applicable legal requirements, and the need to resolve disputes or investigate abuse. Copies held by providers, recipients, or backups may have different deletion schedules.

You can use available in-app controls to delete individual records or initiate account deletion. For a request covering all associated personal information, or if a deletion control does not work, contact darren@greenjournalapp.com. We may need to verify your identity. We will explain any information we must retain and respond as required by applicable law. Do not assume that account closure immediately removes every associated record or copies already shared with others. Cancelling an Apple subscription is separate from deleting a Green Journal account.

We use access controls and other safeguards to protect information, but no system is completely secure. We will assess security incidents and provide notices where required by law. Keep your device and account secure and consider what may appear on its lock screen.

7. Your choices and privacy rights

You can choose what to enter, whether to use AI assistance, and what to publish. You can revoke location, microphone, camera, speech, notification, and Health permissions in the relevant device settings. Revoking a permission stops future access subject to the platform’s controls; it does not automatically erase previously saved records. Some features cannot operate without the information or permission they require.

Depending on where you live and applicable law, you may request access, correction, deletion, a copy or portable version of your information, or restriction of or objection to certain processing. Where processing depends on consent, you may withdraw it without affecting earlier lawful processing. Contact us to exercise rights or ask how information is handled; we may request information needed to verify and fulfil your request. You may complain to your local data-protection authority, including the UK Information Commissioner’s Office where applicable.

Where UK or EEA data-protection law applies, we rely on providing the services you request, our legitimate interests in operating and protecting them, legal obligations, and consent where required. Sensitive information requires an additional lawful condition where applicable. We do not treat acceptance of this policy as blanket consent to every use of sensitive information.

8. International processing and age limits

Our providers may process information in the United States and other countries, whose laws may differ from those where you live. Where required by law, international transfers must use appropriate safeguards. Contact us for information about the arrangements relevant to your data.

Green Journal is intended for adults aged 18 or older, or a higher applicable local age. It is not directed at children. If you believe a child has provided personal information, contact us so we can investigate and address it.

9. Policy updates

We may revise this policy as features or practices change. We will update the date and provide additional notice or seek consent where required. Posting an update does not by itself authorise a new use that requires your consent.

10. Contact

Privacy questions and requests: darren@greenjournalapp.com.