How we handle your journal.

Where your data is stored

Your account and journal live on our servers in Singapore (DigitalOcean). Photos and files are stored on Cloudflare R2. Everything travels over HTTPS.

How AI analysis works

Nothing is sent to AI until you tap Analyse and agree to it. When you do, your recent entries go through OpenRouter (USA) to Anthropic's Claude, or OpenAI as a backup. That means they're processed outside Malaysia. They are not used to train AI models.

Changed your mind? Withdraw consent at Settings › Privacy & security › AI analysis consent.

Who can see what

• Your journal is private. It never appears in the community.
• Community posts are separate, and you can post anonymously.
• Personal insights such as birthday or MBTI are optional. They're only used to tailor your AI reflection.

Locking your journal

• A 6-digit passcode with fingerprint or face unlock.
• Auto-lock right away, or after 1 minute up to 5 hours.
• See your signed-in devices and sign any of them out.

Your data, your choice

• Request my data: a PDF and JSON copy of your profile, journals, AI reflections, tokens, posts and pet. One request per day.
• Delete account: your account and data are deleted after 30 days, apart from purchase records we need to keep. Log back in before then to restore it. Purchased tokens aren't refunded.
• Marketing emails: one switch in Settings › Notifications › Notifications › Email.

Community safety

Report a post, comment or person from its menu. People you block can't see your posts or follow you. We review every report.

Not a medical service

Sojiwa is a journal and a companion. It isn't therapy and it doesn't diagnose.