Privacy Policy
This page explains how mamama, inc. ("we") handles information in the iPhone app Omakase Journal ("the app") and on this website. Your diary and location records are kept on your iPhone. Everything that does leave your iPhone is listed in section 2.
1. Where are my diary and records stored?
The following are stored only on your iPhone. We do not store them on our servers.
- Diary entries and drafts, your conversations with Yoru, and your answers
- Moments and the feelings you attach to them
- Location history (places you stopped at and points of significant movement, with times) and a cache of place names
- A cache of details read from your photos (a description of what is in the photo, visible text, place, and how the photo was made). The app does not make copies of the photos themselves
- Results of "Let Yoru listen all day" (per-minute counts of sound types, a rough location, and topic keywords) and a log of how your battery drains. Audio and transcripts are never saved
- Daily summaries received from ChatGPT, if you connect it
- Clues you removed with "Not right," recap notes, settings, and a record of your consent to external AI (date and version of the text)
- An anonymous identifier for this iPhone: a random number created at first launch and kept in the Keychain. It is used for rate limiting at the AI relay server and to tie the ChatGPT connection to your device
- The start date of your free period, kept in the Keychain and also in iCloud (see 2.4)
Health data such as steps, sleep and workouts is read from Health each time you do an interview and is not stored by the app.
The app does not currently sync your diary across devices. If you back up your iPhone (for example with iCloud Backup), the app's data may be included in that backup. Backups are an Apple service and we are not involved.
2. Does any information leave my iPhone?
Yes, in four cases.
2.1 When an external AI writes questions and drafts
On iPhones without Apple Intelligence, and only if you agree, the app asks an external AI service to write questions and drafts. It sends:
- A summary of the day's clues: event titles, names of places you stopped at, descriptions of what is in your photos, step counts, and so on. This includes clues made from "Let Yoru listen all day" (for example, "a lot of laughter around 7:30 pm" or "topic: moving")
- Your answers during the interview
- Your diary drafts
- When writing a recap note (weekly, monthly, quarterly or yearly), the titles, places, feelings and your own words from that period
- Downscaled photos, or a few frames cut from a video, only while "Let AI look at photos" is on (it is on from the start once you agree). You can turn it off at any time
Precise location (latitude and longitude) is not sent.
Data goes through a relay server that we run (Cloudflare Workers) to a provider of a large language model (LLM) API. The possible providers are OpenAI (United States), Anthropic and Google. We currently use OpenAI. The providers are located outside Japan.
The relay server does not store what it receives and does not log it. Only operational records remain, such as the status code and the processing time. To limit request rates it uses the anonymous identifier and the connecting IP address. Because the relay runs on Cloudflare, connection information such as IP addresses is also processed by Cloudflare.
The providers do not use data received through their APIs to train their models. To prevent abuse, a provider may keep it for a limited period.
We ask for your consent the first time an external AI is needed. If you decline, you can still use the app without AI. You can withdraw consent at any time in Settings under "Sending to external AI," and nothing is sent after that.
2.2 iPhones with Apple Intelligence
Questions and drafts are written by Apple's on-device model on your iPhone. Photo descriptions are also made on the device, and your photos do not leave your iPhone. When a request is too large for the device, Apple may use Private Cloud Compute. That is handled under Apple's privacy policy and does not pass through our servers.
2.3 When you connect ChatGPT (optional)
If you connect your own ChatGPT under "Connect ChatGPT" in Settings, a short summary of what you talked about in ChatGPT that day can become a clue. Nothing happens until you connect it.
- To connect, the app gets a six-digit code (valid for 10 minutes) and shows it, and you enter it on the ChatGPT side. To recognize your device, we store a hashed (SHA-256) value of the device's anonymous identifier on our server. We do not store the identifier itself
- All the app asks ChatGPT for is "send me the summary for this day." It does not send your diary. These requests (a date and a language) are deleted after 48 hours
- The daily summaries ChatGPT sends (text and topics) are kept on our server (Cloudflare D1) until the app picks them up. Once the app has received a summary, it is deleted from the server. A summary that is never picked up is deleted within 72 hours
- The information needed for the connection (authorization tokens and the notification address ChatGPT specifies) is also kept on our server (Cloudflare KV and D1) while the connection is active
- When you disconnect, all of this is deleted. If you disconnect from the app, you can also choose to delete the summaries saved on your iPhone
We never receive your ChatGPT conversations themselves, only what ChatGPT sends as a summary. How conversations are handled on the ChatGPT side follows OpenAI's terms and your ChatGPT settings.
2.4 Apple services
- App Store: used to check purchases and subscription status (StoreKit). We do not receive payment details such as card numbers.
- iCloud: the start date of your free period is also recorded in iCloud's key-value store (a small storage area shared across your devices), so that reinstalling the app does not restart the free period. Your diary is not stored in iCloud.
- MapKit: to look up the names of places you stopped at or took photos, the coordinates of those points are sent to Apple's map service, which is covered by Apple's privacy policy.
Speech recognition for voice answers, sound classification and photo analysis are done on your iPhone.
3. Are there ads or tracking?
No. Neither the app nor this website shows ads, and the app does not use the advertising identifier (IDFA). It contains no third-party analytics or crash-reporting SDKs. We do not sell your information or give it to third parties for advertising. Except where required by law, we do not provide it to third parties without your consent.
If you allow sharing of app analytics through Apple's settings, anonymous statistics may reach us through Apple. They cannot identify you.
4. What permissions does the app ask for?
Permissions are requested on the iOS screen when a feature needs them. The app works without any of them, with fewer clues. You can change them at any time in the iOS Settings app.
| Photos | To see what is in the photos and videos you took that day, and use that as a clue. On iPhones with Apple Intelligence this is done on the device. Otherwise, only if you agree, downscaled photos are sent to an external AI (2.1). |
|---|---|
| Calendar | To use the titles and times of that day's events as clues. iOS calls this "full access," but the app uses only titles and times. |
| Location ("Always") | To record places you stopped at and significant movement even while the app is closed, for the diary map and as clues. Records are stored on your iPhone. "While Using" also works, but the app cannot record while it is closed. |
| Health | To read that day's steps, sleep and workouts. The app does not write to Health and does not store what it reads. |
| Microphone and speech recognition | For turning your voice answers into text, and for "Let Yoru listen all day." Speech recognition runs on the device and audio is not saved. |
| Notifications | For Yoru's evening nudge, recap reminders, the reminder one day before your free period ends, and the morning prompt for "Let Yoru listen all day." |
5. What happens with "Let Yoru listen all day"?
This is a beta feature. It runs only if you turn it on in Settings and start it yourself. The first time you turn it on, an explanation screen asks for your consent.
- While it is listening, iOS shows the microphone indicator at the top of the screen. A Live Activity on the Lock Screen and in the Dynamic Island shows that Yoru is listening, and you can stop it from there.
- Sounds around you are analyzed on your iPhone and discarded right away. Nothing is recorded and no transcript is saved. What is kept is only the kinds of sounds (laughter, music, trains and so on), times, and a rough location (about 1 km square).
- With "Detailed," speech is turned into text on your iPhone only while people keep talking, and only topic keywords are kept. Sentences are not kept.
- The results are stored only on your iPhone. However, the clues made from them (for example, "a lot of laughter around 7:30 pm") are sent along with other clues when an external AI is in use (2.1).
- It can hear other people's voices too. Please stop it in places where recording or listening is unwelcome, such as meetings, hospitals or other people's homes, and follow the laws of your country or region and the rules of the place.
- It uses battery. It pauses automatically when the battery is below 30%, in Low Power Mode, and during your sleep hours.
6. How do I delete my data?
- Diary, location and listening records: In Settings under "Data," choose "Delete all journal entries and location history." This deletes your entries, location history, caches of place names and photo details, the results of "Let Yoru listen all day," clues you removed, and recap notes, all at once. It cannot be undone. Settings and consent records remain.
- ChatGPT connection: Disconnecting on the "Connect ChatGPT" screen deletes the connection information, requests and summaries on our server. Choosing "Disconnect and delete received summaries" also deletes the summaries saved on your iPhone.
- Content sent to an external AI: We do not store it, so there is nothing for us to delete. Withdrawing consent stops anything further from being sent.
- When you delete the app: Data on your iPhone is removed. The free-period start date and the anonymous identifier may remain in the Keychain or iCloud, so that the free period does not restart and so that the ChatGPT connection works after a reinstall. They contain no diary content.
For any other deletion, or to ask for disclosure or correction of information we hold, please write to us at the contact address.
7. Is it for children?
The app is not directed to children under 13, and we do not knowingly collect personal information from them. If you are a parent or guardian and notice that your child has used the app, please contact us.
8. About this website
We use Cloudflare to serve this website. To deliver and protect the site and investigate problems, Cloudflare processes IP addresses, access times and the pages requested. See Cloudflare's privacy policy. This site has no ad tags, no analytics, and no cookies.
9. When this policy changes
When we change it, we will update this page and its effective date. For major changes, such as a change to what is sent to an external AI, we will also tell you in the app and, where needed, ask for your consent again.
10. Contact
mamama, inc. (マママ株式会社)
Email: rihito@mamama.company
For questions about using the app, see also Support.