Between DaysA little space of your own.
HELP & INFORMATION

Privacy Policy

On this page

Effective date: 2026-09-29

Between Days is developed and operated by Ruxue Gou (苟儒雪), an independent developer based in China. In this policy, “I,” “me” and “my” refer to that developer. For privacy questions or requests, contact support@betweendays.net.

I am responsible for the support information I receive and the website processing I arrange. Apple operates its own platform services as described below. You do not need to send me your journal to use the app or exercise a privacy right.

The short version

Records and settings on your device

The app stores the moments you save, including text, dates, photos, voice recordings, any transcripts and tags. It also stores local reminders, unfinished text drafts, app preferences, your home name and companion settings. Historical moods and previously confirmed action items remain saved when upgrading from earlier versions, even though their creation tools are unavailable in this release.

Questions stores the prompts you keep or create and the question associated with each saved answer. Each answer is stored as a Moment with its text and media, and is shown in both Questions and Moments. Removing a question does not remove previously saved answers.

Stories is retired. If you used it in an earlier test version, its titles, intentions, updates, media, measurements, milestones, comparison selections and reflections remain stored for export and sync compatibility. Updating does not erase those records or automatically turn them into question answers.

Journal records and saved media are encrypted locally. Encryption keys and any AI credentials retained from earlier test versions are kept in the device Keychain. Keys are not included in readable exports. App Lock uses device authentication to restrict access to the app; it does not protect copies exported elsewhere.

An encrypted whole-device backup can include the local journal and the Keychain keys needed to restore it to another iPhone using the same Apple Account. This is separate from the app's optional iCloud sync. After updating from an earlier version, open Between Days on the old iPhone while it is unlocked before making a new backup, so existing journal keys can become restorable. Older backups may not contain transferable keys. Journal keys are not synchronized through iCloud Keychain; retained third-party AI credentials remain tied to the original device.

Statistics and local companion responses are calculated on the device. They are not sent to a developer analytics service. Text drafts are saved locally and excluded from readable exports and iCloud sync.

Saved journal records have no routine expiry while you keep them in the app. The deletion controls and their limits are described below. The end of a Plus trial or purchase access does not itself delete your records.

Optional iCloud sync

iCloud sync is off until you approve it for your Apple Account. After you enable it and confirm the scope, saved moments, photos, recordings, transcripts, tags and previously confirmed action items can synchronize through Apple's CloudKit private database associated with your Apple Account. Question definitions and the prompt attached to each answer are included. Retained Stories records, updates, media, milestones and reflections from earlier test versions remain compatible with this sync scope.

The app stores the approved sync-scope version in Apple's iCloud key-value storage. This preference contains no journal content or encryption keys. A new installation using the same Apple Account can automatically enable sync and download previously synced records after Apple delivers that preference. A choice you already made on that device, including turning sync off, takes precedence. Turning sync off also clears the account preference for future installations; a different sync scope requires your approval again. The app does not transfer your journal to a different Apple Account.

If an earlier version had permission for a scope that did not include Questions, sync pauses until you approve the updated scope. Update your participating devices before enabling it again. Local reminders, unfinished drafts, API keys and device preferences do not sync through this feature.

The app synchronizes while open and unlocked. Apple operates iCloud under its own terms and privacy information. I do not operate the sync server or have app-provided access to read your private CloudKit database.

Local encryption and iCloud protection are separate. Apple encrypts iCloud data; end-to-end protection for the encrypted CloudKit fields and assets used by Between Days depends on Advanced Data Protection being available and enabled for your Apple Account. See Apple's iCloud data security overview.

Turning sync off stops synchronization but keeps existing local and cloud copies. Turning it on again can apply changes and deletions made while it was off. Sync is not a separate backup.

Permissions, transcription and reminders

Camera, photo-library, microphone, speech-recognition and notification permissions are requested when needed for the features you choose. You can review permissions in iPhone Settings. Photos or recordings you save become part of your journal and follow your export and sync choices.

Speech transcription uses on-device recognition when supported by your device and language. The app does not fall back to cloud transcription when on-device recognition is unavailable.

Reminders are iOS local notifications. Their previews may contain an excerpt of your record or transcript, or a description of its media. These previews can appear on the lock screen according to your iPhone settings. To limit visibility, review iPhone Settings → Notifications → Between Days → Show Previews, or turn off notifications. Tapping a reminder opens the original record, subject to App Lock when enabled. Notifications are not a developer-operated push service.

AI and earlier test versions

This release does not provide AI chat, AI settings, connection checks or action-item extraction. The app makes no AI requests, including when an earlier version saved a provider configuration or consent. Cat interactions do not send your writing to an AI service.

An update preserves earlier configurations, Keychain credentials and confirmed action items. Those credentials are not used for requests in this release, and the former key-management screen is unavailable. Disabling AI cannot recall material you previously sent to a provider; requests about that provider's retained copies should be directed to it. Any future AI release requires updated disclosures before it becomes available.

Exporting and deleting content

Settings → Data & storage → Export moments prepares an unencrypted ZIP on this device after confirmation. It includes Moments, question definitions, saved answers, tags and original media; retained Stories data from earlier test versions is also included. You can continue using the app while it prepares the file, stop the export, or choose Share when it is ready. Unfinished drafts are excluded. The export is for reading outside the app and cannot be imported through the current app interface.

Memory books reads the records you select to generate a PDF on this device. The PDF can contain dates, question prompts, writing, photos, existing transcripts and recording details; it does not embed playable audio. PDFs are not password protected, and generating one does not upload your journal to a developer service.

The iOS share sheet lets you choose the destination for a ZIP or PDF, including saving, sharing or printing a PDF. That destination handles its copy under its own terms. Temporary ZIP exports are cleaned up after sharing and during startup cleanup. Temporary PDFs are discarded when their book session ends or is replaced. Copies you save or send elsewhere remain under your or the recipient's control.

Deleting an individual moment removes it from the active journal, subject to the brief undo opportunity shown in the app. Delete all moments removes Moments currently stored on this iPhone and their attachments, tags, locally stored question definitions, drafts and reminders. It keeps preferences, stored API keys and purchases, and does not delete legacy Stories records.

Removing a question keeps answers already saved in Moments. Delete the answers as moments to remove their content. This release has no Stories browsing or deletion screen; its retained legacy records remain available in readable exports. Deletions supported by the current app can propagate when iCloud sync is enabled now or later.

Delete all moments does not erase every record in your iCloud account: records not yet downloaded to this device are outside that local operation. Sync may retain deletion markers to prevent deleted records returning. Apple controls retention within its infrastructure. Deleting content in the app does not delete external exports or copies previously sent to an AI provider. Do not uninstall the app as a way to erase cloud copies.

Purchases and Apple platform information

Apple handles App Store payments. Between Days uses StoreKit to verify purchases and access, including the original trial transaction date needed to calculate seven-day access, and keeps the resulting access state locally. A trial is not started without your action and does not authorize an automatic charge. I do not receive your full payment-card details or operate a payment-account backend. Trial timing safeguards are stored and checked on your device; the app does not contact a developer-operated time service. Purchases, restoration and transaction updates use Apple’s services and may require an internet connection.

The app includes no third-party crash-reporting SDK. Depending on Apple's services and your settings, Apple may provide sales reports, diagnostics or TestFlight feedback to me. These are separate from an app-operated journal upload. See Apple's App Store privacy information.

When you contact support

I receive the email address, message and attachments you choose to send. I use this information to answer you, investigate problems, handle privacy requests and keep necessary support records. Please send a short description or redacted example, not passwords, API keys or a journal export. Email is optional and is not required to use the app.

I need a reply address and enough information to understand the request to provide individual support. If you choose not to provide that information, you can still use the app, but I may not be able to resolve your particular issue. I do not use support messages for advertising or sell them.

Support email is handled using Spacemail by Spaceship. Support information may be processed in the United States, as described in Spaceship's privacy policy, as well as China, where I handle support requests. See Spaceship's privacy policy for its processing and transfer practices.

Retention: I delete support emails, attachments and other support copies I control within 12 months after the request is resolved. Where a longer period is required by law, I retain only the necessary records for that purpose. This period applies to copies under my control; the email provider operates its own backup systems.

Spacemail scans ordinary email for spam and other threats and may use external security processors, including OpenAI, under its service terms. Its terms describe daily server backups retained for up to four weeks. See the Spacemail terms for its security processing and backups. These email-service practices are separate from the app, which has no AI requests in this release.

When you visit this website

The website at https://betweendays.net uses Cloudflare Pages to deliver these pages and help protect them. Network information such as IP address, requested URL, browser information and request time is processed for delivery, reliability and security. Opening a legal or help page does not send your journal to this site.

The website does not include advertising, analytics beacons, contact forms, third-party fonts or embedded social content. I do not use cookies or local storage for advertising or analytics. Cloudflare may process security data or use necessary security cookies when protections apply. See Cloudflare's privacy policy.

Website and security-log retention: I do not keep a separate archive of routine website visitor logs. Cloudflare retains network and security information according to the services used and for as long as needed for its stated processing purposes and legal obligations. Its retention periods are governed by its policies and service terms; this website does not promise a single deletion deadline for all Cloudflare records. Cloudflare operates a global network, so network data may be processed outside the country where you live. Support processing locations are listed above; Apple's independent processing is described in its own privacy information.

Your choices and privacy rights

You can leave iCloud off, turn it off later, change iOS permissions and notification previews, export your records, or delete content using the controls described above. Withdrawing a permission does not recall copies already exported or affect processing that lawfully happened before withdrawal.

For information I hold through support or this website, contact support@betweendays.net. Depending on applicable law, you may have rights to access, correct, delete or receive a copy of your information, object to or restrict processing, withdraw consent, or complain to a privacy regulator. I may need proportionate information to verify a request; do not send identity documents unless specifically needed and a suitable method is agreed. I will respond within the period required by applicable law.

Reasons for processing and complaints

Where UK or EEA data-protection law applies, the purposes and bases for information I receive are:

Where a particular optional use requires consent, that use requires your consent and you can withdraw it. Reading this policy does not itself give consent. You can object to processing based on legitimate interests; I will consider the request under the law that applies. I do not use your support information to make automated decisions with legal or similarly significant effects about you.

The countries and service providers involved are described above. Contact support@betweendays.net for information about the transfer protections applicable to information I handle. A provider's privacy policy explains its practices; it does not replace my responsibilities for processing I arrange.

Privacy requests and complaints are handled by the developer at support@betweendays.net. Explain the concern and the outcome you are seeking; a private journal export is not required. You may also complain to the data-protection authority that applies to you. UK residents can contact the Information Commissioner's Office. These options do not limit mandatory privacy or consumer rights.

I cannot retrieve or erase your private journal remotely. Requests concerning Apple's or another provider's independent processing should also be directed to that provider. If you are a parent or guardian and believe a child has sent me personal information through support, contact me to discuss removal. The app's store age rating is not a statement about the age of consent under privacy law.

Changes to this policy

The effective date identifies the published version. If data practices change materially, I will update this policy and provide additional notice or seek consent where required. Privacy questions and complaints can be sent to support@betweendays.net.