Kept only on your device (never sent to us):

Burn letters and burned photos (not kept at all), unsent messages, voice memos, Moments photos, KeepBox, Victories and Carry entries, your preferences, and — unless you sign in — your journal entries. These live in your browser's storage on this device. Clearing your browser data deletes them.

Stored on our server:

• If you sign in: your email address, a session cookie, your journal entries (so they sync across your devices), and letters to your future self until 7 days after you open them. If you first signed in with Google, we also hold the name and profile picture Google provided.
• 21-day journeys: what you are carrying and what you write each day, until day 21, completion, or expiry. Linked to your account, or — if you are not signed in — to a random code stored in your browser.
• Feedback, ratings and exercise suggestions you choose to send us.

Journal entries, letters and journeys are stored as you wrote them. They are not encrypted by the app. No person at NothingBox reads them, and they are never sent to any AI.

Usage counts (since 1 October 2026):

To learn what helps, we count: the mood you pick, which screens and exercises you use and for how long, your ratings, your device type, operating system, browser, language, screen size, the website or link that brought you here, and your country — taken from your phone's timezone setting. These are linked to a random code stored in your browser, never to your account. We do not look up your location from your internet address, and we never collect your city.

What we do not do:

• We do not track you across websites
• We do not use advertising cookies or third-party analytics
• We do not sell, share, or monetise your data in any way
• We do not send your writing or your voice to any AI
• We do not use your entries to train AI models

NothingBox uses one AI model, Claude Haiku by Anthropic, in five places: fresh prompts, the Name It reflection, the Daily room note, PS: With Love, and exercise search. It receives only the mood you picked, the time of day, the options you tapped, a few facts about a session, or — for exercise search only — the short request you type. Requests pass from our server through Emergent, our hosting platform, to Anthropic.

Important limits:

• Your journal, letters, journeys, unsent messages and voice are never sent to any AI
• AI responses are not stored on our server
• If AI is slow or unavailable, a pre-written response appears — the app works fully without it
• The AI is instructed never to give advice, diagnose, or suggest clinical action
• Until 1 October 2026 some features sent journal text to a different AI model. Those features have been removed

Your entries belong to you. We do not read, analyse, or act on their content. You can delete entries at any time. If you delete your account, your synced entries, letters, journeys and account details are deleted from our database straight away.

Known limitation: deleting an entry on one device may not immediately propagate to other devices. We are working to fix this.

We use one session cookie when you sign in (httpOnly, expires after 7 days, never readable by scripts) and your browser's local storage for what stays on your device. No tracking or advertising cookies of any kind.

NothingBox runs on these services: Emergent (hosting, database, and passing AI requests to Anthropic), Anthropic (the AI model), Resend (sign-in emails — receives your email address), Google Fonts (the app's typefaces load from Google), and YouTube and SoundCloud (only when you play background sounds).

NothingBox is intended for people aged 13 and above. We do not knowingly collect information from children under 13. If you believe a child under 13 has signed up, email us and we will delete their account.

You can request access to, deletion of, or correction of your data at any time. Email us at privacy@nothingbox.app and we will respond within 14 days.

• Journal entries (if signed in): until you delete them or your account
• Letters to your future self: until 7 days after you open them, or until you delete them
• 21-day journeys: until day 21, completion, or expiry
• Usage counts: kept without any link to your account
• Session tokens: expire automatically after 7 days
• AI responses: not stored on our server

If we make significant changes we will update the date at the top of this page. Continued use of NothingBox after changes means you accept the updated policy.

Questions, requests, or concerns:

privacy@nothingbox.app

We're a small team. We read every message.