Privacy policy

LibreLog for iPhone, iPad, Mac, Android and Windows · last updated 22 October 2026

LibreLog is a journal. Your journal lives on your devices. If you turn on sync, an encrypted copy goes to our server so your other devices can fetch it, and we can't read it. We don't sell your data, show ads or track you, and the apps contain no analytics or advertising SDKs.

Without an account

If you never sign in, your journal never leaves your device. It is stored only in the app's own storage.

If you let it, LibreLog reads your device's calendar and photo library to show a day's events and photos. That happens on the device: only the events and photos you choose to keep are saved, and only into your journal.

What we keep when you sign in to sync

• Your account: your email address. If you sign in with Apple or Google, we get the email address they share with us, which may be an Apple private relay address.
• Your journal, encrypted: entries, tags, ratings, kept calendar events, photo details and settings that sync, encrypted on your device with a key that never reaches us. We see only its size and when it changed.
• Your devices: an id for each device, when it last synced, and its name, which is also encrypted.
• Sync access: the date your sync is paid until, and a record of the purchases that pay for it (see below).

Photos themselves are never uploaded. A photo's date, caption, size and a tiny blurred preview are part of your encrypted journal. On Apple devices, so is an identifier that lets your other devices find the same photo in your own iCloud Photos library.

The data goes over HTTPS and is stored by Supabase in London, UK, which also sends sign-in emails. Supabase acts on our behalf and doesn't use your data for anything else.

Paying for sync

Everything in LibreLog is free except sync, which is an optional yearly subscription. You buy it in the app through the App Store or Google Play, and Apple or Google takes the payment under its own privacy policy. If you buy on the web (coming soon, for one or three years), Stripe takes the payment. We never see your card or bank details.

When you subscribe in the app, LibreLog passes your account id to Apple or Google with the purchase (Apple's app account token, Google's obfuscated account id), so that renewals, lapses and refunds reach the right account. For each subscription we keep:

• which store it was bought through, and the store's id for it (Apple's original transaction id or Google Play's purchase token);
• the product, whether it was a real or a test purchase, its status (for example active, expired or refunded), whether it renews, and when it is paid until;
• the last store event that changed it, when that happened, and when we first and last recorded it;
• the account it belongs to.

Apple and Google tell our server when a subscription renews, lapses or is refunded, through App Store Server Notifications and Google Play real-time developer notifications (delivered by Google Cloud Pub/Sub). We check that each notification is genuinely from Apple or Google, ask Google Play for the subscription's current state where needed, and keep the notification's id and when it arrived, which aren't linked to your account, so the same one isn't applied twice. Beyond updating the purchase record above, nothing from the notification is stored.

Your journal stays end-to-end encrypted whether or not you pay. Billing records are not encrypted, because we need to read them to switch sync on and off. They contain no journal content.

If your subscription lapses, you can still download your journal for 30 days. After 90 days we delete your synced journal and devices from the server, but keep your sign-in account and its purchase records so you can subscribe again; these go when you delete your account. Deleting your account doesn't cancel a subscription: do that in your App Store or Google Play settings.

Besides Supabase, the companies that handle payment data are Apple and Google (Google Play and Google Cloud Pub/Sub) for in-app purchases, and Stripe for web purchases. Each keeps its own record of your purchase under its own privacy policy.

Deleting your data

In any of the apps, go to Settings → Sync → Delete account. This deletes your account, everything synced to the server, your list of devices and your purchase records, straight away. Each device keeps its own copy of your journal until you delete the app or its data. Signing out stops syncing but keeps your account. If you can't reach a device, email librelog@maybeitssoftware.co.uk from the address you signed in with and we'll delete it for you.

Children

LibreLog is not aimed at children under 13, and we don't knowingly collect their data.

Changes

If this policy changes, the date above changes with it. A change that affects what we collect will also be noted in the app's release notes.

Contact

MaybeItsSoftware Ltd. Questions, or a request about your data: librelog@maybeitssoftware.co.uk.