Privacy Policy

Munra is a private journaling app. Everything you write stays on your device, encrypted, local, and under your control. We do not collect your journal entries, your personal information, or your usage patterns. We have no servers, so there is nowhere for us to store your data. We run no analytics on you. Your words are yours alone. Two things can send data off your device, and you have to turn both on: backup, which writes an encrypted file to your own iCloud or a folder you pick, and the optional AI features, which send content directly to a third party provider you choose. Neither one sends anything to Munra.

Munra does not collect, transmit, or store any of the following:

• Journal entries, moods, tags, or writing streaks
• Photos or voice recordings you attach to entries
• Your name, email address, or any account credentials
• Device identifiers, IP addresses, or location data
• Usage analytics, session data, or behavioral telemetry
• Crash reports or diagnostic data sent to Munra

There are no user accounts. There is no login. There is no backend database that stores anything you write.

The one exception is the optional AI features covered in "Optional AI features" below: if you choose to turn them on, portions of an entry are sent directly from your device to the third party AI provider you configure.

Munra stores the following data locally in a SQLite database on your device:

• Journal entries: content, mood, hashtags, word count, date, and any attached photo or audio file references
• Folders: names, colors, and icons you create to organise your entries
• Settings: your chosen theme, font, reminder time, privacy preferences, and other in app options
• Streak and insight data: entry counts, word totals, and streak milestones calculated entirely on device

Your encryption key is stored in the iOS Keychain, separate from your journal data. This means even if someone accessed your device storage directly, the data would be unreadable without the key.

Sensitive data in the Munra database is encrypted using AES-256-CBC before it is written to disk. This includes what you write, along with your mood, tags, previews, the place and the weather. Your encryption key is a 256-bit randomly generated value unique to your device, never shared with us.

Photos and voice recordings are the exception. They are stored as ordinary files in the app's private sandbox rather than inside the encrypted database, and they rely on iOS file protection, which keeps them unreadable while your device is locked. They are encrypted whenever they go into a backup. We are explicit about this because "everything is encrypted" would be easier to say and would not be true.

Munra also supports the following optional security features:

• Biometric lock: Face ID or Touch ID (with device passcode fallback) to protect the app on open
• Auto lock entries: individual entries can require authentication to view
• Screenshot prevention: optionally block screen capture and screen recording
• Decoy mode: a triple tap on the lock screen displays scrambled dummy content to protect your privacy in sensitive situations
• Privacy cipher: optionally scrambles text in entry lists or throughout the app so content is unreadable to onlookers

Munra requests the following device permissions only when you use the relevant feature:

• Face ID / Touch ID: to protect your journal with biometric authentication
• Microphone: to record voice journal entries, which are saved locally on your device
• Camera: to take photos directly within the app and attach them to entries
• Notifications: to send optional daily writing reminders at a time you choose. Reminders are handled entirely on device and are suppressed automatically if you have already journaled that day

None of the data accessed through these permissions is transmitted off your device by Munra.

Munra includes optional AI features, an AI writing companion, prompts, and entry insights, that are off by default. To use them, you supply your own API key for a third party AI provider (currently OpenAI or Anthropic). Munra does not provide, resell, or proxy access to these providers.

When you turn AI features on, the relevant portion of an entry is sent directly from your device to the AI provider you chose. This request bypasses Munra entirely, we have no servers to route it through, and we never see the content. That data is instead handled under the privacy policy of the provider you selected, so we encourage you to review it before enabling AI features.

• Anonymization: before sending, Munra automatically strips names, emails, phone numbers, and other identifying details from the text
• Locked entries: entries you've locked are always excluded from AI features, regardless of settings
• Your API key: stored securely on device (iOS Keychain) and never transmitted to or seen by Munra
• Granular control: each AI feature can be enabled or disabled individually, and the master toggle can be switched off at any time

A backup is an encrypted .munra file protected by a passphrase you choose, encrypted with a PBKDF2-derived AES-256 key (100,000 iterations). You control the passphrase and Munra never sees it. Without it the file cannot be read by us, by Apple, or by anyone who obtains a copy.

You can make one by hand at any time and share it through your device's sharing sheet. You can also turn on automatic backup, which writes that same encrypted file on a schedule to one of two places you choose: a folder on your device, or your own iCloud Drive. This is the one feature that copies journal data off your phone without you pressing a button each time, which is why it is off until you switch it on, and why the destination is always yours.

When the destination is iCloud, the file is stored in your Apple account under Apple's terms, in a container Munra can write to and we cannot. We operate no servers and receive no copy. Turning automatic backup off stops new copies being written; the ones already in your folder or iCloud stay until you delete them.

If you uninstall Munra, everything in the app sandbox is permanently deleted from your device. Any backups you made survive, because they live where you sent them. If you have never made one, there is nothing to recover from, so we strongly recommend making a backup before uninstalling.

Munra is not directed at children under 13. We do not knowingly collect any personal information from children. Because Munra collects no personal information from any user, there is no data about children for us to hold, use, or share.

If we make material changes to this Privacy Policy, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically. Continued use of Munra after any changes constitutes acceptance of the updated policy.