Privacy Policy

Munra is a private journaling app. Everything you write stays on your device, encrypted, local, and under your control. We do not collect your journal entries, your personal information, or your usage patterns. We have no servers that store your data. We run no analytics on you. Your words are yours alone. The one exception is the optional AI features described below, which you must explicitly turn on and which send content directly to a third party provider you choose, not to Munra.

Munra does not collect, transmit, or store any of the following:

• Journal entries, moods, tags, or writing streaks
• Photos or voice recordings you attach to entries
• Your name, email address, or any account credentials
• Device identifiers, IP addresses, or location data
• Usage analytics, session data, or behavioral telemetry
• Crash reports or diagnostic data sent to Munra

There are no user accounts. There is no login. There is no backend database that stores anything you write.

The one exception is the optional AI features covered in "Optional AI features" below: if you choose to turn them on, portions of an entry are sent directly from your device to the third party AI provider you configure.

Munra stores the following data locally in a SQLite database on your device:

• Journal entries: content, mood, hashtags, word count, date, and any attached photo or audio file references
• Folders: names, colors, and icons you create to organise your entries
• Settings: your chosen theme, font, reminder time, privacy preferences, and other in app options
• Streak and insight data: entry counts, word totals, and streak milestones calculated entirely on device

Your encryption key is stored in the iOS Keychain, separate from your journal data. This means even if someone accessed your device storage directly, the data would be unreadable without the key.

All sensitive data in the Munra database is encrypted using AES-256-CBC before it is written to disk. This includes entry content, mood, hashtags, and previews. Your encryption key is a 256-bit randomly generated value unique to your device, never shared with us.

Munra also supports the following optional security features:

• Biometric lock: Face ID or Touch ID (with device passcode fallback) to protect the app on open
• Auto lock entries: individual entries can require authentication to view
• Screenshot prevention: optionally block screen capture and screen recording
• Decoy mode: a triple tap on the lock screen displays scrambled dummy content to protect your privacy in sensitive situations
• Privacy cipher: optionally scrambles text in entry lists or throughout the app so content is unreadable to onlookers

Munra requests the following device permissions only when you use the relevant feature:

• Face ID / Touch ID: to protect your journal with biometric authentication
• Microphone: to record voice journal entries, which are saved locally on your device
• Camera: to take photos directly within the app and attach them to entries
• Notifications: to send optional daily writing reminders at a time you choose. Reminders are handled entirely on device and are suppressed automatically if you have already journaled that day

None of the data accessed through these permissions is transmitted off your device by Munra.

Munra includes optional AI features, an AI writing companion, prompts, and entry insights, that are off by default. To use them, you supply your own API key for a third party AI provider (currently OpenAI or Anthropic). Munra does not provide, resell, or proxy access to these providers.

When you turn AI features on, the relevant portion of an entry is sent directly from your device to the AI provider you chose. This request bypasses Munra entirely, we have no servers to route it through, and we never see the content. That data is instead handled under the privacy policy of the provider you selected, so we encourage you to review it before enabling AI features.

• Anonymization: before sending, Munra automatically strips names, emails, phone numbers, and other identifying details from the text
• Locked entries: entries you've locked are always excluded from AI features, regardless of settings
• Your API key: stored securely on device (iOS Keychain) and never transmitted to or seen by Munra
• Granular control: each AI feature can be enabled or disabled individually, and the master toggle can be switched off at any time

Munra gives you full ownership of your data through manual export. You can create an encrypted backup (.munra file), a password protected file you generate yourself, encrypted with a PBKDF2-derived AES-256 key (100,000 iterations). You control the password. Munra never sees it.

All exports are initiated by you and shared through your device's native sharing sheet (Files app, email, iCloud Drive, etc.). Munra has no access to where you send them or what you do with them.

If you uninstall Munra, all data stored in the app sandbox is permanently deleted from your device. There is no cloud copy to recover from. We strongly recommend creating an encrypted backup before uninstalling.

Munra is not directed at children under 13. We do not knowingly collect any personal information from children. Because Munra collects no personal information from any user, there is no data about children for us to hold, use, or share.

If we make material changes to this Privacy Policy, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically. Continued use of Munra after any changes constitutes acceptance of the updated policy.