Privacy Policy

Last updated: October 7, 2026

This policy describes how Progress Journal handles information when you use the app and this website.

Information you provide

Progress Journal stores your account identifier, email address and optional name; your habits, completion dates, journal entries, goals, preferences and profile answers; and conversations you save in Ask. Profile answers and journal content may include health, fitness or other personal information you choose to enter.

If you enable Money and connect a bank through Plaid, we receive account information, balances and transaction history, including merchants, dates, amounts and transaction categories. Previously imported bank documents and transaction captures can also include your name, mailing address and account or card identifiers. We use these records to display your finances, avoid duplicates and calculate Money summaries. Money and connecting a bank are optional.

Storage and service providers

Signed-in app data is synchronized to our Supabase cloud database and file storage. The app also keeps local caches and pending changes on your device so features can work through interrupted connections. This is not a local-only journal, and the app does not currently offer a switch that disables all cloud synchronization.

Supabase provides authentication, database, file storage and server functions. Plaid connects supported Canadian financial institutions to Money. Vercel hosts this website. These services process information needed to operate their services, which may include network request metadata and service logs. Access to app records is scoped to your account. Network requests use HTTPS.

Optional bank connections through Plaid

Open Settings → Banks → Connect a bank to start Plaid Link. You choose your institution, sign in and complete any verification within Plaid Link or your bank's authorization flow. Progress Journal does not receive your online banking password. Plaid and your bank handle authentication under their own privacy practices.

Our server stores the Plaid connection token in Supabase Vault and uses it to retrieve transactions and balances for Money. Linking a bank authorizes recurring synchronization until you disconnect. The app requests transaction access; it does not make bank payments or transfers. You can review linked accounts and disconnect from Settings → Banks. Disconnecting ends our connection and removes its token; financial history already saved in Money remains until you delete your account.

The current app uses Plaid Link instead of the earlier Desjardins browser and statement-file import flow. Financial records and documents imported with earlier versions can remain associated with your account.

Optional OpenAI features

OpenAI features stay off until you explicitly allow them. With your permission, the app sends Ask messages and relevant journal, habit, profile and Money context to OpenAI to generate answers, search representations and suggestions. Automatic habit suggestions and search indexing may also use the content relevant to those features. This can include sensitive information you have chosen to enter or import.

Dictation also requires your permission for OpenAI features and microphone access. When you use it, the app sends your recording through our server to OpenAI for transcription. The returned text can become a note or message. Our transcription function does not save the audio in cloud file storage.

You can turn OpenAI features off in Settings to prevent new AI requests. This does not delete existing app records or reverse processing that has already happened. OpenAI applies its API data controls and retention rules; see the linked documentation below. Regular habit tracking, journal editing and bank synchronization do not require permission for OpenAI features.

How information is used

Account information authenticates you and associates your records with your account. Your content supports habit tracking, journal history, optional financial summaries, search and, when allowed, personalized AI responses. The app uses selected dates and preferences to display the records you request and schedule reminders.

The app does not include advertising or cross-app advertising tracking. Notification permission is separate from tracking permission: reminders do not require an advertising identifier. You can change notification and microphone permissions in your device settings.

Your choices and deletion

You can edit your profile and journal, manage habits, disconnect a bank, turn OpenAI features off and request account deletion from Settings → Profile. Account deletion removes account records through the app's deletion service. Contact us if you cannot complete deletion or need help accessing or correcting your information. Service-provider backups or logs may remain subject to their retention and legal requirements.

Signing out clears the active account's content from the app's screens. Local caches and pending changes are separated by account; signing out is not the same as deleting stored records. Disconnecting a bank does not delete financial history already saved in Money.

Children and policy updates

Progress Journal is not intended for children under 13. If you believe a child has provided personal information, contact us. We will update this page and its date when this policy changes.

Provider information

Contact

For privacy questions or requests, email privacy@progressjournal.app.