Privacy Policy
Overview
Your journal lives on your device. We don't have accounts, and we don't collect your entries to read or analyze. The app only sends something off your device when you take an action that needs it, such as creating a share link, sending feedback, or turning on weather. Each of those is described below.
What data the app stores
All of the following is stored only on your device, in the app's private storage:
- Your gratitude entries (text, and any photos or voice notes you attach).
- Optional location tags (place name and coordinates), if you turn on location tagging.
- Optional weather stamps on entries, if you turn on the weather feature.
- Your preferences (theme, reminder time, clock format, and similar settings).
Deleting the app deletes all of this data.
Permissions
etto only asks for a permission at the moment you use the feature that needs it, and the rest of the app keeps working if you decline:
- Notifications: to deliver the daily reminder you schedule.
- Location: to tag entries with the place they were written.
- Photo library: to attach a photo to an entry.
- Camera: to take a photo for an entry.
- Microphone: to record a voice note.
Saying no to any of these simply leaves that feature off.
When data leaves your device: weather, feedback, and share links
Weather. If you turn on the optional weather feature, the app sends your current coordinates to Open-Meteo, a free weather service, to fetch the temperature and conditions. No other data is included in that request. The feature is off by default and the app explains this before enabling it.
Feedback. If you choose to send us feedback from Settings, we receive the message you typed along with basic diagnostic context: app version, platform, device model, OS version, timezone, and locale. Your location is never included, and nothing from your journal is attached. The submission is delivered to us by email via a form service (Web3Forms) and is not stored in any database we operate. We keep feedback only as long as needed to respond to it.
Share links. When you select one or more moments and share them as a link, the app uploads the text of those moments and a preview image it creates, including any photos attached to the moments you picked, to our share service, so the link shows a card in chat apps. The upload is anonymous: only the moments you picked (their text and photos) are sent, with no account, name, or device details attached (etto has no accounts). Anyone who has the link can open it, so only share it with people you trust. Shared links expire automatically about a year after they are created.
These are the only network requests the app makes with your data, and each one happens only when you take the action yourself.
What we don't collect
- No accounts, no sign-in.
- No analytics, tracking, or advertising SDKs.
- We don't sell your data, and we don't share it with third parties for advertising.
Export
You can save your journal as a PDF from Settings. That file goes wherever you choose to send it (your files, another app, another person); once saved, it's in your hands.
Changes to this policy
If a future version of the app changes what data is handled (for example, an optional sync or social feature), this policy will be updated and the change called out in the app before anything new takes effect.
Contact
Questions? Reach us through the support form.