Privacy Policy

Last updated: June 9, 2026

Pim is a gentle journaling companion. It's built on a simple promise: the private things you write should stay private. This policy explains, in plain language, what Pim stores, where it lives, who can see it, and the control you have over it.

Pim is developed by Monocraft Labs ("Pim," "we," "us"). If you have any questions, reach us at [email protected].

1. What Pim stores, and where

On your device and in your iCloud. The content you create stays on your iPhone, in the app's private storage:

• Journal entries — everything you write.
• Mood logs — the moods you record.
• Conversations with Pim — your chat history.

If iCloud is enabled on your device, this data also syncs through your personal iCloud account (Apple's private CloudKit database), so it isn't lost if you change phones. That database is tied to your Apple Account and protected by Apple; we cannot read its contents. This data is the source of truth — we do not hold a full copy of it on our servers.

In your private cloud account. So that Pim can feel like it remembers you across days and conversations, a small amount of derived information is stored in a private account tied to your sign-in:

• Distilled memory notes — brief summaries (roughly 20 words or fewer), such as "is a nurse," "working on being kinder to themselves," or "sister Maya is important to them." These are generated from your entries and conversations. They do not contain your full text.
• A short portrait — a few sentences that hold a warm, holistic picture of who you are, generated from those notes.
• Search embeddings — numerical representations of your notes that let Pim find the relevant memory at the right moment. They are not human-readable text.

This account is protected so that only you can access its contents (see Security, below).

Account information. You can create your account in two ways:

• Sign in with Apple — we receive an Apple-provided user identifier and, if you choose to share them, your name and email address.
• Email and password — we store your email address; your password is stored only in securely hashed form by our authentication provider, and we never see it. If you reset your password, a one-time code is emailed to you.

We use this information only to create and secure your account.

Purchase information. If you subscribe to Pim PRO, the purchase is processed entirely by Apple. We receive subscription status (for example, "active" or "expired") tied to an anonymous identifier so the app can unlock PRO features — never your payment details.

Diagnostic information. We keep minimal operational data, such as counters used to rate-limit requests and prevent abuse. Pim does not include third-party analytics, advertising, or tracking SDKs.

2. How your words are processed by AI

Pim uses AI in two ways:

• On your device. Some features run entirely on your iPhone using Apple's on-device models. This text never leaves your device.
• In the cloud. For richer conversation and to distill memory notes, your message and a small amount of relevant context are sent to our AI provider (OpenRouter, which routes to the underlying model, currently Google's Gemini). This happens over an encrypted connection.

For the cloud path, we rely on providers operating under a zero-retention policy: your text is used only to generate Pim's response or a memory note in the moment, and is not retained, not logged for human review, and not used to train any AI model. Only the short distilled notes — never your full text — are saved afterward.

3. Who we share data with (service providers)

We don't sell your data or share it for advertising. We use a small set of service providers ("subprocessors") strictly to run Pim:

Each provider may process data in accordance with its own privacy and security commitments. We may also disclose information if required by law, or to protect the safety of a person.

4. Your control and your rights

• See what Pim remembers. Open Settings → What Pim remembers to view every note Pim holds about you.
• Forget anything. Swipe to delete any individual memory. It is removed permanently.
• Delete your account. Settings → Delete account permanently erases your account and everything stored about you — on this device and in the cloud, including all memory notes, your portrait, and your embeddings. This cannot be undone.

Depending on where you live, you may have rights under laws such as the GDPR or the CCPA, including the right to access, correct, delete, or receive a copy of your data, and to object to certain processing. You can exercise the core of these rights directly in the app, or contact us at [email protected] for any request. We do not sell personal information.

5. Data retention

• On-device data remains on your device (and in your iCloud, if enabled) until you delete it in the app or remove the app.
• Memory notes, portrait, and embeddings remain in your account until you forget them or delete your account.
• Transient text sent for AI processing is not retained beyond generating the response, as described above.

6. Security

Your account data is stored with encryption in transit and at rest, and is protected by row-level access controls so that each account can only ever read or modify its own data. No system is perfectly secure, but we work to protect your information and to keep what we store about you minimal by design.

7. Children

Pim is intended for users aged 13 and over, and the app asks for your date of birth during setup to enforce this. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, please contact us and we will delete it.

8. Pim is not medical care

Pim is a supportive journaling companion. It is not therapy, not a medical or mental-health service, and not a substitute for professional care. It cannot diagnose, treat, or respond to emergencies. If you are in crisis or may be in danger, please contact a professional or a crisis line — you can find one for your country at findahelpline.com. In the US, you can call or text 988 (Suicide & Crisis Lifeline). If someone is in immediate danger, call your local emergency number.

9. International users

Our service providers may process data in different countries. By using Pim, you understand your information may be processed in locations with different data-protection laws than your own. We rely on appropriate safeguards for such transfers where required.

10. Changes to this policy

We may update this policy as Pim evolves. When we make material changes, we'll update the date at the top and, where appropriate, let you know in the app. Continued use of Pim after an update means you accept the revised policy.

11. Contact

Questions, requests, or concerns? Email [email protected].

Pim — a friend who remembers how you felt.