Privacy Policy

Last updated: June 17, 2026

Pim is a gentle journaling companion. It's built on a simple promise: the private things you write should stay private. This policy explains, in plain language, what Pim stores, where it lives, who can see it, and the control you have over it.

Pim is developed by Monocraft Labs ("Pim," "we," "us"). If you have any questions, reach us at [email protected].

1. What Pim stores, and where

On your device and in your iCloud. The content you create stays on your iPhone, in the app's private storage:

• Journal entries — everything you write.
• Mood logs — the moods you record.
• Conversations with Pim — your chat history.
• Wellbeing activity — which of Pim's calming tools you use (breathing, meditations, sleep stories, relaxing sounds) and roughly how long. This stays on your device; only a short distilled note about it may be saved as a memory (below).

If iCloud is enabled on your device, this data also syncs through your personal iCloud account (Apple's private CloudKit database), so it isn't lost if you change phones. That database is tied to your Apple Account and protected by Apple; we cannot read its contents. This data is the source of truth — we do not hold a full copy of it on our servers.

In your private cloud account. So that Pim can feel like it remembers you across days and conversations, a small amount of derived information is stored in a private account tied to your sign-in:

• Distilled memory notes — brief summaries (roughly 20 words or fewer), such as "is a nurse," "working on being kinder to themselves," or "sister Maya is important to them." These are generated from your entries, your conversations, and how you engage with Pim over time (for example, "turns to breathing to steady themselves"). They do not contain your full text.
• A short portrait — a few sentences that hold a warm, holistic picture of who you are, generated from those notes.
• Search embeddings — numerical representations of your notes that let Pim find the relevant memory at the right moment. They are not human-readable text.

This account is protected so that only you can access its contents (see Security, below).

Account information. You can create your account in two ways:

• Sign in with Apple — we receive an Apple-provided user identifier and, if you choose to share them, your name and email address.
• Email and password — we store your email address; your password is stored only in securely hashed form by our authentication provider, and we never see it. If you reset your password, a one-time code is emailed to you.

We use this information only to create and secure your account.

Purchase information. If you subscribe to Pim PRO, the purchase is processed entirely by Apple. We receive subscription status (for example, "active" or "expired") tied to an anonymous identifier so the app can unlock PRO features — never your payment details.

Diagnostic and usage information. We keep minimal operational data, such as counters used to rate-limit requests and prevent abuse. To understand how Pim is used and to keep it working, we also record privacy-preserving product analytics — counts of actions (for example, that a journal entry was created, a chat message was sent, or a breathing session was completed), never the content of what you write. These events are tied to your account identifier and your device identifier, with your IP address not recorded. Pim contains no advertising and no cross-app tracking, and we never put your journal, mood, or chat content into analytics. We also collect crash and error diagnostics (via Sentry) to find and fix problems and keep Pim stable — technical information such as your device model, OS version, and a stack trace, tied to your opaque account identifier; this never includes your journal, mood, or chat content, and is never used for advertising or tracking. If you found Pim through an Apple Search Ad, we use Apple’s privacy-preserving Search Ads attribution (the AdServices framework) to learn which ad or keyword brought you to Pim, so we can measure and improve our own advertising. This is first-party measurement only: no advertising identifier (IDFA), no cross-app tracking, and no consent prompt is required — and Pim still shows you no ads. The attribution (an Apple Ads campaign or keyword identifier) is tied to your account identifier and shared with our analytics and subscription providers (Amplitude, RevenueCat) for that measurement.

Streamed content. Pim's guided meditations, relaxing sounds, sleep stories, breathing exercises, and the gentle ambient backgrounds behind them are streamed from our content delivery network as you play them. They are the same for everyone — fetching them works like loading any file from the web, sending only the standard request information (such as your IP address) needed to deliver the audio or video, and never your journal, mood, or chat content. The audio you hear is not recorded or sent anywhere.

2. How your words are processed by AI

Pim uses AI in two ways:

• On your device. Some features run entirely on your iPhone using Apple's on-device models. This text never leaves your device.
• In the cloud. For richer conversation and to distill memory notes, your message and a small amount of relevant context — which may include a brief summary of your recent activity, such as that you meditated this week — are sent to our AI provider (OpenRouter, which routes to the underlying model, currently Google's Gemini). This happens over an encrypted connection.

For the cloud path, your text is used only to generate Pim's response or a memory note in the moment. It is not used to train any AI model and not published, and we configure our AI routing to exclude training and data-publishing endpoints. We do not store your full text; the provider processes it transiently and may retain it only briefly, in automated form, to guard against abuse. Only the short distilled notes — never your full text — are saved afterward.

3. Who we share data with (service providers)

We don't sell your data or share it for advertising. We use a small set of service providers ("subprocessors") strictly to run Pim:

Each provider may process data in accordance with its own privacy and security commitments. We may also disclose information if required by law, or to protect the safety of a person.

4. Your control and your rights

• See what Pim remembers. Open Settings → Memory for a summary of everything Pim knows about you.
• Update or forget anything. Tell Pim on that same screen — “remember this”, “that’s not right”, “forget that” — and it updates or permanently deletes those notes.
• Delete your account. Settings → Delete account permanently erases your account and everything stored about you — on this device and in the cloud, including all memory notes, your portrait, and your embeddings. This cannot be undone.

Depending on where you live, you may have rights under laws such as the GDPR or the CCPA, including the right to access, correct, delete, or receive a copy of your data, and to object to certain processing. You can exercise the core of these rights directly in the app, or contact us at [email protected] for any request. We do not sell personal information.

5. Data retention

• On-device data remains on your device (and in your iCloud, if enabled) until you delete it in the app or remove the app.
• Memory notes, portrait, and embeddings remain in your account until you forget them or delete your account.
• Transient text sent for AI processing is not stored by us; the provider processes it in the moment and may keep it only briefly, in automated form, to guard against abuse, as described above.

6. Security

Your account data is stored with encryption in transit and at rest, and is protected by row-level access controls so that each account can only ever read or modify its own data. No system is perfectly secure, but we work to protect your information and to keep what we store about you minimal by design.

7. Children

Pim is intended for users aged 13 and over, and we don't design Pim for or market it to children. During setup we ask for your date of birth, and if you enter a date showing you are under 13 we ask you not to continue. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, please contact us and we will delete it.

8. Pim is not medical care

Pim is a supportive journaling companion. It is not therapy, not a medical or mental-health service, and not a substitute for professional care. It cannot diagnose, treat, or respond to emergencies. If you are in crisis or may be in danger, please contact a professional or a crisis line — you can find one for your country at findahelpline.com. In the US, you can call or text 988 (Suicide & Crisis Lifeline). If someone is in immediate danger, call your local emergency number.

9. International users

Our service providers may process data in different countries. By using Pim, you understand your information may be processed in locations with different data-protection laws than your own. We rely on appropriate safeguards for such transfers where required.

10. Changes to this policy

We may update this policy as Pim evolves. When we make material changes, we'll update the date at the top and, where appropriate, let you know in the app. Continued use of Pim after an update means you accept the revised policy.

11. Contact

Questions, requests, or concerns? Email [email protected].

Pim — a friend who remembers how you felt.