iglu Privacy Policy

Last updated: October 20, 2026

iglu is operated by Rafael Guimarães, in Brazil. For privacy questions or requests, email hello@iglu.website.

This policy covers the app, its widgets, and its App Clip. No account is required to use iglu.

Your journal

Your entries, replies, dates, photos, videos, search history, and preferences are stored to provide your journal. Entries, photos, search history, and derived search and recommendation data can sync through your private iCloud storage. Video files are stored on your device and may be included in device backups. Selected media may retain embedded metadata.

Search and recommendations run on your device. They create numerical representations of your writing to find and resurface entries. We do not send your journal or searches to an external AI service or use them to train AI models. Analytics and purchase services do not receive your journal content.

Usage analytics

We use Aptabase to understand usage and improve iglu. The app and App Clip automatically send events about launches, screens, entry and search actions, settings, Face ID outcomes, reminders, purchases, exports, and referrals. Events include counts, such as entry character counts and attachment counts, selected plans, and success or failure.

Aptabase also receives timestamps, temporary identifiers, app and SDK versions, operating system, device model, and language. It uses IP addresses and user-agent information to derive country or region and an identifier that changes daily, without retaining those IP addresses or user-agent information with analytics data. These analytics do not use persistent device or advertising identifiers.

Analytics does not include journal text, photos, videos, search terms, journal entry identifiers, or referral identifiers.

Purchases and referrals

Apple and RevenueCat process purchase information to provide and restore access, manage trials and offers, and report subscription activity. RevenueCat receives a generated app user identifier, Apple's device identifier for vendor, transaction and receipt information, subscription status, IP address, device and app versions, language, and App Store country. It initializes when the app launches, even without a purchase. Apple handles payment details; we do not receive your card number.

Referrals use app-specific iCloud identifiers to connect an inviter and invitee, award credits, and prevent duplicate rewards. Referral records and creation and redemption dates are stored in Apple's CloudKit public database, separately from your private journal. Invitation links contain the inviter's identifier, visible to recipients and services handling the link. The App Clip saves it for the full app.

Permissions and support

Camera, microphone, and photo-picker access let you attach media. Notifications provide reminders scheduled on your device. Optional Face ID uses Apple's authentication; iglu receives the outcome, not your facial scan or biometric template. You can manage permissions in iOS Settings.

If you email us, we receive your email address, message, and attachments and use them to handle your request. Our support mailbox uses iCloud Mail.

How information is used and shared

We use information to provide iglu, manage purchases and referrals, improve reliability, prevent abuse, and answer requests. Where a legal basis is required, we rely on providing the services you request, legitimate interests in improvement and support, and applicable legal obligations.

Apple, RevenueCat, and Aptabase process information for the purposes described above. They may process it outside your country, including in the United States. Information also goes to destinations you choose when exporting or sharing, and may be disclosed where legally required or necessary for legal claims.

We do not sell personal information or use it for targeted advertising.

Your data and choices

You can delete entries, attachments, and individual searches in the app, and export entries and attachments as a ZIP file. iCloud copies, backups, and exports may remain separately. Deleting the app does not cancel a subscription or delete every cloud, purchase, or referral record.

Journal data remains until deleted. Service records are retained according to their purpose: restoring purchases, administering credits, preventing duplicate rewards, handling support, or meeting legal obligations. Provider retention and backup practices also apply.

Depending on applicable law, you may have rights to access, correct, delete, export, restrict, or object to the processing of personal data, and withdraw consent where processing relies on it. Contact hello@iglu.website to exercise these rights. We may need to verify your request. We may be unable to identify your analytics because it lacks a persistent personal identifier. You may also complain to your local privacy authority.

Security, children, and updates

iglu uses Apple's device and iCloud protections and encrypted connections to its analytics and purchase services. No system is completely secure.

We will update this page and its date when the policy changes, with additional notice where required.