Privacy Policy

Last updated: March 15, 2026

Cave ("the App") is a personal journaling app developed by Melvin Morina ("we", "us", "our"). Your privacy matters deeply to us. Cave is built around the principle that your personal reflections belong to you and no one else.

1. Information We Collect

1.1 Journal Recordings (Video & Audio)

When you record a journal entry, the video and audio are captured using your device's camera and microphone. All recordings are stored exclusively on your device. We never upload, transmit, or have access to your video or audio files.

1.2 Transcription of Speech

Your spoken words are transcribed using Apple's on-device Speech Recognition framework. The transcription text is stored locally on your device in the app's private database.

1.3 Transcription Processing for Ember Responses

To generate a personalized response from Ember (your companion in Cave), the text transcription of your journal entry is sent to a secure server-side proxy, which forwards it to a third-party language model provider (OpenAI) for processing. Only the text transcription is sent — never your video, audio, or any personally identifiable information.

• The transcription is sent over an encrypted HTTPS connection.
• The transcription is processed in real-time and is not stored on our servers or by OpenAI beyond the immediate request.
• We do not attach your name, email, device ID, or any identifier to the transcription.
• OpenAI's data usage policy applies to the processing of transcription text. OpenAI does not use API inputs to train their models.

1.4 On-Device Processing (Apple Intelligence)

When available (iOS 26 and later on supported devices), Cave may use Apple's on-device Foundation Models to generate Ember responses. In this case, the transcription is processed entirely on your device and is never sent to any external server.

1.5 User Profile & Preferences

The App stores your selected goals, journaling history (entry count, dates, streaks), and recurring topic patterns locally on your device. This data is used solely to personalize Ember's responses and is never transmitted externally.

1.6 Subscription Information

Subscriptions are managed entirely through Apple's App Store and RevenueCat. We receive anonymized subscription status information (e.g., whether you have an active subscription) but never your payment details, Apple ID, or billing information.

2. Device Permissions

Cave requests the following permissions, each for a specific purpose:

• Camera — Required to record your selfie video journal entries. Used only during active recording.
• Microphone — Required to capture audio with your journal entries. Used only during active recording.
• Speech Recognition — Required to transcribe your spoken words into text so Ember can understand and respond to what you said. Processing happens on-device via Apple's Speech framework.
• Photo Library (Save) — Optional. Only used when you choose to export or save a journal entry video to your Photos library.
• Notifications — Optional. Used to send you journaling reminders and subscription-related notifications at times you choose.

You can revoke any permission at any time in your device's Settings. The App will continue to function with reduced features if permissions are denied.

3. Data Storage & Security

• All journal data (videos, transcriptions, user profile, Ember responses) is stored in the App's private sandboxed storage on your device.
• Data is protected by your device's hardware encryption and passcode/biometric lock.
• We do not operate user accounts, login systems, or cloud storage. There is nothing to "hack" on our side because we don't have your data.
• If you delete the App, all local data is permanently erased.

4. Data Sharing

We do not sell, rent, or share your personal data with anyone.

The only external data transmission is the text transcription sent for Ember response generation (see Section 1.3). This data is:

• Anonymized (no identifying information attached)
• Not stored beyond the immediate processing request
• Transmitted over encrypted connections

5. Third-Party Services

• OpenAI API — Processes transcription text to generate Ember responses. Subject to OpenAI's API Data Usage Policy. OpenAI does not use API inputs to train models.
• RevenueCat — Manages subscription status. Receives anonymized purchase data from Apple. Subject to RevenueCat's Privacy Policy.
• Apple (App Store, StoreKit, Speech Recognition) — Handles purchases and on-device speech processing. Subject to Apple's Privacy Policy.
• PostHog — Anonymous product analytics (screen views, feature usage). No personal data shared. Subject to PostHog's Privacy Policy.

6. Children's Privacy

Cave is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child under 13 is using Cave, please contact us so we can take appropriate action.

7. Analytics

Cave uses PostHog, a privacy-focused analytics platform, to understand how the App is used and improve the experience. We collect:

• Screen views — Which screens you visit (e.g., Home, Recording, Onboarding).
• Feature usage — Anonymous events like "recording started", "onboarding completed", "subscription purchased". These help us understand which features are used and where users drop off.
• Device metadata — Device type, OS version, app version. No personally identifiable information.

We do not collect:

• Your name, email, Apple ID, or any personal identifiers
• The content of your journal entries, transcriptions, or Ember responses
• Your location, contacts, photos, or any data outside the App

Cave does not use advertising SDKs, tracking pixels, or fingerprinting. Analytics data is used solely to improve the App and is never sold or shared with advertisers. PostHog's privacy policy is available at posthog.com/privacy.

8. Data Retention

All data is stored on your device for as long as you use the App. We do not retain any data on external servers. When you delete a journal entry within the App, it is permanently removed. When you delete the App, all data is permanently erased.

9. Your Rights

Because all your data lives on your device, you have full control:

• Access — All your data is visible within the App.
• Delete — Delete individual entries or uninstall the App to erase everything.
• Export — Export journal entry videos to your Photo Library.
• Portability — Your videos are standard formats that work anywhere.

10. International Users

The transcription processing described in Section 1.3 may involve data transfer to servers located in the United States (OpenAI's infrastructure). By using Ember's response feature, you consent to this transfer. All transmissions are encrypted and anonymized.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the App after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or your data, contact us at:

melv00705@gmail.com