01
Who we are and scope
Stoii.co is the developer and operator of the Stoii.co journaling and reflection service. In this policy, “Stoii.co,” “we,” and “us” refer to that operator. This policy applies when you use the Stoii.co website or app, contact us, or interact with related services.
Privacy questions and requests can be sent to our privacy contact at hello@stoii.co.
02
Data we handle
Depending on the features you choose, we handle:
- Account and profile data: display name, email address, password hash, community alias, optional city, account identifier, timezone, onboarding interests, and garden preferences. You may instead use a device-based account identified by a one-way hash of a secret kept on your device; you can later add an email address and password.
- Journal and reflection data: server-hosted Circle and Community Moments, photos, formatting, selected virtues, mood entries, duration and place you enter, daily check-ins, evening-review answers, prompt history, challenge progress, and guided reflections you save.
- Community data: Circle relationships and invitations, replies, reactions, visibility choices, aliases, and the dates and times of those actions.
- AI request data: the text, audio clip, transcript, language or locale hints, consent record, request status, and output needed for an AI feature you deliberately start.
- Purchase data: a pseudonymous app user identifier, product and entitlement, subscription status, and expiry information. Apple or Google handles your full payment details; we do not receive your full card number.
- Technical and support data: IP address, request and error logs, app, device, operating-system or browser information, security events, and anything you include when you contact support.
Your journal may contain sensitive information because you decide what to write. We process that information only to provide the features you choose and as otherwise described here.
03
Moments and visibility
On this device
The title, writing, blocks, manually entered place, mood, duration, and photos of a Private Moment are stored on your device. We receive only the server record needed for the service, such as its identifier, owner, private status, timestamps, and selected virtue tags.
People you accept
Circle Moments are uploaded to Stoii.co and can be read by you and members of your accepted Circle. Your Circle can also see the profile details the app displays to connected members.
Community audience
Community Moments are uploaded to Stoii.co and can be read by the community. Posting with an alias hides your direct account identity, but your words, photos, or context may still identify you.
Private Moment content is not backed up or synced by Stoii.co and may be lost if you uninstall the app, clear its data, lose the device, or delete the Moment. Publishing a Private Moment uploads its content. Taking a shared Moment private downloads it before the active server copy is removed. A Private Moment's text or audio leaves the device only if you publish it or deliberately use an AI-assisted feature as described below.
04
How we use data
We use data to:
- create and secure accounts, authenticate sessions, and provide customer support;
- store and display content according to the visibility you select;
- personalise prompts and operate check-ins, streaks, insights, gardens, and challenges;
- provide AI-assisted dictation and guided reflections when you request them;
- process subscriptions, restore purchases, and unlock paid features;
- maintain, troubleshoot, protect, and improve the reliability of the service; and
- comply with law, enforce our Terms, and protect users, Stoii.co, and others.
Where applicable law requires a legal basis, we rely on performance of our contract with you, your consent for optional features and permissions, our legitimate interests in operating and securing the service, and compliance with legal obligations. You may withdraw consent at any time, but this does not affect processing that already occurred lawfully.
We do not sell personal or sensitive data, and we do not use it for targeted advertising.
06
AI and device permissions
Intelligent dictation uses the microphone only after you choose the feature, see the in-app disclosure, consent, and grant microphone permission. When recording stops, the app sends the clip and language hints to Stoii.co and OpenAI for one-time transcription and writing assistance. The recording is deleted from the app's temporary storage after processing. Stoii.co does not keep the clip or raw transcript in its database, but retains the consent record and limited usage data.
Guided reflections send the selected Moment text to Stoii.co and OpenAI when you request one, including for a device-only Moment. A reflection you choose to keep may be stored with its Moment; a preview is not stored unless you attach it. OpenAI's processing is subject to its Privacy Policy.
Camera and photo-library access occurs only when you choose to add a photo. Uploaded photos are re-encoded to remove embedded metadata such as camera model and GPS tags. Stoii.co does not request device-location permission; a city or place you type and your device's timezone are handled as described in this policy.
07
Retention
We keep account, profile, subscription, and server-hosted content while your account is active and for as long as needed to provide the service. We keep support, security, fraud-prevention, and legal records only for as long as reasonably necessary for those purposes. A visibility-change record or limited interaction record may remain after related content is made private to preserve security, integrity, or dispute history, but it is not shown as active public content.
When data is deleted from the active service, limited copies may remain temporarily in restricted backups or logs until they expire or are overwritten through our backup cycle. We may retain specific information longer when required by law or reasonably necessary to establish, exercise, or defend legal claims. We delete or de-identify data when it is no longer needed for these purposes.
08
Account and data deletion
You can delete individual Moments and other content using available app controls. To request deletion of your Stoii.co account and its associated server data, or selected personal data while keeping your account, use our account and data deletion request form. Send the request from your account email when possible; for a device-based account, tell us that you use a device account. We may ask for information needed to verify that the account is yours.
After verification, we delete the account and associated data from the active service rather than merely deactivating it, except for information we must retain for the limited legal, security, fraud, dispute, and backup reasons described above. We respond within the period required by applicable law. Cancelling a subscription or uninstalling the app does not by itself delete your server account.
Because we cannot access device-only Private Moment content, remove it in the app or clear the app's local data on each device. Uninstalling or clearing local data can permanently erase it; Stoii.co cannot restore it.
09
Security
We use safeguards designed to protect data, including HTTPS for data in transit, hashed passwords, secure device storage for session credentials, authentication and access controls, private cloud storage for uploaded media, and short-lived signed photo links. No system is completely secure, so we cannot guarantee absolute security. Contact us promptly if you believe your account or data has been compromised.
10
International transfers
Stoii.co and its providers may process data in the United States and other countries where they operate. Those countries may have different data-protection laws from yours. Where required, we use recognised safeguards for international transfers and require providers to protect data consistently with this policy and applicable law.
11
Your choices and rights
You choose a Moment's audience, whether to post under an alias, whether to join a Circle, whether to use AI features, and whether to grant microphone, camera, or photo-library permission. You can manage device permissions in system settings and stop using an optional feature at any time.
Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of personal data, and to withdraw consent. Email hello@stoii.co to exercise a right. We may verify your identity and will respond as required by applicable law. You may also complain to your local data-protection authority. We will not discriminate against you for exercising a privacy right.
12
Children
Stoii.co is not directed to children under 16, or below the minimum digital-consent age where they live, and we do not knowingly collect their personal data without valid parental or guardian consent. If you believe a child has provided data contrary to this section, contact us so we can investigate and delete it where required.
13
Website data
The Stoii.co landing page does not use advertising or analytics cookies. It stores a theme preference in your browser's local storage. Hosting systems may process basic request and security logs. The waitlist button opens your email application; Stoii.co receives the information only if you choose to send the email, and uses it to respond and notify you about availability.
14
Changes and contact
We may update this policy as the service, law, or our providers change. We will update the effective date and provide additional notice in the app or by other appropriate means when a change is material.
Questions, complaints, privacy requests, and account-deletion requests can be sent to the Stoii.co privacy contact at hello@stoii.co.