Privacy Policy
Your privacy is not just a policy—it's our core product feature.
Last Updated: July 29, 2026
At Rojlekho, we believe that your thoughts, feelings, and memories belong to you and you alone. Your journal entries are protected with end-to-end encryption, so they leave your device already scrambled and even we cannot read them. This page explains exactly what we collect, what we don't, and the choices you have.
No Data Selling
We do not sell, rent, or trade your personal data to advertisers or third parties. Ever. We also never use your journal to train AI.
End-to-End Encrypted
Your entries are encrypted on your device before they reach us. We store only ciphertext we cannot decrypt—your words are for your eyes only.
1. End-to-End Encryption
Rojlekho uses true end-to-end encryption (E2EE) for your journal content:
- Your entries are encrypted on your own device using a key that only you hold. We receive and store only the encrypted result.
- Because we never hold the key, we cannot read your entries, and neither can anyone who might compromise our servers.
- When you save your recovery kit, you can restore access on a new device. If you lose both your password and your recovery kit, your entries cannot be recovered by anyone—including us. This is the trade-off that makes them truly private.
2. Data We Collect
We collect the minimum amount of data necessary to provide our service:
- Account Information: Your email address and name. You sign in with an email and password or with your Google account.
- Device & Security Information: Browser type, operating system, and approximate region—used to keep your account secure (for example, to alert you about a sign-in from a new device) and to fix bugs.
- Usage Data: We collect anonymised product analytics to understand how features are used and improve the app. This never includes your journal content, and you can opt out at any time (see Cookies below).
- Metadata: Non-content details such as entry dates, streaks, and mood selections so the app can show your calendar, insights, and progress.
3. Third-Party Services
We partner with a small set of trusted providers to deliver the service. They only receive the data they need to do their job, and never your decrypted journal content:
Optional sign-in with Google
PostHog & SiteBehaviour
Consent-based product analytics & heatmaps
Razorpay & Lemon Squeezy
Secure payment processing for Pro plans
Sarvam AI
Voice-to-text for voice journaling
Cloudflare
Content delivery, security & bot protection
Voice journaling sends only the audio you choose to transcribe to Sarvam AI and is not used to train their models. Payments are handled entirely by our payment providers—we never see or store your full card details.
4. Cookies & Analytics
We use essential cookies to keep you signed in and secure. Analytics cookies (PostHog and SiteBehaviour) are on by default to help us improve the app, and you can opt out of them anytime from our cookie banner with no loss of functionality. For the full breakdown, see our Cookie Policy.
5. Your Rights
You have full control over your data. You can:
- Access and export your journal entries at any time.
- Update your personal information via account settings.
- Decline analytics cookies at any time from the cookie banner.
- Delete your account permanently. (See our Cancellation Policy for details on the 30-day grace period).
6. Contact Us
If you have any questions about our privacy practices or need to exercise your rights, please contact us at: