Rescript Journal Privacy Policy
Welcome to Rescript Journal
Rescript is a private place to write what you're carrying: the letter you'll never send after a breakup, the words for someone you've lost, the loop that won't quiet down at 2am. What you write here matters, so this policy explains plainly what we collect, where it goes, who helps us run Rescript, and what you can do about it.
Rescript Journal is run by Mangosteen Studio, LLC (“Mangosteen Studio,” “we,” “us,” or “our”), headquartered in San Francisco, California (mangosteen.studio). We are the controller of the personal information described here. In this policy, the “Service” means the Rescript iPhone and Android apps, the web app at app.rescriptjournal.com, and this website, rescriptjournal.com.
1. What We Collect
a. Your account
- Account details: your email address, the name you give us, and your login. You can sign in with email and password, Google, or Apple.
- Profile photo: if you add one.
b. What you write
- Entries: your Healing and Mindful entries and your Letters, including any photos you add to them.
- Letter details: the name of the person or thing a letter is for, and a no-contact start date if you set one.
- Your lane: what brought you here (for example a breakup, grief, job loss, night spirals or rumination), so prompts and reminders fit you.
- AI reflections: the reflections generated from your writing when AI reflections are on (see section 3).
c. Settings, devices and usage
- Notification preferences and push tokens so we can send the reminders you've chosen.
- App activity: which features you use and when, such as starting or finishing an entry.
- Device information: device type, operating system, app version and IP address, used for security, diagnostics and crash reports.
d. Subscriptions and support
- Subscription status: your plan, trial and renewal status. Card details are handled by Apple, Google or our web checkout provider; we never see your full card number.
- Messages to us: anything you send when you email [email protected].
2. Where Your Writing Is Stored
Your entries (Healing, Mindful and Letters), recipient names, no-contact start dates, your chosen lane, AI reflections and notification preferences are stored on our servers. That is what lets you start a letter on your phone and finish it on the web. A draft may stay on your device until you save it. Rescript does not offer a local-only mode. Photos are stored in Google Cloud Storage (Firebase).
3. AI Reflections
Rescript is a place to write, not a chatbot and not therapy. AI reflections are an optional feature that offers a gentle response to what you've written. The AI reflections setting is on when you start, and you can switch it off at any time in Settings.
When AI reflections are on, we send:
- A finished Healing or Mindful entry, to generate a reflection (the feelings it carries, recurring themes, and suggestions for what to write next).
- An in-progress letter, from time to time while you write, to suggest a gentle next prompt. Along with it we send the kind of letter and what it's about (for example a breakup or grief), so the prompt fits.
- The first 400 or so characters of a sealed letter, to label its emotional tone.
- When you finish a Healing journey, all of its entries together, with the reflections already written for them, to write a summary of the journey.
How it works
- Provider: AI reflections are generated by Google Gemini, on Google's paid API tier. Under those terms, Google does not use our API data to train its models. Google may process requests for abuse monitoring under its own terms.
- Your name stays out: we do not send your name with your writing.
- Looking out for you: when we ask for a reflection, we also ask the model to notice signs of acute distress so the app can show you crisis resources. This is automated. No person reviews it, and it is not a diagnosis.
- When it's off: nothing you write is sent to the AI.
4. How We Use Your Information
- To run Rescript: to keep your account, store and sync your writing across devices, and show your letters, entries and no-contact count.
- For AI reflections: only while that setting is on, as described in section 3.
- To stay in touch: reminders you can control, account and security messages, and replies to support requests.
- To improve the product: using pseudonymous usage events and crash reports, not your entry text (see section 6).
- To handle subscriptions and keep the Service secure.
- No data sales, no ads: we do not sell your personal information, and we never use your writing for advertising or marketing.
5. Notifications and Email
- Reminders: we may send reminder emails and push notifications, some shaped by the lane you chose.
- “Your reflection is ready”: for new accounts these notifications are off unless you turn them on.
- Your control: reminder emails link to your notification settings, where you can turn reminder emails and push notifications off at any time. We'll still send essential account messages, such as sign-in or security emails.
6. Analytics in the Apps
To understand what helps and what breaks, the iPhone, Android and web apps use Mixpanel (product analytics), Firebase Analytics and, on mobile, Firebase Crashlytics (crash reports).
- What they receive: a pseudonymous account ID, device and app information, and usage events (for example “letter saved”).
- What they don't receive: your name, your email address, your entry text, recipient names, or your emotional lane.
- Session replay: Mixpanel records a sample of app and web sessions so we can see where people get stuck. All text and inputs are masked, and journal writing screens are blocked from recording.
- Cookies: in the web app these tools may use cookies or similar storage to recognise a returning browser.
7. Website Analytics and Recordings
On our public website and blog, you can choose to allow Google Analytics to measure page visits, article reading, and links into Rescript. You can separately allow Microsoft Clarity to create heatmaps and masked recordings of clicks and scrolling. These optional website tools load only after you say yes. Clarity is not installed inside the private journal app, and we do not send journal writing or photos to it.
Google Analytics and Clarity may use cookies and device or browser information to understand visits. We use this information to improve the website. Change or withdraw your choice using “Privacy choices” in the footer. Withdrawal stops future optional collection; it does not remove data already collected.
Read the Google Privacy Policy and Microsoft Privacy Statement for details about these providers.
8. Who Helps Us Run Rescript
We share information only with the service providers below, only for the purpose listed, and they process it on our behalf. We may also disclose information if the law requires it, or to a successor if Mangosteen Studio is involved in a merger or sale, in which case this policy continues to apply.
| Provider | What for | What it receives |
|---|---|---|
| DigitalOcean | Hosting our servers and database (PostgreSQL), which store your account and journal data | Account details, entries (titles and text encrypted at rest), letter details, lane, AI reflections, settings |
| Google Cloud / Firebase | Sign-in (including Google and Apple sign-in), photo storage, push notifications (FCM), Firebase Analytics, Crashlytics crash reports | Email, login identifiers, photos you add, push tokens, pseudonymous usage events, device and crash information |
| Google Gemini | AI reflections, next-prompt suggestions and letter tone labels (only while AI reflections are on) | Entry text, in-progress letter text with the kind of letter and what it's about, the opening of sealed letters, and a finished Healing journey's entries and earlier reflections together. Not your name |
| Mixpanel | Product analytics and masked session replay | Pseudonymous account ID, device and app information, usage events, masked session recordings |
| RevenueCat | Subscription management, including web checkout | Pseudonymous account ID, purchase and subscription status |
| Apple App Store / Google Play | Payments for subscriptions bought in the mobile apps | Purchase details, under Apple's and Google's own privacy policies |
| Resend | Sending email (reminders, account messages, journal exports) | Email address and the content of each email (which may include your name), including any journal export you request |
| Google Fonts | Loading fonts on the website, web app and mobile apps | IP address and browser or device information |
| YouTube (Google) | Playing embedded videos in the resources section of the mobile and web apps | IP address, device or browser information, and what you watch, under Google's privacy policy |
| Amazon image CDN (m.media-amazon.com) | Loading book cover images in the resources section of the apps | IP address and browser or device information when an image loads |
| SAMHSA crisis-resource page (embedded) | Showing crisis resources in the app | IP address and browser information when the page loads |
| Google Analytics 4 and Microsoft Clarity | Website analytics and masked recordings, only with your consent | Pages visited, clicks and scrolling, device and browser information, cookies |
9. Keeping Your Writing Safe
- In transit: everything sent between your device and our servers is encrypted with TLS.
- At rest: the title and text of your entries and letters are encrypted with AES-256-GCM, using a key held separately from the database. Rescript is not end-to-end encrypted. Everything else we store, including AI reflections, recipient names, account details and settings, is protected by access controls rather than this extra encryption.
- No human reading: we don't read your entries. Staff with database access can't read entry titles or text without the separate key. We would only look at an entry if you ask us to while helping with a support request, or if the law requires it. Google's abuse monitoring may apply to text sent for AI reflections, under its terms (see section 3).
- No guarantees: no system is perfectly secure, but we work to protect your information and will tell you about a breach where the law requires.
10. Deleting Your Writing and Your Account
- Burn or Release: erases the letter's text and photos from our servers immediately. It can't be undone.
- Deleting an entry: deleted entries are permanently erased after about 30 days.
- Deleting your account (in Settings): immediately and permanently deletes your profile, entries, letters, photos, AI reflections, notification tokens and login, and your subscriber record with RevenueCat.
- Backups: copies can remain in our encrypted database backups for up to 7 days before they're overwritten.
- What others keep: pseudonymous usage events in Mixpanel are kept, without your name, email or lane. Firebase Analytics and Crashlytics keep app usage and crash data for their standard retention period, without your name, email or entry text, and deleting your account doesn't remove it. Apple and Google keep their own purchase records. Our email provider may keep delivery logs for a limited period. Cancel any subscription in your App Store or Google Play account too, as deleting your Rescript account doesn't cancel billing there.
11. How Long We Keep Things
| Information | How long |
|---|---|
| Account profile and login | Until you delete your account |
| Entries, letters, photos and AI reflections | Until you delete them. Burn and Release erase immediately; other deleted entries are erased after about 30 days; everything is deleted immediately when you delete your account. Backup copies are covered below |
| Encrypted database backups (account profile, login details, push tokens, entries, letters and AI reflections) | Up to 7 days, then overwritten |
| Notification preferences and push tokens | Until you delete your account or a token stops being valid |
| Pseudonymous usage events (Mixpanel) | Kept after account deletion, without your name, email or lane |
| App usage and crash data (Firebase Analytics, Crashlytics) | Kept for Google's standard retention period, without your name, email or entry text; not removed when you delete your account |
| Subscriber record (RevenueCat) | Until you delete your account |
| Purchase records (Apple, Google) | Kept by Apple and Google under their own policies |
| Email delivery logs (Resend) | A limited period set by our email provider |
| Support emails | As long as needed to help you and keep a record of the request |
| Website analytics (with consent) | According to the retention settings of Google Analytics and Microsoft Clarity |
12. Exporting Your Journal
You can export your journal from Settings. We create a PDF of your entries and AI reflections and email it only to the email address on your account.
13. If You're in the EEA or UK
Why we're allowed to use your information
- Contract: to provide the Service you signed up for, including storing and syncing your writing and managing your subscription.
- Contract and legitimate interests: AI reflections are part of the Service as offered, and providing them is in our legitimate interest. They are on by default and you can switch them off in Settings at any time; doing so stops all sending to the AI.
- Legitimate interests: in-app analytics, crash reports, security, and reminder messages you can switch off.
- Consent: Google Analytics and Microsoft Clarity on this website, which load only if you say yes.
- Legal obligation: where the law requires us to keep or disclose information.
Writing about how you feel
What you write may reveal things about your health or emotional life. You choose what to write. We use it only to provide the Service you ask for, including AI reflections while they're on.
International transfers
We are based in the United States, and our providers process information in the US and other countries. Where information moves out of the EEA or UK, we rely on our providers' standard contractual clauses (and the UK addendum) to protect it.
14. Your Rights
Wherever you live, you can ask us to:
- Access the personal information we hold about you.
- Correct anything that's wrong.
- Delete your information. You can delete entries or your whole account yourself in Settings.
- Export your journal (Settings) or receive a copy of your data.
- Object to or restrict processing based on legitimate interests, including switching off AI reflections.
- Withdraw consent for website analytics at any time through “Privacy choices”.
Email [email protected] to make a request. We may need to confirm it's you, and we won't treat you differently for using these rights. California residents have the right to know, delete and correct, and the right to opt out of sale or sharing; we do not sell your personal information or share it for cross-context behavioural advertising. If you're in the EEA or UK, you can also complain to your local data protection authority (in the UK, the Information Commissioner's Office).
15. Age Requirement
Rescript is for people aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has an account, email us and we'll delete it.
16. Changes to This Policy
We may update this Privacy Policy as Rescript changes. The date at the top shows when it last changed. If we make significant changes, we will post a notice in the app and, where appropriate, email you before they take effect.
Contact Us
Questions about this policy, or want to use your rights? Email [email protected]. Mangosteen Studio, LLC, San Francisco, California. mangosteen.studio
In Short
- Your letters stay unsent: Rescript never sends or publishes what you write.
- No data sales: we do not sell your information or use your writing for marketing.
- AI is your choice: switch AI reflections off in Settings and nothing you write goes to the AI.
- You own your growth: delete an entry, a letter or your whole account whenever you want, no questions asked.