Aafya Care
App privacy notice
Updated October 14, 2026. This notice describes account records, journal recovery, and the services used by the app.
What is saved
Aafya Care uses your signed-in account identifier and email to keep your records separate and check membership. Your reflections, check-in history, and latest reflection are stored in your account’s app records. These reflections are not encrypted with your journal code.
Your private journal
Your journal writing is encrypted in your browser before it is sent to app storage. Your six-digit code is not sent to our storage service. Email recovery uses a protected backup of your journal encryption key, encrypted separately on our server. A one-time recovery link is sent to your signed-in account’s email and lets you choose a new code while preserving saved entries. The link expires after 15 minutes. Journals created before this feature require one successful unlock with their original code to enable recovery; entries without a recovery backup cannot be restored after the code is lost. A six-digit code is a convenience lock, so protect access to your account and device as well.
Device and service storage
Your browser caches records for your signed-in account. Sign out from Account & privacy to clear that device’s cached records. Aafya Care uses email verification codes and secure session cookies for sign-in, ChatGPT Sites for hosting, and Cloudflare-backed storage. Sign-in codes expire after 10 minutes; sessions expire after 30 days or when you sign out. Their processing and infrastructure may take place outside your country. Unfinished journal drafts are encrypted and kept on the device where you wrote them. Saved entries sync through your account. Offline reflection changes are queued on that device until sync succeeds. Some fonts are loaded from Google Fonts, which receives ordinary network request information.
Optional voice transcription and links
If you choose voice transcription, your browser’s speech recognition service may process speech through its provider. Aafya Care does not save an audio recording in the journal. External product and affiliate links open services with their own privacy practices.
Your choices
Use Account & privacy to export or delete app records, or permanently delete your sign-in account and app records. Deleting app records leaves your sign-in account and billing membership in place. Account deletion does not cancel billing; an active Premium membership must be canceled and its access period must end before account deletion. Provider backups and technical logs follow the providers’ retention practices. Unless you delete them, records remain available in your account.
Membership
When you purchase a membership, Stripe processes payments and billing. Aafya Care stores your email, customer and subscription identifiers, plan, membership status, and paid-through date separately from journal writing. For the one-time Premium preview, Aafya Care records whether the offer was shown, declined, or activated, and its start and expiry times, linked to your signed-in account so the offer cannot be repeated. Aafya Care does not store your card details. Resend delivers membership confirmations and requested journal recovery emails using your email address and message content. Recovery messages contain a temporary link, not journal entries or your code. Stripe may send payment and billing messages according to its configured customer-email settings.
Contact
Privacy questions: hello@aafyacare.com.