Almanac Privacy Policy

Almanac holds photographs of your days, notes about how they went, and the people and places in them. That is not the sort of thing that should sit on someone else's server, so it does not: the app is offline-first, there is no Almanac account, and your entries stay on your device. This policy explains how that works and what limited data does leave the phone.

Every entry — photos, video, notes, mood, day score, weather, place, the people you tag and your tags — is stored in a local database on your device. We do not receive it, cannot read it, and hold no copy of it. Deleting a day removes it from the device; deleting the app removes all of it.

Almanac reads your photo library only to let you pick a frame for a day and, if you ask it to, to suggest one photo per past day while filling in your almanac. That scan runs entirely on your device and no image is uploaded anywhere as part of it.

• Media you pick is copied into the app's own folder, so a memory survives your phone clearing its cache or you deleting the original from the gallery.
• The photo-library permission can be limited to a selection you choose, or revoked, in your device settings.
• Filling in past days from your library is entirely optional; you can start with an empty almanac.

You can attach a place to a day. If you use your current location, the coordinates are resolved to a place name by your operating system's own geocoder and stored with that entry on the device. Location is never required, never collected in the background, and you can type a place name by hand or leave it out entirely. The map view is drawn from days you added a location to yourself.

Almanac has no sign-up, no login and no server-side profile. Your almanac is not synced to us or to any cloud service. The ways your entries can leave the phone are all deliberate: the JSON export, a share card you create, or the printable PDF you generate.

Settings has a one-tap JSON export of every entry, so your data is never held hostage by the app. Share cards and the printable A5 almanac are rendered on your device and go nowhere until you share, save or print them yourself.

With your permission, Almanac schedules local reminders: an evening nudge to close the day, an optional streak warning before midnight, a monthly summary, and "a year ago today". They are generated on your device and never pass through a server. The Home Screen widget shows only your streak, the number of days painted and whether today is done.

You can lock Almanac behind Face ID, Touch ID, your device's fingerprint or its passcode. Authentication is handled by the operating system; the app never sees your biometrics or your passcode. The lock protects the app on an unlocked phone rather than encrypting the device.

Almanac uses a small number of third-party services for purchases, diagnostics and advertising measurement. None of them receives your entries, photos, videos, notes or locations. Each processes limited technical or anonymous data under its own privacy policy, which you should review separately.

• Adapty — manages in-app purchases and Premium entitlements. The purchase layer is never told anything about your entries.
• Firebase (Google) — app diagnostics and anonymous usage analytics.
• Amplitude — anonymous, aggregate usage analytics such as which screens are reached.
• Meta SDK — advertising measurement, so we can tell which adverts brought people to the app.
• MapLibre — renders the optional map view from map tiles; only the area you are looking at is requested, and your entries are not sent with the request.

Analytics events describe how the app is used in an anonymous, aggregate form — that a day was saved or the recap was opened. They never contain your photos, notes, moods, scores, people or places. There are no adverts inside Almanac. On iOS, the app asks for tracking permission through Apple's App Tracking Transparency prompt; that permission is used only to improve the accuracy of advertising and analytics measurement, and declining it does not change anything about how Almanac works.

Almanac is not directed to children under the age required for consent in your jurisdiction and does not knowingly collect personal information from them.

Because your almanac lives on your device, you are always in control of it. You can delete any day, export everything to JSON, or remove the app entirely. There is no server-side record to request, correct or erase, because we never held one.

We may update this policy as the app evolves. Material changes will be reflected here with a revised “last updated” date. Continued use of Almanac after an update constitutes acceptance of the revised policy.

If you have questions about this Privacy Policy or how Almanac handles data, contact us at trackit.tr@gmail.com.