Privacy Policy
Privacy-First Design: Prismo stores all your personal data (journals, knowledge items, settings) locally on your device. We don't have access to your private content, and your data never leaves your device unless you explicitly use AI-powered features.
1. Introduction
Welcome to Prismo ("we," "our," or "us"), developed by Alexis Thomas. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.
We are committed to protecting your privacy and being transparent about our data practices. Please read this policy carefully to understand how we handle your information.
2. Information We Collect
2.1 Data Stored Locally on Your Device
The following data is stored only on your device and is never transmitted to our servers:
- Journal Entries: Your personal journal entries, including text content, tags, and timestamps
- Knowledge Items: Notes, facts, and information you save for learning
- Folder Organization: How you organize your knowledge library
- Quiz Progress: Your quiz scores, learning progress, and spaced repetition data
- Achievement Progress: Your unlocked achievements and milestones
- App Settings: Your preferences, including notification settings and display name
- Attached Images: Photos and screenshots you attach to entries
2.2 Data Processed for AI Features (Premium)
When you use AI-powered features (available to Premium subscribers), the following data is temporarily processed:
- Journal Analysis: Journal content is sent to generate insights and identify patterns
- Knowledge Extraction: Journal entries are analyzed to suggest knowledge items (Knowledge Sync feature)
- Quiz Generation: Knowledge items are used to create personalized quizzes
Important: AI-processed data is not stored on our servers. It is processed in real-time via Google's Gemini AI and immediately discarded after generating results.
2.3 Analytics Data (With Your Consent)
If you grant tracking permission (iOS App Tracking Transparency), we collect:
- Anonymous Usage Analytics: Screen views, feature usage patterns, and app interactions
- Crash Reports: Technical error information to improve app stability
- Performance Metrics: App response times and performance data
You can deny tracking permission, and we will still collect limited anonymous analytics that don't require tracking consent (aggregate usage data without personal identifiers).
2.4 Subscription Data
We collect subscription-related information through RevenueCat:
- App User ID: An anonymous identifier to manage your subscription
- Subscription Status: Whether you have an active Premium subscription
- Purchase History: Records of your in-app purchases
Payment processing is handled entirely by Apple (App Store) or Google (Play Store). We never receive or store your payment card details.
3. How We Use Your Information
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Provide core app functionality | Local device data | Contract performance |
| AI-powered insights & quizzes | Journal & knowledge content | Your consent (opt-in feature) |
| Manage Premium subscriptions | Anonymous user ID, subscription status | Contract performance |
| Improve app performance | Anonymous analytics, crash reports | Legitimate interest / Consent |
| Send notification reminders | Notification settings | Your consent |
4. Third-Party Services
4.1 RevenueCat
Manages in-app subscriptions and purchase validation.
4.2 Firebase Analytics (Google)
Provides anonymous usage analytics to help us understand how users interact with the app.
4.3 Sentry
Captures crash reports and errors to improve app stability.
4.4 AWS (Amazon Web Services)
Provides secure cloud infrastructure for our API and AI processing.
4.5 Google (Gemini)
Powers AI features including journal analysis, knowledge extraction, and quiz generation. Data is processed but not stored or used for training.
Google Gemini Privacy Policy →
4.6 ML Kit (Google)
Provides on-device text recognition (OCR) for image attachments. All processing happens locally on your device.
5. Data Storage & Security
5.1 Local Storage
Your personal data (journals, knowledge, settings) is stored locally on your device using encrypted storage. This data is protected by your device's security features (passcode, Face ID, Touch ID).
5.2 Cloud Processing
When using AI features, data is transmitted securely using:
- HTTPS/TLS encryption for all API communications
- JWT (JSON Web Token) authentication
- AWS security infrastructure with SOC 2 compliance
5.3 Data Retention
- Local Data: Retained on your device until you delete it or uninstall the app
- AI Processing: Data is processed in real-time and not retained
- Analytics: Anonymized data retained per third-party service policies
- Subscription Data: Retained by RevenueCat as per their retention policy
6. Your Rights & Choices
6.1 Access & Control Your Data
Since your data is stored locally on your device, you have full control:
- View: Access all your data directly in the app
- Export: Use the Export feature in Settings to download your data
- Delete: Delete individual entries or all data by uninstalling the app
6.2 Analytics & Tracking Choices
- iOS Users: You can manage tracking permissions in iOS Settings → Prismo
- All Users: You can disable AI insights in the app's Settings
6.3 Subscription Management
Manage your subscription through the App Store (iOS) or Play Store (Android) settings.
7. International Data Transfers
Our servers are located in the United States (AWS us-east-1 region). If you're located outside the US, your data may be transferred to and processed in the US when using AI features. We ensure appropriate safeguards are in place for such transfers.
8. Children's Privacy
Prismo does not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.
9. California Privacy Rights (CCPA)
California residents have additional rights:
- Right to know what personal information is collected
- Right to delete personal information
- Right to opt-out of the sale of personal information (we do not sell your data)
- Right to non-discrimination for exercising your rights
10. European Privacy Rights (GDPR)
If you're in the European Economic Area (EEA), you have rights including:
- Right to access your personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to data portability
- Right to object to processing
- Right to withdraw consent
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or by other means. Your continued use of Prismo after changes indicates acceptance of the updated policy.
12. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us through the feedback form in the app's Settings.
Developer: Alexis Thomas
