Privacy, without fine print.

What stays on your iPhone

Journal entries, drafts, selected photos, moods, prompts, reminders, and preferences are stored on your iPhone. The archive works offline.

A local archive

First Person does not require an account or connection to write, browse, search, or revisit your journal.

What the app collects

First Person does not send journal content to the developer. Optional product analytics are off by default. If enabled, they include allowlisted feature activity, purchase status, app build, and a UTC calendar day linked to a resettable installation identifier. They never include journal text, prompts, moods, photos, people, places, or entry identifiers.

Raw events and inactive installation records are deleted within 180 days. Turning sharing off requests deletion of uploaded raw events, clears the local outbox and resettable identity, and stops collection. Unlinkable aggregate cohort counts may remain.

Exports and backups

Exports begin only when you request them. You can export readable Markdown or create an encrypted First Person backup containing journal data and selected photos. First Person never stores your recovery phrase.

Permissions and protection

iOS handles Face ID, Touch ID, device passcode, photo selection, and notifications. First Person receives only the access needed to perform the action you chose.

Deletion

Your local archive remains until you delete memories, erase the archive in Settings, or delete the app. Apple-managed device backups are controlled separately through your system settings.

This website

This site adds no advertising or analytics. Its hosting provider may process ordinary request logs, such as IP address, browser details, requested page, and time of access, to deliver and secure the site.

Questions

A monitored privacy contact will be published before the beta opens. Until then, check the support page for current information.