Privacy Policy

Last updated: June 14, 2026

Pim is a gentle journaling companion. It's built on a simple promise: the private things you write should stay private. This policy explains, in plain language, what Pim stores, where it lives, who can see it, and the control you have over it.

Pim is developed by Monocraft Labs ("Pim," "we," "us"). If you have any questions, reach us at hello@getpim.app.

The short version

1. What Pim stores, and where

On your device and in your iCloud. The content you create stays on your iPhone, in the app's private storage:

If iCloud is enabled on your device, this data also syncs through your personal iCloud account (Apple's private CloudKit database), so it isn't lost if you change phones. That database is tied to your Apple Account and protected by Apple; we cannot read its contents. This data is the source of truth — we do not hold a full copy of it on our servers.

In your private cloud account. So that Pim can feel like it remembers you across days and conversations, a small amount of derived information is stored in a private account tied to your sign-in:

This account is protected so that only you can access its contents (see Security, below).

Account information. You can create your account in two ways:

We use this information only to create and secure your account.

Purchase information. If you subscribe to Pim PRO, the purchase is processed entirely by Apple. We receive subscription status (for example, "active" or "expired") tied to an anonymous identifier so the app can unlock PRO features — never your payment details.

Diagnostic and usage information. We keep minimal operational data, such as counters used to rate-limit requests and prevent abuse. To understand how Pim is used and to keep it working, we also record privacy-preserving product analytics — counts of actions (for example, that a journal entry was created, or that a chat message was sent), never the content of what you write. These events are tied to your account identifier and your device identifier, with your IP address not recorded. Pim contains no advertising and no cross-app tracking, and we never put your journal, mood, or chat content into analytics.

Streamed content. Pim's guided meditations, relaxing sounds, and the gentle ambient backgrounds behind them are streamed from our content delivery network as you play them. They are the same for everyone — fetching them works like loading any file from the web, sending only the standard request information (such as your IP address) needed to deliver the audio or video, and never your journal, mood, or chat content. The audio you hear is not recorded or sent anywhere.

2. How your words are processed by AI

Pim uses AI in two ways:

For the cloud path, your text is used only to generate Pim's response or a memory note in the moment. It is not used to train any AI model and not published, and we configure our AI routing to exclude training and data-publishing endpoints. We do not store your full text; the provider processes it transiently and may retain it only briefly, in automated form, to guard against abuse. Only the short distilled notes — never your full text — are saved afterward.

3. Who we share data with (service providers)

We don't sell your data or share it for advertising. We use a small set of service providers ("subprocessors") strictly to run Pim:

ProviderPurposeWhat it handles
AppleSign in with Apple, iCloud sync, App Store purchasesYour account identifier, the name/email you choose to share, and your iCloud-synced app data (readable only by you)
SupabaseAccount, database, and backend hostingYour email address (if you sign up with email), distilled memory notes, portrait, and embeddings
OpenRouter (routing to Google Gemini)AI processing for chat and memory distillationYour message text, transiently — never used for training or publishing
AmplitudeProduct analytics (how Pim is used)Content-free usage events, your account identifier, and a device identifier — never your journal, mood, or chat content
RevenueCatSubscription managementYour subscription status and your account identifier — no payment details
ResendTransactional email (e.g. password reset codes)Your email address and the message we send you
CloudflareContent delivery (meditations, sounds, ambient video) and website hostingThe standard request information needed to deliver a file (such as your IP address) — never your journal, mood, or chat content

Each provider may process data in accordance with its own privacy and security commitments. We may also disclose information if required by law, or to protect the safety of a person.

4. Your control and your rights

Depending on where you live, you may have rights under laws such as the GDPR or the CCPA, including the right to access, correct, delete, or receive a copy of your data, and to object to certain processing. You can exercise the core of these rights directly in the app, or contact us at hello@getpim.app for any request. We do not sell personal information.

5. Data retention

6. Security

Your account data is stored with encryption in transit and at rest, and is protected by row-level access controls so that each account can only ever read or modify its own data. No system is perfectly secure, but we work to protect your information and to keep what we store about you minimal by design.

7. Children

Pim is intended for users aged 13 and over, and we don't design Pim for or market it to children. During setup we ask for your date of birth, and if you enter a date showing you are under 13 we ask you not to continue. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, please contact us and we will delete it.

8. Pim is not medical care

Pim is a supportive journaling companion. It is not therapy, not a medical or mental-health service, and not a substitute for professional care. It cannot diagnose, treat, or respond to emergencies. If you are in crisis or may be in danger, please contact a professional or a crisis line — you can find one for your country at findahelpline.com. In the US, you can call or text 988 (Suicide & Crisis Lifeline). If someone is in immediate danger, call your local emergency number.

9. International users

Our service providers may process data in different countries. By using Pim, you understand your information may be processed in locations with different data-protection laws than your own. We rely on appropriate safeguards for such transfers where required.

10. Changes to this policy

We may update this policy as Pim evolves. When we make material changes, we'll update the date at the top and, where appropriate, let you know in the app. Continued use of Pim after an update means you accept the revised policy.

11. Contact

Questions, requests, or concerns? Email hello@getpim.app.

Pim — a friend who remembers how you felt.