Duskpen: AI Evening Journal
Effective date: 10 September 2026 · Last updated: 10 September 2026 · Version 1.2
This Privacy Policy explains how Duskpen (“the App”, “we”, “us”) handles your information. Duskpen is a mobile evening-journaling app for iOS and Android that lets you write a short nightly entry — by typing or by voice — track your mood, and build a streak habit. We designed the App to be private by default: your journal lives on your device, and we collect as little as possible. Please read this policy to understand what data is involved and the choices you have.
Duskpen is operated by HyperCode Solutions Kft., a company established in Hungary (European Union), reachable at hello@hypercodesolutions.io. As an EU-based operator, we act as the data controller for the limited personal data described below and process it in accordance with the EU General Data Protection Regulation (GDPR). If you have any questions about this policy or your data, contact us at that address.
We keep data collection to the minimum needed to run the App. We collect this data in three ways: directly from you, when you write, dictate, or select something in the App; automatically generated by the App itself, such as your anonymous account identifier and your streak history; and received from our providers, such as your subscription status from the app store via Adapty. We do not obtain data about you from data brokers or any other outside source. The table below summarises what is involved and where it lives.
We do not collect: your real name, email address, phone number, contacts, precise location, advertising identifiers, or browsing history. The App contains no advertising and no third-party analytics or tracking SDKs that profile you or track you across other apps and websites.
We do not use your journal content to train AI models, to advertise to you, or for any purpose other than delivering the features you use.
Legal bases (GDPR). We process your journal, reminder and subscription data to perform the contract you enter into by using the App (Art. 6(1)(b) GDPR). We process journal content for the AI features solely on the basis of your explicit consent (Art. 6(1)(a) GDPR), which you give in the App before any content is sent and may withdraw at any time (see §5 and §10). Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
Tapping the microphone dictates your entry using your device's built-in, on-device speech-to-text (Apple Speech on iOS, Android SpeechRecognizer on Android). This conversion happens locally. We do not record audio, and no voice audio is transmitted to us or to any AI provider. Only the resulting text becomes part of your entry, exactly as if you had typed it. Using the microphone requires your permission, which you can grant or revoke in your device settings.
AI reflection, adaptive follow-up questions, and weekly pattern insights are optional Premium features. They are the only features that send journal content off your device, and only after you have expressly permitted it.
Your explicit consent comes first. Before any journal content is sent for AI processing for the first time, the App shows you an in-app consent screen that states exactly what will be sent (the text of the entry you are submitting, together with the language your app is set to), who it is sent to (OpenAI, through our Firebase Cloud Functions backend), and what it is used for. No entry text leaves your device until you explicitly grant that permission. If you decline, your entry is simply saved locally and the AI features stay switched off; nothing else in the App changes. You can withdraw your consent at any time under Profile → AI features, which immediately stops any further transmission of journal content to OpenAI.
Premium is offered as a paid subscription. Purchases are made through the Apple App Store or Google Play, and we use Adapty to manage entitlements and present the subscription screen. We never see or store your full payment-card details — those are handled by the app store. Adapty and the store process your purchase and subscription status and a non-identifying purchase/installation identifier so we can confirm your Premium access and restore it across your devices. Your Premium entitlement is linked to your anonymous account identifier.
Your entries are stored in a local database on your device and are the primary copy of your data. The App does not sync or back up your general journal to the cloud. The only journal content that leaves your device is what you have consented to send to a Premium AI feature, which the backend then stores in Firebase Firestore (see §5). Data in transit is protected with industry-standard TLS encryption, and backend records are keyed to your anonymous identifier and access-controlled server-side. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your information.
Because your journal is stored locally and we keep no copy of it, deleting the App or wiping your device may permanently remove your entries, and we will not be able to recover them for you. If your device offers an encrypted device backup, that is the way to preserve them.
All permissions are optional and can be managed at any time in your device's system settings. Declining a permission simply disables the related feature; it never causes the App to crash.
We rely on a small number of service providers, strictly to operate the App:
Each provider processes data only as needed to deliver its part of the service, acting as our processor under a written data-processing agreement. We have reviewed these providers and confirm that they are contractually bound to provide a level of protection for your data equal to or greater than the protection described in this policy, including obligations of confidentiality, appropriate security measures, purpose limitation, and a prohibition on using your data for their own purposes or for advertising. We do not sell or rent your personal data to anyone, and we do not share it for advertising.
Duskpen is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect personal data from them. If you believe a child has provided us data, contact us and we will delete it.
Our service providers may process data on servers located in other countries, including outside the European Economic Area (for example, OpenAI and Adapty in the United States). Where data is transferred internationally, we rely on the safeguards offered by those providers, such as the European Commission's standard contractual clauses. By using the App you understand that your data may be processed in locations outside your country of residence.
We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you in the App. If a change materially affects how we handle journal content in the AI features, we will ask for your consent again. Continued use of the App after an update means you accept the revised policy.
Questions, requests, or concerns about your privacy? Email us at hello@hypercodesolutions.io and we will respond as soon as we reasonably can.
Duskpen Privacy Policy · Version 1.2 · Effective 10 September 2026.