Privacy
Privacy notice · Updated 4 October 2026
Who is responsible?
The operator identified in the legal notice is responsible for this service. Contact support@home-journal.ch for privacy questions, access, corrections or deletion requests.
Account and technical data
We process your email address, optional first name, identity-provider identifier, language preference, workspace memberships, devices and plan usage to provide access and operate the service. Authentication uses Keycloak. Hosting systems process IP addresses and technical request/error information for delivery and security. We do not use advertising trackers or analytics on this website.
Encrypted content and recovery
Item content, notes and files are encrypted on your device before upload. Decryption keys stay on approved devices or in your recovery kit. Account information, workspace names, memberships, identifiers, timestamps and file sizes are readable service metadata. Keep your recovery kit safe: resetting your sign-in password does not restore decryption keys.
Hosting, email and notifications
The app is hosted on an Infomaniak server; the public website and email use Hostpoint. Email verification and password recovery send account emails through Hostpoint. Notifications are optional and off by default. If enabled, task titles, due dates and completion information are processed as readable notification metadata; browser push uses Apple, Google or Mozilla services and may involve processing abroad. Disable notifications in Settings to stop future notifications.
Cookies and device storage
The app uses necessary cookies for sign-in and language preferences, and device storage for encrypted local data, approved-device keys and remembered settings. Logging out clears account access and pending shared files on that device. The public website stores no tracking identifiers and requests only public plan information from the app without account cookies.
Retention, deletion and shared workspaces
Account and workspace data are retained while needed to provide the service. You can delete your account in Settings after fresh authentication and confirmation. Account-only workspaces are removed; shared content remains for other members, with required handovers and key rotation. Copies already held by other members cannot be recalled. Encrypted operational backups may retain earlier data until their snapshots are removed; account deletion does not rewrite backup history. An opaque identity digest remains to reject delayed sign-in callbacks.
Export and your choices
You can export an unlocked workspace as a readable ZIP with structured data and original files. Store exports securely. Large exports need a supported desktop browser; the fallback download is limited to 250 MiB. An export is not a recovery kit and cannot currently be imported to restore a workspace. For access, correction or privacy concerns, contact support; we cannot read or recover your encrypted content without your keys.