The fine print, plainly

Privacy Policy

Effective July 3, 2026 · Last updated July 3, 2026

The most personal app on your phone shouldn't feel like a surveillance product. ReEnchanted is built local-first: your journal, your kept pages, and everything you write live on your device, not on our servers. We don't have accounts, and we don't want your data.

This policy explains what ReEnchanted (“the app,” “we,” “us”) does and does not do with information, so you can decide with your eyes open. It applies to the ReEnchanted app for iPhone and iPad and to this website, reenchanted.app.

The short version

• No accounts. You never create a login. There is nothing for us to associate with you.
• Local-first. Your pages, saves, photos, and writing stay on your device. We can't see them.
• On-device intelligence. The app's “local brain” runs entirely on your device. Your writing is not sent to us or to an AI service to generate pages.
• No ads, no trackers, no analytics. We do not embed advertising, third-party trackers, or usage analytics SDKs.
• No selling data. We never sell, rent, or share your personal information. There is no data broker in here.

Information the app keeps on your device

Almost everything ReEnchanted does happens on your device and stays there. This includes your kept pages and drafts, the “Book of You” and monthly editions you bind, your in-world progress and belief, and any photos, notes, or audio you add to a page. This material is stored in the app's own storage on your device and, if you use iCloud device backup, within your personal encrypted Apple backup that we cannot access.

Device permissions you control

ReEnchanted asks for permissions only through explicit, revocable doorways, and only when a feature needs one. You can decline any of them and still use the app; you can change your mind later in the iOS Settings app. When granted, this information is used on your device to shape your pages and is not transmitted to us:

• Location — to anchor real places, fetch local weather, and color the day's pages.
• Health & motion (body) — optional signals that inform reflective pages. Health data is never sent off your device.
• Calendar — to weave upcoming or past events into the Book, on device.
• Photos — to illuminate a page with an image you choose. Photos you don't add to a page are not accessed.
• Notifications — gentle, optional nudges from the Book.

When information does leave your device

A few features reach the internet by design. When they do, only what that feature needs is sent, and only to the service that performs it:

Weather and local context

To show weather and local flavor, the app may request weather data for your approximate location from a weather provider (such as Apple Weather). Optional content sources you choose to enable (for example, public reference or news feeds) are fetched directly from their publishers.

Nutrition lookups

If you log food and ask for a rough nutrition estimate, the app may send the food description you typed to the U.S. Department of Agriculture's public FoodData Central API to look up typical values. No identity is attached to this request.

Purchases (content packs & the Standing Order)

In-app purchases — content packs and the auto-renewable Standing Order subscription — are handled entirely by Apple through the App Store. Apple processes payment and tells the app whether an item is unlocked. We never see your card number or full payment details. Apple's handling of that transaction is governed by Apple's Privacy Policy.

This website

If you join the launch/TestFlight list on this site, the email address you submit is stored with our email provider (Buttondown) solely to send you the one launch notice you asked for. You can unsubscribe at any time using the link in that email. The website does not run advertising or third-party analytics trackers.

Data retention and deletion

Because your journal lives on your device, you control it. Deleting a page removes it; deleting the app removes its on-device data from your phone (and from your Apple device backup on Apple's normal schedule). For a print order, we and our print/payment partners retain the order records needed to fulfill it and to meet tax and accounting obligations. To request deletion of information tied to a print order, email us at the address below.

Children's privacy

ReEnchanted is a general-audience app and is not directed to children under 13, and we do not knowingly collect personal information from children. Because the app has no accounts and keeps personal content on the device, it collects no personal information from any user by default.

Security

Keeping data on your device, protected by your device's own security, is the strongest privacy posture we can offer. For the limited information involved in a print order, we rely on reputable partners (Apple, Stripe, Lulu) that use industry-standard encryption in transit. No method of transmission or storage is perfectly secure, but we've minimized what's at risk by collecting as little as possible.

Your choices & rights

You can revoke any device permission in iOS Settings, decline any feature that reaches the internet, unsubscribe from our email list, and delete your data by deleting pages or the app. Depending on where you live, you may have rights to access or delete personal information we hold about a print order; contact us and we'll honor applicable requests.

Changes to this policy

If we change how the app handles information, we'll update this page and revise the “Last updated” date. Material changes will be reflected here before they take effect.

Contact

Questions about privacy? Write to hello@reenchanted.app. The app's engine is also open source under the MPL-2.0, so you're welcome to read exactly how it works.