Privacy Policy

What Sorushi is

Sorushi is an AI-powered journaling app that helps you reflect on your thoughts through pattern detection, challenges, coaching, and weekly reports. Your journal entries are private by default and only accessible to you.

Data we collect

• Account info - name, email address, and profile picture (via Google sign-in or email magic link).
• Journal entries - titles, content, mood selections, and tags you create.
• AI-generated data - insights, challenges, coaching prompts, and weekly reports produced from your entries.
• Usage analytics - page views and feature usage (via PostHog) using sessionStorage only, which is cleared when you close the tab. No cookies are set for analytics.
• Error reports - crash and error diagnostics to fix bugs (via Sentry), including a fully masked session replay when a client-side error occurs. No journal content is included in error reports; see Third-party services below for what masking means.
• Prompt-pack emails - if you ask us to email you a set of journal prompts from the prompts library, we store that email address, which set you asked for, and how far through the follow-up series you are. This does not create an account and is kept separate from any journal. We use it only to send you the prompts you requested and one prompt a day for the following week, after which we stop on our own. You can unsubscribe from the link in any of those emails at any time.

How we use AI

Your journal entries are processed by Anthropic (Claude) to generate reflections, detect patterns, and provide coaching. Embeddings used for semantic search and pattern detection are generated locally on our infrastructure and are never sent to a third-party AI provider. Important details:

• Anthropic processes your text only to generate responses for you, under terms that prohibit training on your data.
• AI-generated content (insights, challenges, reports) is stored in your account so you can access it later.
• Embeddings (numerical representations) of your entries are generated locally using a small open-source model running inside Sorushi, then stored alongside your entries. They never leave our servers.

Where your data is stored

Your data is stored in MongoDB Atlas (cloud-hosted database) and is encrypted at rest and in transit. The application is hosted on Vercel. Background jobs use Upstash Redis for queue management.

What we don't do

• We do not sell your data to third parties.
• We do not show you ads.
• We do not share your journal content with other users.
• We do not read your journal. The admin tools we use to run Sorushi show account details only, such as your email address, name, plan, sign-up date, how many entries you have and when you last wrote. They never show what you write, and they are built so they cannot decrypt it.
• We do not use your data to train AI models.
• We do not set cookies for analytics or tracking. PostHog uses sessionStorage only, which is cleared when you close the tab.

Data retention and deletion

Your data is retained as long as your account is active. You can delete individual entries at any time, and you can erase your data yourself from the Settings page - no request to us required. Two options are available there:

• Delete all data - permanently removes every entry, journal, AI insight, challenge, goal, and report, while keeping your account open so you can start again.
• Delete account - removes all of the above plus your user record, sign-in credentials, and active sessions, then signs you out. Deletion is immediate and permanent; we cannot restore an account afterwards, so export your entries first if you want a copy. If you answer the optional “main reason” question while deleting, we keep only that answer and roughly how long the account existed, with no link to you.

Both actions require typing a confirmation phrase, and both delete the data outright rather than flagging it as hidden. You can also export everything as JSON or Markdown from Settings at any time. If you would rather we did it, or you have trouble signing in, contact us and we will process the request promptly.

If you only ever gave us an email address for a prompt pack, unsubscribing stops all email to it, and you can ask us to delete the address outright.

Third-party services

• Anthropic (Claude) - AI text generation for challenges, insights, and coaching. This is the only third-party AI provider that receives your journal content.
• Vercel - Application hosting and serverless functions.
• MongoDB Atlas - Database hosting.
• PostHog - Privacy- respecting product analytics (no cookies).
• Sentry - Error monitoring and performance tracking. When a client-side error occurs, Sentry also records a session replay of the moments around it. Every replay is captured with all text, all form inputs, and all media masked, so journal content cannot be reconstructed from one. We never attach your IP address, cookies, or request headers to any report.
• Vercel Analytics and Speed Insights - aggregate page-view counts and page-load timings. Cookieless, and not tied to your account.
• Resend - Email delivery. Resend receives your email address, your name, and the contents of each email we send you: sign-in links, reminders and nudges, notices about your plan, prompt packs you ask for, occasional personal notes from the founder, and your weekly and monthly report emails. Report emails include a short summary of the period, its main themes, and one short quote from your own entries. They are the only emails that carry journal content. You can turn them off in Settings under “Emails from Sorushi”.
• Lemon Squeezy - Payment processing, if you choose to pay. Lemon Squeezy is the merchant of record and handles your card details directly; we never see or store them. We receive your plan and subscription status. It never receives your journal content.

Contact

If you have questions about this policy or want to request data deletion, email hello@sorushi.com. You can also reach out on X (@RufsanH).