APP PRIVACY
How Story of My Life uses information, the choices you have, and how to get in touch.
App privacy notice, updated 4 October 2026. This notice covers the Story of My Life app. It supplements the website policy, which covers use of this website.
Story of My Life (SOML) is provided by FFPress in Perth, Western Australia. This notice explains information used by the SOML app. Privacy questions can be sent to su*****@*********om.au.
Local-only writing stays on your device unless you choose to sign in and synchronise it, export it or share it. Signing out stops account synchronisation but does not itself erase saved writing from the phone. Use the device data controls if you also want to remove that local copy. Keep exported copies somewhere you trust.
If you enable AI assistance, relevant writing and your questions may be processed by Google Gemini to support connections, search and suggestions within SOML. Context can include relevant exercises, values, goals, check-ins, decisions, plans and historical reflections within your account. AI is optional, is available only to adults who choose it, and does not replace your original writing without your choice.
SOML is configured to use Google’s paid Gemini API service. Under the paid-service terms, Google does not use submitted prompts or responses to improve its products. Google may log them for a limited period for safety, security and required legal disclosures. Processing is not restricted to Australia; Google’s terms allow temporary storage or caching in countries where Google or its agents maintain facilities. See Google Gemini data terms. Turning AI off in Profile stops new AI requests. Content already sent cannot be recalled. Local-only and demo writing is not sent to Gemini.
SOML uses Auth0 for authentication, Supabase for account data, Emergent for backend hosting, Google Play for Android subscriptions, Google Gemini for optional AI processing, and Sentry for sanitised crash diagnostics. Optional email updates and support use the configured email services. The primary Supabase database is in Australia, while Sentry diagnostic data is stored in the United States. Other providers may process information outside Australia, including for hosting, security and support. We do not promise Australia-only processing. We do not use journal writing for advertising.
App lock uses Android’s device authentication. SOML does not receive your fingerprint, biometric template or device PIN. Photo selection is user-initiated. Calendar handoff opens a calendar entry for you to review; SOML does not read your calendar. Notifications are optional. Exports, sharing and support attachments are initiated by you.
You can export your journal and use Profile’s data controls to delete account app data or remove local device data. Deleting app data does not by itself delete the Auth0 sign-in identity. To request deletion of your sign-in account as well as associated app data, contact support using the account-deletion request process.
Deleting the app or its data does not cancel a Google Play subscription. You can manage or cancel it in Google Play. Necessary payment, fraud-prevention or legal records may be retained where required. Deleting active app data does not necessarily immediately remove copies held in backups, service logs or records retained for payment, security or legal purposes. The primary account database is hosted in Sydney, Australia. Its current Supabase Pro schedule retains seven days of daily database backups; this does not cover separately stored files. Sanitised Sentry error events are stored in the United States and retained for 30 days under the current Developer plan. Other service records may have different retention periods; these are not a promise that every copy is erased within either period. Copies you export or share, and local copies on other devices, are separate from account data.
You can change your AI and email preferences in Profile. Contact su*****@*********om.au to request access or correction, request account deletion, or raise a privacy complaint. Describe your request without including private journal content. We may need to verify account ownership before acting. Do not send passwords, payment-card details or journal writing to verify ownership.