Lundi Privacy Policy
Lundi ("we") is a private journaling app. Our first principle is to keep our hands off your journal. This policy explains, as plainly as we can, what information Lundi uses, where it is stored, and who can see it.
In One Sentence
We do not collect your personal information. Lundi has no accounts and no servers. What you write and add is stored only on your devices and in your own iCloud, and we cannot access it.
1. Where What You Write and Add Is Stored
| Content | What it is used for | Where it is stored |
|---|---|---|
| Entries (including which ones are starred), photos, letters to the future, journal names and covers | Showing them to you; syncing them between your devices | On your devices; when iCloud Sync is on, also in your own private iCloud storage |
| Location (optional) | Noting the city you are in on an entry | Only the city name is saved, never coordinates or other precise location; stored on your devices and in iCloud |
| Birth year (optional) | Showing "age X that year" | On your devices; from version 1.1, when iCloud Sync is on, also in your own iCloud, to sync between your devices |
| Special dates and your letter signature (optional) | Reminders when the day comes; letters can be set to open on a special date, or to be given to someone on that day; your signature appears only on letters you send | Your device; with iCloud sync on, also your own iCloud |
| Passcode (optional) | Unlocking Lundi | The passcode itself is not stored. Only a verification value derived from it is kept in your Keychain; with iCloud Keychain on, it syncs to your other devices, end-to-end encrypted. We cannot read it |
| Lock, reminder and other settings | Making the app work the way you like | Lock settings are kept in your Keychain like the passcode (synced with iCloud Keychain, and kept if you reinstall). From version 1.1, your body font, text size and spacing, appearance, the 4 AM rule, the On This Day switch and how many letters you've sealed are also stored in your own iCloud when iCloud Sync is on. Reminders stay on this device |
- We have no servers. None of this content passes through or is stored on any system of ours.
- Letters you send (from version 1.3): A letter stays on your device and in your own iCloud until the day you choose. Then you send it as a PDF or an image with the app you pick in the iOS share sheet (Messages, AirDrop, Mail and so on). It never passes through us, and we can't access it; whether it's encrypted on the way depends on the app you choose. If the other person also uses Lundi, you can send an envelope instead: it's also a PDF with a cover page, and the letter inside is encrypted, but the key travels with the file, so it stops casual peeking, not someone with technical skills.
- iCloud Sync is provided by Apple. Your data is kept in your own private iCloud storage and encrypted by Apple; we cannot see any of it. You can turn it off at any time in Me › Data & Sync › iCloud Sync. In mainland China, iCloud services for Apple Accounts in mainland China are operated by Guizhou-Cloud Big Data Industry Co., Ltd. (GCBD), as set out in Apple's iCloud Terms and Conditions.
- For stronger protection, you can turn on Advanced Data Protection in iOS Settings.
- Like data from any other app, Lundi's content is included in your iPhone backups (iCloud Backup or a backup on your computer). These backups are kept by Apple and by you, and we cannot access them either.
2. Permissions Lundi Asks For
Each permission is requested only when you use the feature that needs it. Declining never stops you from writing.
| Permission | When it is requested | What it is used for |
|---|---|---|
| Notifications | When you turn on Daily Reminder | Reminding you to write at the time you choose, and letting you know when a letter to the future is ready to open. Notification text never includes what you wrote. Notifications are scheduled on your device and do not pass through any server |
| Location (while using the app, approximate) | When you tap the location icon in the toolbar while writing | Finding the name of the city you are in. To turn a location into a city name, iOS sends your approximate location to Apple's Maps service; Lundi saves only the city name |
| Face ID / Touch ID | When you turn on a lock | Recognition is handled by iOS. Lundi never receives your face or fingerprint data |
| Photos | No permission needed | Only the photos you choose in the system photo picker are given to Lundi. Photos are compressed on your device and then saved |
| Camera | When you tap "Photo" while writing and choose "Take Photo" | Taking a photo for an entry. Photos you take are saved only in Lundi, not in your photo library; like other photos, they are compressed on your device and then saved |
| Photos (add only) | When you share an entry as an image and choose "Save Image" in the share sheet (from version 1.4) | Saving that image to your photo library. Lundi can only add to your library; it cannot see any photos in it |
| Files | No permission needed | When you export, restore from a backup, or import from another app, you choose the file yourself in the system file picker |
3. What We Don't Do
- We don't use any advertising, analytics or tracking tools, or any third-party SDKs.
- We don't record what you do in the app.
- We don't sell or share any of your information.
- We don't lock away what you have written because you haven't paid.
4. Data We Can See
The following data is collected and provided by Apple. We see only aggregated results. We cannot see your journal, and we cannot tell which person any of it comes from:
- App Store statistics on downloads, updates and purchases;
- Crash reports and usage analytics that Apple provides if you have agreed in iOS to "Share With App Developers". You can turn this off in Settings › Privacy & Security › Analytics & Improvements.
5. Purchases
Lundi Pro is purchased through Apple's in-app purchase system. Payment information is handled by Apple, and we never receive your payment method or personal details. Apple tells the app whether you have made a purchase; this does not go through us.
6. Information You Send Us
If you email us through About Lundi › Feedback, we receive your email address and what you write. The only things the app attaches automatically are the app version and the iOS version, never anything from your journal. We process these emails only to respond to your request (our legitimate interest in answering you), for no other purpose, and never pass them to anyone else. Emails are kept for at most 12 months after your request has been dealt with and are then deleted; you can ask us to delete them sooner at any time. Emails are transferred to and handled in the country or region where the developer is located, which may be outside your own.
7. Keyboards
You choose which keyboard you write with in iOS. The built-in iOS keyboards do not pass what you type to us or to any third party. If you use a third-party keyboard and have given it "Full Access" in iOS Settings, the text you type is handled by that keyboard under its own privacy policy, which is outside Lundi's control. We suggest using the built-in iOS keyboards when you write.
8. Exported Files
Backups, Markdown and PDF files you export are kept by you and are not protected by Lundi's locks. Please keep them somewhere safe.
9. Your Rights: View, Export, Delete
- View and export: Everything you have written can be viewed in the app at any time and exported as files in open formats.
- Delete one entry: A deleted entry first goes to Recently Deleted and is permanently deleted after 30 days. You can also delete it permanently right away from there.
- Delete everything: Me › Data & Sync › Delete All Entries. When sync is on, this also deletes the same content from your other devices and from iCloud.
- Correct, add to and move your data: Editing an entry in the app is how you correct or add to it; to take your journal elsewhere, use the backup or Markdown files made by Export.
- Withdraw consent: Notification, location and camera permissions can be turned off at any time in Settings › Lundi; iCloud Sync is turned off in Me › Data & Sync. What you have already written is not affected.
- Please note: Deleting the app alone does not delete your entries in iCloud. To delete the data in iCloud, first delete all entries in the app, or manage it in Settings › [your name] › iCloud.
Because we don't hold any of your data, you do all of this yourself on your own devices. There is no need to contact us.
10. Children
Lundi has no accounts and does not collect personal information from anyone, including children. If you are under 14 (in the EU, under the age of digital consent in your country, usually 13 to 16), please read this policy together with a parent or guardian and use Lundi only with their permission.
11. Changes to This Policy
If this policy changes in a meaningful way, we will tell you in the app's update notes and update the date above. We will never start collecting your information without telling you and getting your consent.
12. Contact Us
Developer: keke han (individual developer)
Contact: lundi_customer@outlook.com
Questions and complaints about personal data: Email the address above and we will reply within 15 working days. If you are in the UK and are unhappy with how we handle your personal data, you can also complain to the Information Commissioner's Office (ICO, ico.org.uk). If you are in the European Union or the European Economic Area, you can lodge a complaint with the data protection authority in the country where you live or work.