Skip to content

Your Data Rights

If you live in the EU, EEA, or UK, the GDPR (or UK GDPR) gives you specific rights over the personal data we hold about you. We extend the same rights to users elsewhere as a matter of policy. This page explains the rights and how to exercise them.

Last updated: 30 April 2026

1. Your rights at a glance

  • Right of access (Art 15) — ask whether we hold data about you and receive a copy.
  • Right to rectification (Art 16) — have inaccurate or incomplete data corrected.
  • Right to erasure (Art 17) — ask us to delete your data, also known as the "right to be forgotten".
  • Right to restriction (Art 18) — ask us to pause certain processing while a dispute is resolved.
  • Right to data portability (Art 20) — receive your data in a structured, machine-readable format. We export journal entries as JSON.
  • Right to object (Art 21) — object to processing based on legitimate interest, including direct-marketing communications.
  • Right to withdraw consent (Art 7(3)) — withdraw any consent you previously gave, with no effect on processing already lawful before withdrawal.
  • Right not to be subject to solely automated decisions (Art 22) — we do not make legally binding decisions about you using only automated processing.

2. How to exercise a right

  1. Email [email protected] from the address associated with your account. Tell us which right you want to exercise and add any specifics (e.g. which data, which timeframe).
  2. We may ask for additional information to verify your identity. We will only ask for what is needed to be confident the request is genuinely yours.
  3. We respond within one month of receiving your request, as required by Art 12(3) GDPR. For complex or numerous requests we can extend this by up to two further months and will let you know if so.

For the right to withdraw analytics consent, you can also use the — no email needed.

3. Exporting your journal

You can export your journal entries from your account settings as a self-contained JSON file. The export includes entries, hashtags, and associated metadata. Image attachments are referenced by ID; raw image files can be requested via email and are returned within the same one-month window.

4. Closing your account

Closing your account from settings triggers deletion of your personal data within 30 days, except where law requires us to keep specific records (for example tax or fraud-prevention obligations). We will confirm completion by email.

5. Complaints

If you believe we have not handled your personal data correctly, you have the right to lodge a complaint with your national supervisory authority. A list of EU/EEA authorities is published at edpb.europa.eu. UK residents can contact the Information Commissioner's Office. We would also appreciate the chance to address your concern directly first.

6. Related documents