Always private, always yours.
Your journal is the most personal thing you'll ever write. Here is who can read it, what the AI sees and how we keep it safe, in plain English.
Five things to know
- Only you can read your journal.
- It's never sold, and there are no ads.
- It's never used to train AI.
- Our team never reads it without your permission.
- The AI reads only what it needs to search and answer for you.
Our full privacy policy is coming soon. Questions? info@lifearchivejournal.com
Who can read your journal
Three kinds of reader, and the plain answer for each.
It reads to answer you. That's all.
Ask a question, and only the passages that could answer it are sent to the AI. Here is the whole journey, step by step.
Your entries are indexed privately
So you can find an entry by what it means, not just its exact words, each entry's text is turned into a search index by Cloudflare's AI, inside the cloud we already use. The index is stored with your account and only searched for you.
You ask, and it picks a few passages
Life Archive searches your own entries and picks the passages that could answer your question. Only those, with your question, go to the AI.
Through our private gateway to Claude
The AI is Claude, made by Anthropic. Requests go through Cloudflare's AI Gateway with its logs switched off, so the gateway doesn't keep what passes through.
Not used for training, and deleted
Under Anthropic's terms for businesses, what we send isn't used to train its models, and it's deleted from Anthropic's systems within 30 days (kept longer only if it's flagged for breaking their usage rules).
The answer comes back only to you
With a link to every entry it used. Scanning works the same way: photos of your pages go to Claude to be typed up, and nowhere else.
How we keep it safe
No jargon here. The names of the actual technologies are in the box underneath.
Encrypted on the way to you
Every page and file travels over an encrypted connection (the padlock in your browser). Unencrypted connections are turned away.
Your files are encrypted in storage
Photos and the scans of your notebooks are stored encrypted by our cloud provider. Your entries live in a private database that only the app can reach.
Private storage only you can open
There are no public links to your files. Each photo or scan is checked against your account before it's shown, and it's never kept in a shared cache.
Your photos lose their location
Before a photo is stored, its GPS location is removed on your device, and checked again on our side.
Careful sign-in
Passwords are stored only in scrambled (hashed) form. Repeated sign-in attempts are slowed down, and changing your password signs out your other devices.
No ads, no trackers
No analytics, no ad networks, no tracking pixels and no third-party scripts. The only cookies are the ones that keep you signed in.
For the technical: what it runs on
- Hosting
- One Cloudflare Worker serves the site and the app. No other servers.
- Connections
- HTTPS only, with HSTS (one year, subdomains included). A Content-Security-Policy allows scripts from our own address only; the site can't be framed.
- Entries
- Cloudflare D1. Every read and write is scoped to the signed-in account on the server; the browser never talks to the database.
- Files
- A private Cloudflare R2 bucket (encrypted at rest), keyed by account. Served only through an owner-checked address with Cache-Control: private, no-store. No public or signed links.
- Sign-in
- Better Auth, email and password, hashed passwords, 14-day sessions, rate-limited sign-in and password reset.
- AI
- Anthropic's Claude, called only from our server through Cloudflare AI Gateway (logging off). The Anthropic key never reaches your browser.
- Search index
- Cloudflare Workers AI embeddings stored in Cloudflare Vectorize, filtered by account. Cloudflare's terms: customer content isn't used to train models.
- Deleting
- A deleted entry and its files are removed at once. The database keeps a rolling 30-day point-in-time recovery history (D1 Time Travel) for disasters, after which it's gone.
- Logs
- Routes, status codes and ids only. Never entry text, questions, answers or email addresses.
Your journal, your rules
What you can do today, and what's on its way. Try the example settings: nothing here touches a real account.
Delete an entry
AvailableOpen the entry and delete it. It's gone from your journal at once, along with its photos.Your journals →Change your password and sign out other devices
AvailableIn Settings. Changing your password signs you out everywhere else.Settings →Delete your account
By email todayEmail us from the address you signed up with, and we'll delete your account and everything in it. A one-click button in Settings is coming soon.info@lifearchivejournal.com →Export everything
Coming soonOne download with every entry, photo and scan, on every plan.Request a copy of your data
Coming soonA copy of everything we hold about you, on request.Keep an entry out of AI
Coming soonSwitch an entry off and Ask will never use it.
What we'll never do
We will never Sell your data
Not your journal, not your email address, not anything about you.
We will never Show you ads
There are no ads in Life Archive, and none are planned.
We will never Read your journal without your permission
Not even when you write to us for help, unless you say we may.
We will never Use it to train AI
Not our own, not Anthropic's, not anyone's.
Questions about your privacy?
Email info@lifearchivejournal.com. Our full privacy policy and terms are coming soon.
Email us