Privacy Policy — Ataraxia

Last updated: July 2, 2026

This privacy policy describes how the Ataraxia mobile application (“Ataraxia”, “the app”, “we”) handles your information.

Summary

• Ataraxia is a Stoic-philosophy reflection app.
• We do not require an account, email, or sign-in, and we collect no directly identifying information about you.
• We do not track your location, contacts, or photos, and we do not use advertising or advertising identifiers.
• Your reflections, journal entries, saved passages, and emotion data stay on your device.
• Anonymous product analytics are off by default. Nothing is collected until you turn on “Anonymous usage” in Settings — and even then it is enums and counts only, never the text you write.
• If you subscribe, your subscription status is managed by RevenueCat under an anonymous id; payment is handled by Apple or Google.
• Voice and text you choose to process are sent to AI services for transcription, emotion analysis, and audio readings only — they are not stored by us.

Anonymous usage analytics — PostHog (off by default, opt-in)

Ataraxia can collect anonymous product analytics to understand which features are used and where the experience can improve. This is opt-in: it is off by default, and nothing is collected until you enable “Anonymous usage” in Settings → Data. You can turn it off again at any time, which stops collection immediately.

When enabled:

• Analytics are processed by PostHog, hosted in the EU.
• We capture only counts, durations, bucketed measures, and enum values (for example: “a passage was saved”, “the paywall was viewed”, “an emotion = anxiety”). A strict on-device filter blocks any other field.
• We never send the text of your reflections, journal entries, search queries, or passages, and we do not collect your name, email, location, contacts, or advertising identifiers.
• An app-generated anonymous id lets us count returning vs. new use. It is not linked to your identity and is not used to track you across other apps or websites (no IDFA / no App Tracking Transparency prompt).
• PostHog’s data handling: https://posthog.com/privacy

Subscriptions — RevenueCat + the app stores

If you purchase Inner Citadel, the subscription:

• Is purchased through Apple’s App Store or Google Play; the payment itself is handled by Apple or Google, not by us.
• Is managed on our side by RevenueCat, which records your subscription status under an anonymous app-user id. This is used only to unlock the features you paid for and to restore purchases. It is not linked to your identity and is not used for advertising.
• RevenueCat’s data handling: https://www.revenuecat.com/privacy

Data stored locally on your device

The following is saved only on your device using standard secure storage provided by your operating system (iOS keychain / Android encrypted preferences). We never see or transmit it:

• Reflections and journal entries you write
• Passages you have bookmarked (your Marginalia)
• Emotion data derived from “What troubles you” sessions
• Your app preferences (e.g., theme, audio settings)

If you uninstall the app, this data is deleted. If your operating system creates a device backup (e.g., iCloud Backup, Google Drive backup), that backup belongs to Apple or Google — not to us — and is governed by their respective privacy policies.

Voice and text sent to third-party AI services

Ataraxia includes optional features that send specific data to third-party AI services only when you actively trigger them. We do not send anything in the background.

How these requests are routed. These requests pass through our own proxy server (hosted on Expo’s EAS Hosting) before reaching the AI provider. The proxy exists so our API credentials are never shipped inside the app; it is a stateless relay that forwards your request to the provider and returns the response. It does not store your audio, your text, or any profile of you.

Voice transcription — OpenAI (Whisper)

When you record audio using the in-app microphone, your recorded audio is sent — via our proxy — to OpenAI’s transcription API (“Whisper”) and the transcribed text is returned. The audio is not stored by us or by the proxy. Per OpenAI’s published policy, audio submitted via API is not used to train their models and is retained only briefly for abuse monitoring. https://openai.com/policies/privacy-policy

Audio readings (text-to-speech) — OpenAI

When you tap play to hear a passage read aloud, the text of that passage is sent — via our proxy — to OpenAI’s text-to-speech API, which returns audio that the app plays. The passage text is transient and is not stored by us or by the proxy. The same OpenAI policy applies. https://openai.com/policies/privacy-policy

Emotion classification — Anthropic (Claude)

When you complete a “What troubles you” reflection, the transcribed text of your reflection is sent — via our proxy — to Anthropic’s Claude API for emotion classification, which returns an emotion label. Per Anthropic’s published policy, API inputs are not used to train their models and are retained only as required for compliance and abuse monitoring. https://www.anthropic.com/legal/privacy

Crash reporting — Sentry (EU)

To keep the app stable, Ataraxia reports crashes and technical errors to Sentry, hosted in the EU. These reports contain only diagnostic technical data — the type of error, a stack trace, the app version, and the device model / OS version. They never include the text you write (reflections, journal entries) or any personal identifier. Crash reports are used solely to find and fix bugs. https://sentry.io/privacy/

Third-party services we use

Service	Purpose	Privacy policy
Apple App Store / TestFlight	iOS distribution + payments	https://www.apple.com/legal/privacy/
Google Play	Android distribution + payments	https://policies.google.com/privacy
RevenueCat	Subscription management (anonymous app-user id)	https://www.revenuecat.com/privacy
PostHog (EU)	Anonymous product analytics — only if you opt in	https://posthog.com/privacy
Sentry (EU)	Crash + error reporting (diagnostic data only, no text you write)	https://sentry.io/privacy/
OpenAI	Voice transcription + audio readings (only when you trigger them)	https://openai.com/policies/privacy-policy
Anthropic	Emotion classification (only when you complete a reflection)	https://www.anthropic.com/legal/privacy
Expo / EAS Update	Over-the-air JavaScript updates (no user data sent)	https://expo.dev/privacy
Expo / EAS Hosting	Hosts our stateless AI proxy that relays your triggered AI requests (stores no user data)	https://expo.dev/privacy

Your choices and data control

• Anonymous usage — off by default; toggle it in Settings → Data. Turning it off stops collection immediately.
• Clear history — removes your session history and passage-exposure data from the device.
• Delete all my data — clears local data and resets the anonymous analytics id.
• Uninstalling the app removes all data stored on your device.
• We operate no account system, so there is no login to delete. Our only server is the stateless AI proxy described above, which holds no profile of you and stores none of your content — so there is nothing server-side to request or erase.

Children

Ataraxia is not directed at children under 13. We do not knowingly collect any data from children under 13.

Permissions the app requests

• Microphone (iOS and Android) — used only when you actively use the voice-input feature. We never record in the background. The recording is sent to OpenAI for transcription, then discarded; we do not retain the audio.

Updates to this policy

If this policy changes, we will update the “Last updated” date at the top. Material changes (such as introducing a new third-party service) will be highlighted in the app’s release notes.

Contact

Questions about this privacy policy, or to request deletion of any data:

marius.cimpoesu@gmail.com