[{"data":1,"prerenderedAt":27},["ShallowReactive",2],{"companyNewsItem:your-journal-is-a-locked-drawer-how-mind-wobble-handles-your-data":3},{"article":4},{"slug":5,"title":6,"meta_title":7,"meta_description":8,"excerpt":8,"featured_image":9,"content":10,"tags":11,"date_created":15,"date_updated":15,"author":16},"your-journal-is-a-locked-drawer-how-mind-wobble-handles-your-data","Your Journal Is a Locked Drawer: How Mind Wobble Handles Your Data","Mental Health App Privacy: How Mind Wobble Protects You","How Mind Wobble protects your journal, check-ins and coach conversations - encryption at rest, what the AI sees, and what we will never do with your data.","/images/company-news/Your-Journal-Is-A-Locked-Drawer-How-Mind-Wobble-Handles-Your-Data.jpg","## The Question You Should Be Asking\nBefore you type a single 3am thought into any wellbeing app, there is exactly one question worth asking, and it isn't about features. It's this: *who can read what I write in here?*\n\nIt's a fair question. In fact it's the right question, and the makers of any app that invites your inner life through the door should be able to answer it in plain English, without a lawyer translating. So that's what this post is: the honest, human-readable answer to how Mind Wobble handles your data. The full [Privacy Policy](https://mindwobble.com/privacy) exists, it's thorough, and we've tried hard to keep even that readable. But policies are written to be complete. This is written to be understood.\n\n## The Short Version\nIf you read nothing else, read this bit:\n\n- Your journal entries and your conversations with the coach are **encrypted at rest**, using AES-256, the same family of encryption trusted for online banking.\n- Everything travels between your device and our servers over an **encrypted connection**.\n- We **do not sell your data**. Not to advertisers, not to brokers, not to anyone. There are no ads in Mind Wobble and there never will be data-funded ones.\n- The AI providers that power the coach **do not train their models on your words**.\n- You can **download everything** we hold about you, and **deleting your account really deletes it**.\n\nNow let me open the drawer and show you the mechanism, because \"trust us\" is not a security policy.\n\n## What \"Encrypted at Rest\" Actually Means\nPlenty of apps say \"your data is encrypted\" and mean only that it travels over HTTPS, which in 2026 is roughly as impressive as saying your house has a front door. Encryption *at rest* is the part that matters for a journal: it means the words are scrambled where they are stored, not just while they're moving.\n\nHere's how it works in Mind Wobble. When you save a journal entry, the text is encrypted with AES-256 before it settles into the database, using a key derived specifically for your account, with a fresh random nonce for every single entry (a nonce is a number used once, and it means two identical sentences never produce the same scrambled output). The same treatment applies to your journal summaries, your messages to the coach, and the coach's conversation summaries: the most sensitive words in the app, locked before they touch the shelf.\n\nThe encryption keys live separately from the data they protect, and we rotate them: the system supports moving everything to fresh keys, the way you'd change the locks rather than hoping the old key never went missing.\n\nAnd now the honest bit, because a locked drawer salesman should tell you what the drawer doesn't do. The encryption covers the *content*: the words themselves. Things like timestamps, entry types and conversation titles are stored normally, because the app needs them to sort your lists and draw your charts. Your mood check-in scores are protected by strict access controls rather than content encryption, for the same reason: the app has to do sums with them to show you your patterns. And no company anywhere can promise absolute security, so we won't insult you by promising it. What we can say is that the words you'd least want read are the words with the strongest lock.\n\n## Who Can Actually See Your Entries\nThe database enforces what's called row-level security, which is a tidy way of saying: your rows answer to your login and nobody else's. Another user cannot reach your entries, full stop, because the rule lives in the database itself rather than in code that might forget to check.\n\nInside the company, access follows least-privilege rules, meaning people and systems get the minimum access needed to do their job, with privileged operations logged. Your journal is not readable by \"whoever happens to work here\", and there is no browsing of user content for curiosity, product research, or any other reason.\n\n## What the AI Sees, and What It Never Keeps\nThe [coach](https://mindwobble.com/features/ai-coaching) is the reason many of you are here, and it works because it has context. So let's be precise about where your words go when you use it.\n\nWhen you send the coach a message, or ask for a journal prompt or summary, that request is processed by Google's Gemini API, with OpenAI's API as the automatic backup if Gemini is unavailable. Alongside your message goes a slice of context to make the response actually useful: relevant parts of your profile, your active goals, your test results, recent mood trends, summaries of recent entries. We deliberately send the minimum needed for the feature you asked for, not your whole account.\n\nThree things matter about what happens on the other side:\n\n- **No training.** Neither provider uses your prompts or the responses to train or improve their models. Our Google usage runs on paid-tier terms where Google states your content is not used to improve its products, and our OpenAI integration hasn't opted in to any training or data-sharing programme.\n- **No lingering.** Providers may hold submissions briefly for abuse monitoring (OpenAI's window is up to 30 days; Google's is a limited period under its terms), after which they're deleted. Your conversations are not sitting in someone else's archive.\n- **No sneaky toggles.** If we ever changed anything that expanded how a provider could use your content, we would update the policy and, where required, ask your consent first. That's a commitment in writing, not a vibe.\n\n## Money Changes Hands. Card Numbers Don't.\nA quick word on billing, since it's the other place trust matters. Payments are handled by Paddle, our merchant of record. When you subscribe, your card details go directly to Paddle; they never pass through Mind Wobble's servers and we never see them. What we hold is the boring administrative echo: your subscription status and its dates, so the app knows which doors your plan opens.\n\n## Your Data Is Yours: Take It or Torch It\nA locked drawer you can't open yourself is called a trap, so the drawer comes with two handles.\n\n**Take it.** In the app, under Account, Privacy, you'll find \"Download your data\". It builds a ZIP of your account, profile, check-ins, journal entries, coaching conversations, goals and test results, decrypted so you can actually read it, generated on demand and not stored on our side afterwards. Your history is portable, because it's yours.\n\n**Torch it.** You can delete individual entries and conversations whenever you like. And if you close your account, that's real deletion: your identity, profile, check-ins, journals, coaching conversations and test results are permanently removed from our production systems. One honest footnote: a small set of billing and support records is kept in pseudonymised form (stripped of your identity) for up to six years, because UK law gives people that long to bring contract disputes, and Paddle keeps its own tax records because tax law says it must. Nothing in that residue includes your journal, your conversations, or your wellbeing data. Those go in the shredder.\n\n## The Boring Credentials\nFor those who like paperwork with their promises: Mind Wobble Limited is a UK company, regulated under the UK GDPR and registered with the Information Commissioner's Office. The app is for adults aged 18 and over. And the full [Privacy Policy](https://mindwobble.com/privacy) covers everything here in proper detail, including your rights to access, correct, export and erase, all of which you can exercise by emailing hello@mindwobble.com, no questions asked and no fee charged.\n\n## Why We Go to All This Trouble\nBecause a journal only works if you never have to compose yourself while writing it.\n\nThe entire value of [the journal](https://mindwobble.com/company-news/the-journal-nine-ways-to-get-it-out-of-your-head), and of [a coach who knows you](https://mindwobble.com/company-news/the-ai-coach-a-coach-who-actually-knows-you), depends on you telling the truth: the unflattering, unfinished, 3am version of the truth. The moment you start wondering who might read it, you start editing, and an edited journal is a press release. Privacy isn't a feature bolted onto Mind Wobble; it's the load-bearing wall. Every insight the app ever gives you is built on you feeling safe enough to be honest inside it.\n\nSo that's the drawer, the lock, and the key in your hand. If that's the kind of place you'd keep your thoughts, [come and start writing](https://app.mindwobble.com/auth/signup). We'll keep it locked.",[12,13,14],"journaling","ai","wellbeing","2026-07-24T09:00:00.000Z",{"slug":17,"name":18,"profile_photo":19,"author_type":20,"role":21,"tagline":22,"experience_summary":23,"expertise_areas":24,"credential_highlights":25,"social_links":26},"mouse","Mouse","/images/Universal Upscale (1).jpg","mascot","Chief Purr-fection Officer","Mouse keeps morale high, naps on schedule, and supervises Mind Wobble with maximum fluff.","Mouse is the resident mascot and comfort officer, bringing levity and calm to the team page without acting as a credibility signal for mental health content.",[],[],[],1784913909775]