Last Journal · Effective 15 September 2026
This policy explains what information the Last Journal app ("the app") and its optional cloud backup service handle, why, and what control you have. It is provided by Aldene Villardo ("we", "us").
The short version: your journal lives on your device. We don't show ads, we don't use analytics or tracking, and we don't sell or share your information. If you choose to back up, your journal and photos are encrypted on your device before they are uploaded.
Everything you create — entries, tags, moods, templates, saved searches, photos and settings — is stored on your device. The app works fully without an account, and none of it reaches us unless you sign in and back up.
One thing to know that isn't us: if Android's own backup is switched on for your device, Android copies app data — including your entries and photos — to your personal Google Drive, the same way it does for your other apps. That happens between your device and Google; we never receive it and can't read it. On Android 9 and later it is end-to-end encrypted with your device's PIN, pattern or password. You can turn it off in your device's system settings, under Google backup.
Signing in is optional and only needed for cloud backups.
| information | why | where |
|---|---|---|
| Email address | Your account; sign-in; verification and password-reset emails; notices about your stored data | Amazon Cognito (AWS) |
| Account identifiers created by our sign-in provider | Link your account to your backups | Amazon Cognito and Amazon S3 (AWS) |
| Password (email sign-in only) | Sign-in. Managed by Amazon Cognito — we never see it | Amazon Cognito (AWS) |
| Google account identifier and email (Google sign-in only) | Sign-in. We don't store your name or profile photo from Google | Amazon Cognito (AWS) |
| Encrypted backups and photos | Restore your journal | Amazon S3 (AWS), United States |
| Backup details — file sizes, dates, how many backups and photos you have | Show your storage use, apply storage limits, keep a limited number of backups | Amazon S3 (AWS) |
Our cloud provider also processes routine technical data needed to deliver the service, such as IP addresses of requests.
Backups and photos are encrypted on your device before they are uploaded, and stored only in encrypted form. We don't look at their contents.
Premium subscriptions are sold and billed by Google Play. We never receive your payment details. The app checks your subscription status with Google Play on your device; we don't keep a record of it on our servers.
We don't share your information with anyone for their own use. These providers process it only to run the app, under their own privacy terms:
| provider | what for |
|---|---|
| Amazon Web Services (Amazon Cognito, Amazon S3) | Accounts, sign-in emails, and storing encrypted backups — in the United States |
| Google Play (Billing) | Subscriptions and payments. The Google Play Billing library sends Google its own diagnostic information about purchases |
| Google (Sign-In) | Only if you choose to sign in with Google |
| Google Play and Android | Crash reports and app statistics that your device shares with developers if you have allowed it in your device settings |
| Android Backup (Google Drive) | If Android's backup is on for your device, your device copies this app's data — including entries and photos — to your own Google Drive, end-to-end encrypted with your screen lock on Android 9 and later. We don't receive it, can't read it, and don't control it; turn it off in your device settings |
We don't use advertising, analytics or tracking tools, and we don't sell your information.
| permission | used for |
|---|---|
| Camera | Taking a photo to attach to an entry |
| Notifications | Reminders, and notices about backups or your subscription |
| Alarms and reminders; run at startup | Delivering reminders on time, and restoring them after your device restarts |
| Network state | Knowing when a backup or restore is possible |
Photos you choose from your gallery are opened through Android's photo picker, which gives the app only the photos you select.
If you're in the EU, UK or European Economic Area: we process account and backup information to provide the service you asked for (performance of a contract). You have the right to access, correct, delete, restrict or object to processing, to data portability, and to complain to your data protection authority. Your information is stored in the United States.
If you're in California: we don't sell or share personal information, and you have the right to know, delete and correct the personal information we hold.
The app isn't directed at children under 13, and we don't knowingly collect their information. If you believe a child has created an account, contact us and we'll delete it.
We use encryption on your device, secure connections, and access-controlled cloud storage where each account can only reach its own data. No system is completely secure, so we can't guarantee absolute security — which is why the optional backup password exists for anyone who wants their backups readable only by them.
We may update this policy. For significant changes we'll tell you in the app or by email before they take effect. The date below shows when it last changed.
If we ever add optional usage statistics to help us understand which features are used, they will be off unless you turn them on, will never include anything you write or any photo, can be turned off at any time, and we will update this policy before introducing them.
Questions or requests: lastjournal.contact@gmail.com.
Effective 15 September 2026.