Privacy Policy
The short version: your confession text, reflections, photos, and 1-second clips stay on your device and your private iCloud. We never see them. To generate your daily lojos, we send a small profile and your confession text to Anthropic's Claude API and Google Places — see details below.
1. What lojo stores on your device
- Your profile: birthday, gender, zodiac, MBTI (if you chose), religion (if you chose), interests.
- Each day's confession (one sentence, optional).
- The three lojos you were dealt.
- 1-second front-camera "completion clips" you record when marking a lojo complete.
- Your written reflections + any photos you attach to them.
- Which symbols you've unlocked.
All of this lives in your device's local SwiftData store and syncs to your private iCloud database (Apple CloudKit). Nobody else — including us — can access your private iCloud.
2. What we send to third parties
Anthropic (Claude API)
To write your three daily lojos, we send:
- Your written confession (if any)
- Your age, zodiac sign, gender, MBTI, religion (if provided), interests
- Your approximate location district (e.g. "Da'an, Taipei")
- A list of real nearby place names within 1 km
- Up to 5 recent past entries (date, confession, picked action) so the AI can reason about your arc
Anthropic may retain this data for up to 30 days for safety and abuse monitoring. They do not use it to train their models. See Anthropic's privacy policy for current details.
Google Places
We send your current GPS coordinates and a radius (1000m) to Google Places to find real cafes, parks, bakeries, libraries, etc. near you. The query is fired only at the moment you tap "Find today's lojo" — we never store your location history. See Google's privacy policy.
3. What we do NOT do
- We do not have any analytics SDK in this version of the app. No tracking, no behavioural events, no advertising IDs.
- We do not share your data with advertisers.
- We do not see your reflections, photos, or completion clips. Those never leave your device + your iCloud.
- We do not require an account, email, or password.
4. Permissions we ask for
- Location (While Using) — to find real nearby places for your Discovery card.
- Camera — to record the 1-second clip when you complete a lojo. The clip stays on your device.
- Notifications — optional, used only twice during your trial (day 5 + day 7 reminders).
5. Children
Lojo is intended for users 13 and older. If you believe a child under 13 has used the app, please contact us.
6. Deleting your data
To delete everything:
- Delete the app from your device — this removes the local SwiftData store.
- Go to Settings → Apple ID → iCloud → Manage Storage → lojo to remove the iCloud copy.
Cancellation of your Lojo+ subscription is handled in Apple ID → Subscriptions.
7. Changes
If we change this policy in any material way, we'll surface it in the app and update the date above.
8. Contact
Questions: hello@lojo.me