Numerology Journal Privacy Policy and Personal Data Notice
Version: pdpa-local-first-v10
Effective: July 31, 2026
1. Local-first principle
Personalization, lifestyle records, journals, cycle dates, tasks, routines, beauty, wardrobe, personality assessment, private insights, camera processing, voice journals, on-device dictation, search, annual reports and the gentle garden run mainly on the phone. Everyday use can remain in local mode without sign-in. NaviaWorks cloud is limited to account identity, transaction verification, the 14-day trial, cross-platform entitlement restore and account-bound encrypted transfer packages explicitly created by the user.
2. On-device data and encryption
Nickname, birthday, preferences, language, calendar, theme, module order, journals, metrics, tasks, routines, personality answers, templates, photos, voice, wardrobe, beauty, insights, garden and maintenance data remain on the device by default. Sensitive content is stored with a device-protected key and authenticated encryption. SQLite query columns contain only necessary dates, types, status and ordering; user-authored text and values remain inside encrypted payloads.
3. Photos, camera and albums
The app can take a photo or receive a user-selected photo from the system picker, then add optional date, time, approximate place, live weather, frames and algorithmic beauty effects on-device. It does not perform cloud face recognition or create biometric templates. Private media is re-encoded where possible to remove EXIF and GPS metadata before app storage. A photo is added to the dedicated album only after the user confirms save. Sharing uses the operating system share sheet and the user chooses the destination app.
4. Voice journals and on-device speech-to-text
The microphone is used only when the user starts recording. Voice journals are stored in the app's encrypted media area. Speech-to-text starts only when Android or Apple confirms on-device recognition support. Android uses the on-device recognizer and Apple requires on-device recognition. When the device, OS, language model or permission is unavailable, manual typing and ordinary voice recording remain available; the app does not fall back to NaviaWorks or another cloud speech service.
5. Location, weather and translation models
Location is accessed only with permission for weather or watermark use. Coordinates are coarsened before leaving the phone and the phone queries a public weather service directly. The app keeps no location history and requests no background location. Traditional Chinese, Simplified Chinese and English are built in. Other interface languages may use a Google ML Kit model downloaded and executed on-device. Private journal text is not sent to NaviaWorks for interface translation.
6. Widgets, shortcuts and visible timers
System widgets, shortcuts, Live Activities and ongoing notifications use only compact summaries required for their job, such as mood score, water total, task count, a short daily line, timer title and end time. Full journals, photos, voice, cycle dates, account data, transactions, entitlements and recovery keys are excluded from widget shared storage. Users can remove widgets or disable notifications in system settings.
7. Imports, file backup and same-LAN transfer
Users may explicitly import Daylio CSV, Day One JSON or ZIP, or a mapped generic CSV. Source files are parsed on-device and are not uploaded to NaviaWorks. Users may create an encrypted backup and choose Files, iCloud Drive, Google Drive, a NAS provider or another system file destination; that provider handles the file under its own policy. Same-LAN transfer starts only after user action and sends an already encrypted package using a short-lived token on a trusted local network. NaviaWorks does not scan the LAN, retain the payload or provide a relay. A QR code or deep link may contain short-lived pairing data and the recovery key, so it should be used only between trusted nearby devices.
8. Personality, numerology, hexagram reflection and insights
Personality answers, numerology, hexagram reflection, trends, associations and personal experiments are calculated on-device. They do not provide medical, psychological, disease, fertility, contraception, employment, insurance or credit decisions. Lifestyle insights describe associations in the user's own records and do not establish causation.
9. Account, trial and transactions
Local mode needs no account. The 14-day full trial, in-app purchase, restore purchase and account-bound encrypted cross-platform transfer require sign-in to maintain one trial per account and portable entitlement. Apple or Google processes payment. NaviaWorks receives only product, transaction and entitlement data needed for verification and never receives full card details. The app does not sell an auto-renewing monthly plan.
10. Encrypted transfer and recovery key
The app can generate an independent recovery key and encrypt a transfer package on-device. The server stores only ciphertext plus size, hash, schema and timestamps, and never holds the recovery key. Passwords, session tokens, vault keys and purchase entitlement are excluded from user data packages. NaviaWorks cannot decrypt a package if the recovery key is lost.
11. Advertising
The free version may display Google Mobile Ads. The ad module must not read journals, personality answers, photos, voice, cycle data, mood, location history or other private content for ad selection. The lifetime unlock removes ads. Google may still process ad-related data under its own policies and regional settings.
12. Retention, export and deletion
On-device data remains until the user deletes it, removes the app or the operating system clears it. User-authored source data remains viewable, searchable, exportable and deletable and is not locked after the trial ends. Users may clear local data and, after sign-in, delete the account and account-bound encrypted transfer package. Store transaction records follow Apple and Google retention rules.
13. Security, third parties and limitations
Network transport uses HTTPS and encryption keys use device-secure storage. Weather services, Google ML Kit, Apple, Google, advertising, file destinations and share destinations process necessary data under their own policies. No system can guarantee absolute security. Users should protect the device, account, backup files, QR codes and recovery keys.
14. Contact
Support: https://naviaworks.net/zh-tw/support/
Account deletion: https://naviaworks.net/apps/daily-fortune/account-deletion