Sotto Privacy Policy
Sotto is built on one promise: your journal is yours alone. This policy is short because we collect almost nothing.
What we collect
Nothing. Sotto has no accounts, no analytics, no advertising SDKs, and no servers of our own. We cannot read your journal, and neither can anyone else.
Where your data lives
- Journal entries, moods, letters, insights, and answers are stored and computed on your device.
- AI features (reflections, weekly letters, monthly retrospectives, and Ask) run on your device using Apple's on-device models. Your writing is never transmitted to us or to any third party for processing.
- Search indexing happens in your device's private on-device index so you and Siri can find your entries. Apple does not share this index with us.
Purchases
Subscriptions are processed by Apple. We receive aggregate, anonymized sales reports from Apple; we never see your payment details or identity.
Siri and Shortcuts
When you create entries by voice, your request is handled by Apple's Siri under Apple's privacy terms. The resulting entry is stored only on your device.
Data deletion
Delete any entry by swiping, or delete the app to remove everything. There is no copy to delete anywhere else.
Children
Sotto is not directed at children under 13.
Changes
If this policy ever changes, the new version will be posted at this address with a new effective date. Because we hold none of your data, changes cannot affect data we've already collected — there isn't any.
Contact
Cedarlight Studios LLC — jpk@cedarlight.io