Privacy Policy

Boring Journal is operated by Milton Alexander Prastitis, Cyprus, who is the controller of your personal data.

For privacy questions or requests, contact as.prastitis@gmail.com.

Boring Journal is a journaling and reflective-practice service for adults. You may record situations, thoughts, feelings, behaviours, narratives, goals and any other information you choose to enter.

It also includes optional AI-assisted features and optional sharing with a Professional. Boring Journal is available only to people aged 18 or over.

Account information

• Email address
• Display name
• Preferred language
• Timezone
• Account type (Individual or Professional)
• Authentication and security information needed to sign you in and keep your account safe

Journal information

• Completed journal entries and unfinished drafts
• Situations, thoughts, feelings, behaviours and narratives you write
• Goals

Because journal writing is free-form, you may choose to enter sensitive information, for example about your health, relationships, sex life, beliefs or other personal matters. Please only write what you are comfortable storing.

Generated information

• Daily Mirrors
• Chapters
• Goal-related AI outputs
• Professional Insights & Patterns
• Session Preparation

Professional relationship information

• Invitations
• Professional/client connections
• Records of which entries are shared
• Private Professional notes and Follow up status
• Insights and Session Preparations

Technical and security information

Operational records needed to run and protect the service, such as timestamps, the status of AI requests and error codes. Boring Journal does not use advertising or analytics cookies or third-party tracking. Your browser stores your sign-in session and your language choice locally so the app can work.

• Create and secure your account
• Save your journal entries and drafts
• Provide Goals and Chapters
• Provide AI-assisted features you request
• Enable Professional/client connections
• Let you share the completed entries you choose
• Provide Professional features based on shared material
• Maintain security, prevent abuse and diagnose technical problems
• Respond to support and privacy requests
• Comply with applicable legal obligations

Depending on the situation, processing is necessary to provide the service you asked for, to comply with legal obligations, or for legitimate interests such as keeping the service secure and working.

Sensitive information you choose to enter receives additional protection. Where the law requires it, Boring Journal may ask for your explicit consent to process it.

When you use an AI-assisted feature, the information required for that feature may be securely processed through AI infrastructure and model providers. Currently this includes models accessed through Lovable’s AI Gateway, including OpenAI models. The providers used may change over time.

• A Daily Mirror uses the relevant completed entry.
• Chapters use the entries that belong to that Chapter.
• Professional Insights use completed entries currently shared with that Professional.
• Session Preparation uses eligible entries shared with that Professional.

Unfinished drafts are not used by Professional AI features. Private Professional notes are not used as input for Insights or Session Preparation. Entries you have not shared are not available to Professional AI features.

More detail is provided in the AI Processing Disclosure.

Connecting with a Professional does not share your whole journal. You choose which eligible completed entries to share.

• A Professional can access only material available through an active connection with you.
• You can unshare an entry at any time.
• Ending a connection removes the Professional’s further access through Boring Journal.
• Professional AI material affected by unsharing or disconnection is invalidated.

During the current beta, Professional accounts are self-selected. Boring Journal does not currently verify a Professional user’s qualifications, registration, licence or credentials. A Professional account is not an endorsement or certification by Boring Journal.

A Professional’s private notes and Follow up status are private to that Professional and are not visible to the client through Boring Journal.

Boring Journal relies on providers needed to operate the service, which may include:

• Hosting, database and authentication infrastructure (Lovable / Lovable Cloud)
• AI infrastructure and model providers
• Operational and security infrastructure

Boring Journal does not sell your journal content or personal information to advertisers.

Boring Journal’s own records of Insight and Session Preparation runs store operational information, such as status and error codes, rather than your journal text. AI infrastructure and model providers may temporarily keep limited request and response information for security, abuse prevention, reliability or service operation, according to their own policies and configuration.

Some infrastructure or AI providers may process information outside Cyprus or the European Economic Area. Where required, appropriate safeguards are used for such transfers.

• Account and journal data are generally kept while your account exists.
• You can permanently delete your account in Settings at any time.
• Deleting your account removes the associated Boring Journal application data.
• Deleting a Professional account does not delete clients’ own accounts or journals.
• Copies held in provider infrastructure, backups or logs may take additional time to expire under the applicable retention arrangements; they do not disappear instantly.

You can permanently delete your account from Settings. Deletion cannot be undone.

Individual: deletion removes your account and your Boring Journal data, including your journal content and connection data. Professionals you were connected with lose access to anything you shared.

Professional: deletion removes your Professional account, your connections and your Professional-side data. It does not delete your clients’ own accounts or journal content.

Where applicable, you have the right to:

• Access your personal data
• Correct it
• Delete it
• Restrict its processing
• Receive it in a portable format
• Object to processing
• Withdraw consent at any time, where processing is based on consent

To exercise these rights, contact as.prastitis@gmail.com. You may also lodge a complaint with the relevant data-protection authority, including the Office of the Commissioner for Personal Data Protection in Cyprus.

Boring Journal uses technical and organisational safeguards, including authentication, access controls, server-side authorisation, separation between users and restricted Professional/client access. No system can be guaranteed to be completely secure.

Boring Journal is for people aged 18 or older. It does not knowingly provide accounts to children.

This policy may be updated as the product, technology or legal requirements change. Material changes may be communicated through the service or by email where appropriate.

Milton Alexander Prastitis
Cyprus
as.prastitis@gmail.com