Privacy

How we look after your journal

Last updated 26 September 2026.

This notice explains who can read your Karma Farmer journal, what we keep about you and why, who else handles it, and what you can do about it. Karma Farmer and the journal app are run by Live Life Innovative Pty Ltd, Bridge Street, Sydney NSW 2000, Australia. You can reach us through the contact page (karmafarmer.co/pages/contact).

Who can read your journal

Your journal is private: other members and our story moderators can't read it. The journal only works over an encrypted connection. Database rules let only your account read your journal, on top of the app's own checks. It isn't encrypted on your device before it reaches us, so the few people who run the service could read it. They only look at it to fix a problem or when the law requires it.

We don't sell your information, show you ads, or use your journal to train AI.

What we keep

• Your email address. It's how you sign in: we email you a link instead of asking for a password.
• Your journal. The notes you save, with the date and time zone of each, and any tag or mood you add.
• Stories you choose to share. If you share a story, we keep a separate copy with the public name and broad location you choose. We also keep every version you send, your agreement to publish it, and a record of its review. The note it came from stays private.
• Your settings. Your display name, your time zone, the day you started your 30 days, whether and when you want reminders, and which reminders we've sent.
• Sign-in sessions. Each time you sign in, we keep a session record with your IP address and the type of browser and device you're using, to keep you signed in and to spot misuse. Signing out deletes it, and so does about a week without using the journal in that browser.
• Invitations. If a friend joins through your invite link, we record that the invite came from you. We use that to count how many people join by invitation.
• Daily counts. We count a few things by date, such as accounts created, first notes, and return visits, to see whether the journal helps people keep going. The counts never include what you wrote, your email address, or your mood. We also note on your account which of these we've counted, so nothing is counted twice.
• Reports. If you report a story, we keep your report and, if you were signed in, the account it came from.
• Limits on misuse. When you sign in or out, we note your IP address for up to a day, so no one can send too many requests. When anyone reads or reports the public stories, member or not, we keep a scrambled code made from their IP address, never the address itself, also for up to a day.

Who else handles it

• Amazon Web Services hosts the journal and its database on a server in the United States (Northern Virginia).
• Resend sends our emails from the United States: the sign-in links and the reminders you ask for. It keeps a record of the emails it sends, under its own privacy policy.

Because both are overseas, your information is stored and processed outside Australia. The shop and the email sign-ups on karmafarmer.co run on Shopify, and the shop's privacy policy covers them (karmafarmer.co/policies/privacy-policy). Your journal isn't linked to any shop account or sign-up.

How long we keep it

We keep your account and journal until you delete them. When you delete your account on the Account page, your email address, journal, stories, and settings are deleted straight away, and any public stories come down.

We back up the database every night and keep each backup for eight days. We also keep backups of the whole server for up to eight weeks. Something you've deleted can stay in those backups until they expire. We only use them to recover from a failure, or to check that recovery works.

Download or delete it

• Edit or delete any note at any time.
• Download a copy of your journal from the Account page.
• Take a story down from My stories. It comes off our pages straight away, and we keep the withdrawn copy until you delete your account. We can't remove copies other people have saved.
• Turn reminders off on the Account page or with the link in any reminder.
• Delete your account from the Account page.
• Ask us what we keep about you, or to correct it, through the contact page. If you're not happy with our answer, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au) or to the privacy regulator where you live.

Age

You need to be 16 or older to use the journal.

Changes

Whenever we change this notice, we'll update the date at the top. If the change is important, we'll also say so in the journal.