Privacy Policy

Last updated: August 13, 2025

Introduction

At Atalaku, Inc., we take your privacy seriously. This Privacy Policy explains how Companion collects, uses, and protects your personal information.

Data Collection

Companion stores all journal entries locally on your device. When you use the "Save & Reflect" feature, your journal content is sent to our AI service provider (Llama API) over an encrypted connection for processing.

Data Storage

By default, your journal entries are stored locally on your device using encrypted SQLite databases. We follow a "local-first" approach to ensure you maintain full control over your personal data.

Optional Cloud Backup: You can choose to enable cloud backup in your app settings, which allows you to sync your encrypted data across multiple devices. When enabled, your journal entries are securely stored in the cloud using the same AES-256 encryption that protects your local data. This optional backup feature ensures your data remains private and encrypted both locally and in the cloud. You can disable cloud backup at any time, and your local data will remain unaffected.

Data Security and Encryption

Companion implements robust security measures to protect your personal data:

AES-256 Encryption: We use Advanced Encryption Standard (AES) with 256-bit keys, the same military-grade encryption technology trusted by leading cloud providers including Google Cloud, Amazon Web Services (AWS), and Oracle Cloud to secure data in their enterprise systems.
Local Encryption: All sensitive personal information stored locally on your device, including journal entries, mood data, personal goals, and user profile information, is encrypted using AES-256-CBC (Cipher Block Chaining) mode with unique initialization vectors.
Secure Key Management: Encryption keys are unique to each user and securely managed to ensure data protection.
Transmission Security: When you use AI features like "Save & Reflect," your data is transmitted over secure HTTPS connections with TLS encryption to our AI service providers.
Data Isolation: Each user's encrypted data is cryptographically isolated and cannot be decrypted without their specific encryption keys.

This encryption ensures that even if someone gained unauthorized access to your device or our systems, your personal journal entries and sensitive information would be virtually impossible to read without your unique encryption keys.

Data Usage

We use your data solely to provide the app's core functionality. Your journal entries are not used to train AI models or for any other purpose.

Third-Party Services

We use Firebase for authentication and analytics. These services have their own privacy policies.

Export Compliance

Companion uses encryption technology that may be subject to export administration regulations. Our AES-256 encryption implementation is designed to protect user privacy and data security. We comply with applicable export control laws and regulations.

Privacy Policy Updates

This Privacy Policy was last updated on August 13, 2025. We may update this policy from time to time and will notify users of material changes through the app or our website.

Contact Us

If you have questions about this Privacy Policy, our encryption practices, or your data security, please contact us at support@atalaku.app

Comprehensive Privacy Policy

For our complete, detailed privacy policy that includes comprehensive legal information, data processing details, international privacy rights, and specific state regulations, please visit: Complete Privacy Policy Document