Your words stay yours.

What you give us.

• Your account: your email address, the name you go by, and your password, which we store only in hashed form. If you sign in with Google, we get your email address and basic profile from Google.
• Your partner's name and email, if you enter them to invite them.
• Your onboarding answers, your relationship or self-assessment scores, and your intentions.
• Your writing: journal entries, exercise answers, reflections, check-ins, growth plans, trip journals and trip details such as destinations and dates.
• Anything you send us: feedback (which we keep anonymous), support emails, and waitlist sign-ups.

What's created as you use Sojourn.

• Your progress, such as which chapters you've finished.
• Your purchases and subscription status. The card itself is handled by Stripe and never reaches us.
• Reflections the AI companion writes for you.
• Counts we use for daily fair-use limits.
• A record of steps you've reached, such as signing up, pairing, starting checkout and finishing a phase. We use it to understand where people get stuck. It records that a step happened, never what you wrote.

From your device.

• Basic technical information any website receives, such as your IP address and browser type.
• Your location, only if you choose to use it in the activity finder. It's used for that one search and we don't store it.
• A notification token, if you turn on reminders.

• To run Sojourn for you: save your writing, show your progress, pair you with your partner, and take payment.
• To give you the features you ask for. The AI companion reflects on an entry when you request it. The activity finder searches places near where you'll be. Reminders arrive only if you turn them on.
• To show crisis resources if something you write suggests you may be at risk.
• To keep the service safe and working: preventing abuse, enforcing fair-use limits, and fixing errors.
• To improve Sojourn, using the step records above and your feedback. We look at patterns across people (for example, "most couples pair within a day"), not at your writing.
• To send you service emails: account, pairing and payment messages. We don't send marketing email unless you ask for it.

We don't sell or rent your personal information. We don't use it for targeted advertising. And we don't let anyone use your writing to train AI models.

• Your private writing stays private. On the couples track, your Phase I writing is yours. Your partner sees an entry only if you choose to share it. On the solo track, everything is private to you.
• Shared exercises are shared. Phase II and III exercises are built to be done together, so what you write there is visible to the partner you're paired with.
• Therapist reports. You can create a report of your own work to give a therapist. Your partner's answers appear in it only if they've turned on "Include my answers in my partner's therapist report" in their Settings. Report links expire after 30 days, and you can revoke one sooner.
• Sharing outside Sojourn is up to you. When you send a report link, email a therapist, print, or export your data, that copy leaves Sojourn and our protections no longer apply to it. We ask you to confirm before each of these.

We use a small number of companies to provide the service. Each gets only what it needs for its job and may use it only to provide that service to us.

• Supabase: database and sign-in. Your account and writing are stored here.
• Cloudflare: hosting. It delivers the site and runs our servers.
• Stripe: payments. It processes your card, and Stripe's own privacy policy covers what it collects.
• Anthropic: the AI companion. When you ask for a reflection, the entry and prompt are sent to Anthropic's API to write it. Under its commercial terms, Anthropic doesn't train its models on this content.
• Google: optional Google sign-in, and the activity finder. The finder sends your destination or search, or your location if you choose to share it, to Google Places.
• Resend: sends our emails, such as partner invites and therapist-report links.
• Sentry: error reports, so we know when something breaks. They're stripped of your writing, form contents and email address before they're sent.
• Google Fonts: the typefaces on the site. Your browser requests them from Google.

We may also disclose information when the law requires it, to protect someone's safety, or as part of a sale or merger of the business. In a sale or merger, this policy keeps applying to your information.

• Everything travels encrypted (HTTPS), and our providers encrypt it where it's stored.
• Access rules in the database mean each account can reach only its own information, plus what a paired partner has deliberately shared.
• Very few people can access our systems, and those accounts are protected with two-factor authentication.

No system is perfectly secure. If a breach ever affects your information, we'll tell you and the authorities as the law requires.

We keep your information while your account is open. When you delete your account from Settings, we delete your writing and profile. Anything you've already sent to a partner (a reflection you shared to their inbox, for example) is a copy that's now theirs, so it stays in their account, no longer linked to you. Copies in our providers' backups age out on their normal schedule. We may keep a limited record of payments where tax and accounting law require it. Anonymous feedback isn't linked to you, so it can't be removed by account.

• Export: download everything you've written from Settings → Your data.
• Correct: change your profile at any time in Settings.
• Delete: close your account and delete your data from Settings, or email us.
• Withdraw a choice: make a shared journal entry private again, turn therapist-report sharing off, revoke a report link, or turn off reminders. A reflection you've already sent to your partner's inbox can't be recalled.
• Ask us: email support@sojourntravel.app to ask what we hold about you, or anything else. We'll answer within 30 days.

Depending on where you live, you may have more rights under local law. We'll honour them and won't treat you differently for using them.

We use only what the app needs. That's a sign-in session stored in your browser, a reminder of the plan you picked before signing up, and, if you arrive through a creator's link, a cookie that lasts up to 90 days so the creator is credited. We don't use advertising or cross-site tracking cookies.

Sojourn is for adults 18 and over. We don't knowingly collect information from anyone younger. If you believe we have, email us and we'll delete it.

Sojourn is a guided reflection and journaling companion, not therapy or medical care. It isn't a health care provider covered by HIPAA. We still protect your writing as carefully as this policy describes, because we know what it holds.

If we change this policy in a way that matters, we'll tell you in the app or by email before the change takes effect. The date at the top shows the latest version.

Sojourn Travel LLC, Utah. Email support@sojourntravel.app. See also our Terms of Service.