Privacy policy
How we look after your diary
Lemorio is a private journal. This page says in plain words what we keep, why we keep it, and what you can do.
Last updated: October 5, 2026
What we store
Your account: your name, your email address, your profile details such as a photo or birthday, and the settings you choose. Your diary: the entries you write, the photos you add, and the mood, themes and summaries that AI adds to them. If you pay: your plan and payment details, such as the last four digits of your card. We never see your full card number. Security records: when you signed in, and the IP address and device you used.
How we use it
Only to run Lemorio for you: to show your diary, to create your insights, and to keep your account safe. A payment provider handles card payments, and an email service sends account emails, such as a password reset. We do not sell your data, and we do not show ads.
AI processing
We send the text of an entry to our AI provider to add mood, themes and summaries, and when you use a writing tool such as a grammar fix or voice typing. The provider processes it only for these features. It does not use your diary to train its models.
Health data
Health information, such as a menstrual cycle, needs extra care. A feature that uses health data stays off until you turn it on and give your consent.
Who can see your data
Your diary is tied to your account. There is no feed, no followers and no public profile. A small number of authorised staff can access account data only to fix a problem, keep the service safe, or when the law requires it.
Photos
We re-encode every photo you add. This removes hidden data, such as the GPS location.
Your control
You can download everything you wrote on the Export page. You can delete your account in Settings. When you do, we delete your diary, your photos and your profile at once. Payment records can stay longer where the law requires it.
How long we keep it
We keep your diary until you delete it or delete your account. A deleted entry stays in Recently deleted for 30 days so that you can restore it. There you can also remove it for good at once. After 30 days we remove it and its photos for good. A draft that you do not change for 30 days is deleted. Sign-in records are deleted after 90 days.