Skip to the content.

Privacy Policy for Desandar

Last updated: July 28, 2026

Desandar (formerly Private AI Journal) is a local-first journaling app built to keep your writing, recordings, photos, and reflections private. This policy explains how Desandar handles your information.

Our Privacy Approach

Desandar does not send your journal data to the developer or to a custom backend. The app has:

We do not sell your personal information or use it for advertising.

Data Stored by Desandar

Desandar stores journal data locally on your device. Depending on the features you use, this can include:

Private iCloud Sync

When iCloud is available, Desandar can sync canonical journal data and attachment payloads through your private iCloud database so they are available on your Apple devices. This may include entries, journals, tags, saved places, audio, and photos.

Your synced content is stored by Apple in your private iCloud account. It is not stored on a Desandar-operated server and is not accessible to the developer. Apple’s handling of iCloud data is governed by Apple’s terms and privacy policies.

Some derived information—including Reflect conversations, source snapshots, and semantic embeddings—remains local to the device and does not sync through iCloud.

On-Device Intelligence

Desandar uses Apple on-device intelligence features when they are available. These features can help with transcription cleanup, entry organization, title suggestions, recaps, semantic search, and reflections grounded in your journal.

Desandar does not send journal content to the developer, a custom server, or a third-party AI provider for these features.

Optional Device Permissions

Desandar asks for access to device features only when you choose related functionality:

These permissions are optional and can be managed in your device’s Settings app. Information from an optional source is kept only when you choose to incorporate it into your journal or use the related feature.

Apple System Features

If you enable features such as Spotlight, Siri, Shortcuts, widgets, or App Intents, limited journal metadata or an app action may be made available to that Apple system feature. Desandar uses conservative metadata and authentication gates to avoid exposing full private journal text by default.

Imports, Exports, and Sharing

Imports happen only after you choose a file. If you export or share from Desandar, the app creates files on your device in formats such as Markdown, JSON, or ZIP and sends them only to the destination you select. Nothing is uploaded automatically to a Desandar server.

Retention and Deletion

Journal data remains on your device, and synced journal data remains in your private iCloud account, until you delete it. You can delete entries and derived AI memory from within Desandar. Deletions of synced journal data propagate through iCloud when sync is available.

Uninstalling Desandar removes its local app data but may not remove data retained in your private iCloud account. You can manage iCloud storage through your Apple Account settings.

Changes to This Policy

If this policy changes, the “Last updated” date at the top of this page will be updated.

Contact

For privacy questions or support, email talus.llano-3k@icloud.com or visit the Desandar support page.