Privacy Policy

Version 1.0 of Future Me Says does not track you across other apps or sites and carries no advertising. The personal information we can receive is limited to account email address, the content and preferences you provide, limited technical request data and ai usage metadata such as model, token counts, estimated cost and outcome. We do not sell data and we do not use your private content for advertising.

• Journal entries, saved activities, questionnaire drafts, results, sound preference and reminder time. Signed-in account state may sync through Supabase.

The app keeps a device copy so it still opens without a connection.

• Account email address — when you create an account, to authenticate you and sync your private Drawer.
• The content and preferences you provide — as you use the Hollow, Wonders, Drawer and private bottles, to provide the rooms and generate letters after your consent.
• Limited technical request data — whenever the app talks to our servers, to operate and protect the service. It is not linked to an identity profile.
• AI usage metadata such as model, token counts, estimated cost and outcome — each time a letter is generated, to meter usage and control cost. The usage meter does not store letter text.

Ordinary server request data reaches our hosting provider whenever a page or update is fetched — IP address, time, requested address and browser or device user agent. Those operational logs exist to serve pages and protect the service from abuse.

We do not ask for your name, postal address, passport, visa status or any other identity document, and you should never send them to us.

• No advertising, no advertising identifiers.
• No cross-app or cross-site tracking.
• No third-party analytics or attribution SDK inside the app.
• No selling, renting or sharing of personal information with data brokers.
• No profiling of you and no automated decisions about you.

From 6 September 2026, smilingquokka.app offers optional Google Analytics for website visits and product interactions. It loads only when you choose Allow analytics in the website controls. This does not collect activity inside this app. You can decline or turn it off below. See our website analytics privacy details.

Before generation, we ask permission to send the minimum relevant unsealed text through our Google Cloud-hosted letter service to OpenAI (GPT-5.6 Sol). Sealed entries are filtered out before the request. Previous Gemini permission does not authorise OpenAI: we ask again when the processor changes. Every personalized letter requires sign-in, server-verified membership and consent. Without them no AI request is made. Failed generation shows a retry message, not a substitute template. The accelerated activity trial makes no AI calls.

OpenAI states that API data is not used for model training unless the customer opts in. We use store=false, with no browsing or external tools. This is not a zero-retention guarantee: abuse-monitoring records may remain for up to 30 days or longer for legal or safety reasons, and temporary prompt caches for up to 24 hours. Processing may occur outside Australia. See OpenAI data controls and the current app privacy policy.

High-risk text interrupts generation and scheduled arrivals and displays real-world resources. Sealed writing is checked on the device and excluded from AI requests. The launch Sea uses curated prompts. Releases and replies are private journal reflections, not messages delivered to strangers; they may sync with your private account state after sign-in.

Account content is kept while the account is active so the service can sync and personalise letters. It is not end-to-end encrypted, because authorised server processes must read unsealed content for the features you ask for. Account deletion removes live authentication and application records; limited encrypted backups and security logs may remain temporarily under provider recovery schedules and then expire.

• Vercel — app hosting.
• Supabase — authentication and stored account content.
• OpenAI (GPT-5.6 Sol) — generated letters, after your consent.
• Google Cloud — hosting the letter service between the app and OpenAI.
• Google Workspace SMTP — requested sign-in emails through Supabase; no letter email delivery in v1.

These providers act on our instructions. Some of them process data outside Australia, which the Australian Privacy Principles permit where the recipient is bound to protect it under comparable obligations.

• Ask what we hold about you, correct it, or have it deleted — email privacy@smilingquokka.app.
• Delete your data yourself at any time: see deleting your account.
• Complain to us first if you think we have mishandled personal information. If you are not satisfied, you can contact the Office of the Australian Information Commissioner.

Future Me Says is made for adults aged 18 and over, and we do not knowingly collect personal information from a child. If you believe a child has used it, tell us and we will delete anything we hold.

If we add anything that changes what is collected — measurement on the website, an account system, or a paid tier — we will update this page and its date before that change ships.

Privacy and data requests: privacy@smilingquokka.app
General support: support@smilingquokka.app
Smiling Quokka · ABN 72 680 153 860 · Australia.