Bonjournal

Privacy Policy

Effective date: March 23, 2026

1. Who we are

Bonjournal is operated by Tom Keysers ("we", "us", "our"). We provide an AI-powered language learning journaling service at bonjournal.app. If you have questions about this policy, contact us at hello@bonjournal.app.

2. What data we collect

We collect the following information when you use Bonjournal:

  • Account information: Your email address, first name, and language preferences when you create an account.
  • Journal entries: The text you write in your journal entries and the AI-generated corrections, coaching feedback, and progress scores associated with them.
  • Payment information: If you subscribe to a paid plan, your payment details are processed directly by Stripe. We do not store your credit card number.
  • Usage data: Basic information about how you use the service, such as entry counts and submission timestamps.
  • Guest submissions: If you try the service without an account, we temporarily store your submitted text and the generated analysis.

3. How we use your data

  • To provide the core service: analyzing your journal entries using AI and returning corrections and feedback.
  • To track your progress over time (grammar, vocabulary, and fluency scores).
  • To send you optional daily writing reminders via email (you can disable these in Settings).
  • To process your subscription payments via Stripe.
  • To monitor and fix errors in the service (via Sentry error tracking).
  • To understand how the service is used in aggregate, so we can improve it (via PostHog analytics).

4. Legal basis for processing (GDPR)

We process your personal data under the following legal bases:

  • Contract performance (Art. 6(1)(b) GDPR): Processing your account information and journal entries is necessary to provide the service you signed up for.
  • Legitimate interests (Art. 6(1)(f) GDPR): We use anonymised analytics and error monitoring to maintain and improve the service. These do not override your fundamental rights.
  • Legal obligation (Art. 6(1)(c) GDPR): We may retain certain data (e.g. payment records) as required by applicable law.

5. How we protect your data

Your journal entries and analysis data are encrypted at rest using AES-256-GCM encryption. This means that even in the unlikely event of a database breach, your personal writing cannot be read without the encryption key. Your data is stored on servers managed by Supabase, which provides enterprise-grade security and access controls.

6. Data processors and third-party services

We engage the following third-party data processors and services to operate Bonjournal. Each processes your data only as necessary for the stated purpose and under a data processing agreement with us where required by GDPR:

  • Supabase (US, EU region available) — Authentication and encrypted database hosting. Stores your account data and journal entries. Privacy policy.
  • Stripe (US) — Payment processing for subscriptions. Processes your billing information directly; we do not store your card details. Privacy policy.
  • AI providers — Anthropic (US), OpenAI (US), Google (US), Mistral (FR) — Your journal entry text is sent to one of these providers to generate corrections and feedback. None of these providers use your data to train their models under our agreements.
  • Resend (US) — Transactional and reminder emails. Processes your email address. Privacy policy.
  • Sentry (US) — Error monitoring to help us identify and fix bugs. Error reports do not include your journal content. Privacy policy.
  • PostHog (EU) — Product analytics. Collects anonymised usage events (e.g. pages visited, features used) stored in your browser's localStorage. No journal content is included. Data is processed in the EU. Privacy policy.

Several of these providers are based in the United States. Transfers are covered by Standard Contractual Clauses (SCCs) or equivalent safeguards under GDPR Chapter V.

7. Cookies and local storage

Bonjournal uses cookies only for authentication (keeping you logged in). We do not use advertising cookies or third-party tracking cookies.

Our analytics provider PostHog stores an anonymised identifier in your browser's localStorage (not a cookie) to distinguish sessions. This identifier is not linked to your name or email address and is used solely to understand how the service is used in aggregate.

8. Data retention and deletion

Your journal entries and account data are retained for as long as you maintain an active account. Guest submissions and their analysis results are automatically deleted within 24 hours. You can delete your account and all associated data at any time from your Account Settings page. Alternatively, contact us at hello@bonjournal.app and we will process your request promptly.

9. Your rights

You have the right to access, correct, or delete your personal data. You can update your name, language preferences, and notification settings directly in your account Settings. You can delete your account directly from your Account Settings. For data export requests, contact us at hello@bonjournal.app.

10. Changes to this policy

We may update this Privacy Policy from time to time. If we make significant changes, we will notify you via email or through a notice on the service. Your continued use of Bonjournal after changes are posted constitutes your acceptance of the updated policy.

11. Contact

If you have any questions about this Privacy Policy or how we handle your data, please contact us at hello@bonjournal.app.