Your journal
Fleu uses your journal text, timestamps and mood estimates to display your entries, daily mood summaries and statistics. Journal data is stored on your device. Journal entries, daily summaries and statistics also sync through Apple iCloud when available. Changes save together on your device before iCloud sync completes.
These records are retained to provide your journal and history until you delete them, subject to the sync, cache and backup limitations below.
On-device mood analysis
Fleu uses Apple’s on-device Foundation Models to estimate the emotional tone of your writing. Fleu does not send your writing to a third-party AI service for analysis. Recent text and analysis results are temporarily cached in memory to avoid repeating work.
On-device analysis does not mean all data stays on the device: saved entries, including mood estimates, sync through iCloud. Estimates can be wrong and are for reflection, not medical assessment.
Profile, photos & preferences
Your name, birthday and profile photo are optional. They personalize your profile; you can journal without providing them. Fleu stores profile information and a resized copy of your chosen photo locally and syncs them through your private iCloud database.
The profile photo picker supplies only the image you choose. Fleu does not upload your photo library. The saved profile image is re-encoded without the original photo’s metadata.
Theme, clock format and haptic preferences are stored on the device using UserDefaults, separately from your journal and profile.
Photos linked to journal entries
Entry attachments link to originals in Apple Photos. Fleu syncs an opaque attachment key, your chosen crop position and, when available, an iCloud Photos identifier with your journal—not attachment image files. Unlike your profile photo, a journal attachment is not a separate image copy stored by Fleu. Display thumbnails are held in memory, not saved or uploaded by Fleu.
To display a linked photo that is not available locally, Apple Photos may download an image from iCloud Photos using network access. Original photos remain in Photos and its separate iCloud Photos service; removing a link or deleting an entry never deletes the original.
Photos access is optional and may be limited to selected images. Fleu requests it only when you choose to attach a photo or allow access. You can change access in Settings or use Manage Selected Photos in Fleu. You can journal without granting Photos access.
A device-only identifier cache helps Fleu find linked originals. It is excluded from backups and does not contain image files. Removing a link or deleting entries does not clear this identifier cache; Fleu has no in-app control to clear it.
When iCloud Photos mapping is unavailable, a link may work only on the device where it was chosen. Fleu retries mapping when you view or refresh it. Cache removal or reinstall can lose a device-only link. Other devices need access to the same original through iCloud Photos. Unavailable photos keep their references so they can return when access or syncing is restored.
Private iCloud sync & backups
Apple’s CloudKit syncs journal and profile records through your private iCloud database. This is not a public feed. Sync depends on your iCloud account and service availability and may take time. Profile edits can remain on your device waiting to sync.
Fleu keeps account-specific profile caches and sync bookkeeping locally so that changing iCloud accounts does not mix profiles. Signing out does not delete these caches. Local profile files are eligible for device backups; backup copies are separate from live iCloud sync.
Apple provides iCloud, device backups and other system services under its own terms and privacy practices. Fleu does not claim that using iCloud means data never leaves your device.
Deletion & your choices
Delete all entries in Profile removes the journal entries and daily summaries present on that device when deletion runs, refreshes statistics and clears the analysis cache. This cannot be undone. It does not delete your profile or preferences.
Journal deletions sync through iCloud, but entries not yet downloaded or newly created on another device may appear later. This is not an immediate wipe of every device or backup. Removing photo links or deleting entries does not delete originals from Apple Photos or clear Fleu’s device-only identifier cache. See journal photo storage and retention.
In Edit profile, clear your name, remove your date of birth or remove your photo, then Save to update the current profile and sync those changes. This does not erase other account caches or existing backups. Fleu does not provide a single control to erase all profile caches and backup copies.
Deleting the app is not a complete deletion of iCloud data or backups. Review your Apple account’s iCloud storage and backup settings separately. If you have questions about the controls, contact support@fleu.app without sending private journal content.
Advertising & other services
The Fleu app does not include advertising, tracking or third-party analytics SDKs. Its app data flows are local storage, on-device mood analysis and Apple iCloud sync.
Apple’s account, operating-system services, TestFlight and backup settings operate separately from Fleu. Opening a TestFlight link takes you to Apple’s service.
This website & support email
This website does not set analytics or advertising cookies or load third-party analytics scripts. Fonts, screenshots and website scripts are served with the site rather than fetched from external font or script providers.
The site is hosted on GitHub Pages. Serving a page involves sending technical request information, such as your IP address and browser information, to the hosting provider. The provider may keep service or security logs under its own policies. This is separate from the app’s journal storage.
If you email support@fleu.app, the address and information you choose to send are processed by email providers and used to handle your request. Please do not include journal entries, birthdays, private photos or other sensitive information. Support correspondence may be retained to handle and follow up on your request; you can contact the same address to request deletion. Email-provider records and backups may be retained separately.
Contact & policy updates
For support, privacy questions or a request about information you have sent by email, contact support@fleu.app. Support cannot act as an immediate remote wipe of your devices, private iCloud records or backups.
When this policy changes, the “Last updated” date on this page will change. The support page also explains compatibility, sync and deletion controls.