Yours by default.

Private unless you say otherwise.

Only you can currently read your entries and drafts. Public / Private records a preference; public browsing is not implemented.

Public moments never carry an exact location.

If a moment is public, its coordinates are limited to Approximate (~1 km) or Neighborhood (~5 km). The database refuses public-and-exact outright; it isn't just a UI rule.

Coarsened coordinates are coarsened before they're stored.

Approximate and Neighborhood coordinates are rounded before draft or moment submission, and the database enforces rounding again. Structured labels become generic area labels. Text you type may still reveal a precise location. Location searches and reverse geocoding send information to Mapbox.

Your log is portable.

Export everything as JSON or Markdown from Settings, anytime.

Services process the information needed for their features.

Supabase stores your account, moments and private drafts. Vercel hosts the application. Mapbox receives location searches and reverse-geocoding requests, including network metadata such as your IP address. If you opt in to AI suggestions, Anthropic receives your title phrase while you type. Browser storage is an offline recovery queue, not the only draft record.

Deleting a moment deletes it.

Moment deletion removes the active record. Protected recovery copies may retain earlier data. Self-service account deletion is not implemented. Drafts are separate private records; delete unwanted drafts separately.