Privacy Policy
Junto Emotion Wheel ("the Service", "we", "us") helps people name and track the emotions they experience day to day. This policy explains what we collect, why, and the choices you have over your data.
What we collect
When you create an account or sign in, we collect:
- Identity — your email address and, if you sign in with Google, your name and profile picture provided by Google.
- Journal content — the emotions, intensities, and notes you record in the wheel. This is the core data the Service exists to store.
- Preferences — UI settings such as your chosen theme, kept on your device.
We do not collect government IDs, location, contacts, calendars, photos, or any other data unrelated to the Service.
How we use your data
- To authenticate you and keep your journal accessible only to you.
- To render your past entries when you return.
- To communicate operational messages (account confirmation, password resets) — we do not send marketing email.
- To improve the Service via aggregate, de-identified product analytics (see "Analytics" below).
We do not sell, rent, or trade your personal information to third parties.
Where your data lives
Account data and journal entries are stored in Supabase, our database and authentication provider. Supabase enforces row-level security so that only you can read or write your own entries. Data is encrypted in transit (TLS) and at rest.
Authentication providers
If you sign in with Google, Google shares your name, email, and profile picture with us — nothing else. We never receive your Google password or access any other Google account data. You can revoke this access at any time from your Google Account permissions page.
Analytics
We use PostHog for product analytics — to understand which features people use, where the experience can improve, and how people discover Junto. PostHog is hosted in the EU, and all analytics data stays in the EU.
To measure how visitors find us, PostHog records, when present:
- Acquisition — campaign parameters in the link you arrived through (UTM tags, and ad-click identifiers such as
gclid/fbclid), the referring website, and the first page you landed on. - Approximate location — a coarse, country/region-level estimate derived from your IP address by PostHog. We do not store your IP address ourselves and we do not collect precise (GPS) location.
- Usage — which features and pages are used, and aggregate performance metrics.
We do not use fingerprinting beacons or cross-site tracking identifiers, and journal content is never sent to PostHog.
Session replay. To understand where the experience confuses people, PostHog records session replays (cursor movement, taps, and page navigation). Your writing is never captured: every text input is masked and the journal text is masked from the recording, so a replay shows placeholders, not what you wrote. Session replay runs only with your consent, and in the EU/EEA only after you accept.
Your choice. The first time you visit on the web we ask for your consent to analytics. If you are in the EU/EEA, nothing is collected until you accept. If you decline, we stop product analytics and session analytics entirely. You can change your mind at any time from the Cookie settings link in the site footer (clearing this site's data in your browser also brings the consent prompt back).
Cookies and local storage
We store a small number of items in your browser:
- Essential — your authentication session and UI preferences (e.g. theme), and a record of your analytics consent choice. These are required for the Service to work and are not used for tracking.
- Analytics (consent-based) — once you accept, PostHog sets first-party cookies / local-storage entries to recognise a returning browser and attribute visits. If you decline — or until an EU/EEA visitor accepts — these are not set.
We do not use third-party advertising cookies, and we do not sell or share this data with advertising networks.
Your rights
You can, at any time:
- Export a copy of your journal entries: open Settings and choose “Export my practice” to download them as a CSV anytime, free of charge.
- Delete your account and all associated entries: open Settings and choose “Delete account.” Deletion is immediate, permanent, and self-serve, with no need to contact us.
- Correct or update your profile information.
If you are in the EU/UK, you have additional rights under the GDPR (access, rectification, erasure, restriction, portability, objection). We will honour these requests within 30 days.
Data retention
We keep your journal entries as long as your account is active. When you delete your account, our policy is to remove all associated entries from our live database within 30 days, and from backups within 90 days.
Children
Junto Emotion Wheel is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.
Changes to this policy
We may update this policy as the Service evolves. Material changes will be announced in-app and the "Last updated" date above will be revised. Continued use of the Service after a change means you accept the revised policy.
Contact
For privacy questions, data requests, or anything else covered by this policy, write to privacy@junto.co.