ReasonTrace Privacy Policy

ReasonTrace is provided by JonnyLab. This policy applies to the ReasonTrace app for iPhone and iPad, bundle identifier com.jonnylab.reasontrace, and to the ReasonTrace AI server that JonnyLab operates on Cloudflare.

Thoughts you drop, decision titles, situations, options, choices, reasoning, expected outcomes, confidence, categories, dates, reviews, outcome ratings, lessons, resurface dates, and related settings are stored in the app’s local database. Voice recordings, transcripts, and recording metadata are stored in the app’s local container. JonnyLab does not receive this content unless you choose to send specific fields with AI Reflection (section 6).

ReasonTrace requests microphone and speech-recognition permission only when you choose to record. Audio is recorded and kept on your device. Starting with version 1.1, transcription runs only on your device; if your language has no on-device speech model, the recording is kept without a transcript. Earlier versions used Apple’s Speech framework, which may send audio to Apple for transcription under Apple’s privacy terms. JonnyLab never uploads recordings or transcripts to its servers, and audio is never sent to an AI provider.

If you enable review reminders or reminders for thoughts that come back, ReasonTrace asks iOS for notification permission and schedules local notifications on your device. Notification text is intentionally generic and does not include your thought, decision title, or reasoning.

Optional App Lock uses Apple’s Local Authentication framework. ReasonTrace receives only the success or failure of authentication and does not receive or store biometric data. Privacy cover can hide app content when the app is in the background.

AI Reflection is off until you turn it on in Settings and accept the consent screen. Nothing is sent until you then tap Generate for a specific reflection.

When you tap Generate, only the fields shown for that request are sent — for example the situation, options, chosen option, reasoning, expected or actual outcome, confidence, lesson, or principle — together with the app language. They travel over HTTPS through JonnyLab’s server on Cloudflare to OpenAI’s API, which generates the reflection. Recordings, transcripts of unrelated thoughts, and other decisions are not sent.

JonnyLab’s server does not save the text you send or the AI response. ReasonTrace calls OpenAI with response storage turned off (store=false). OpenAI may keep API inputs and outputs for up to 30 days to detect abuse, or longer if required by law, and then deletes them. OpenAI does not use data sent through ReasonTrace to train its models; JonnyLab has not opted in to sharing API data with OpenAI.

AI results you save are stored only on your device. Turning AI off stops future requests; it cannot recall requests already sent. AI output can be wrong and is not professional advice.

To prevent abuse and apply usage limits without an account, the AI server uses Apple App Attest to confirm requests come from a genuine copy of ReasonTrace. The first time you use AI, it creates a random installation identifier and a random purchase identifier for RevenueCat, and stores your device’s App Attest key identifier and public key.

For each request it stores the request identifier, time, month and day, result status, token counts, estimated cost, and model name, plus a keyed hash of your IP address that changes daily and is used only for rate limiting. Your IP address itself is not stored by JonnyLab, but Cloudflare processes it to deliver the request.

Request records are deleted automatically after 90 days (records for the current month are kept until the month ends so limits keep working). An AI identity that has not been used for 365 days is deleted with its records. You can ask for your AI server records to be deleted from Settings › Data in the app, or by email; the app shows a request number, and the request is reviewed and completed by JonnyLab. This does not delete records held by Apple, RevenueCat, Cloudflare, or OpenAI under their own policies.

If the app can no longer prove its identity — for example after reinstalling it — version 1.1 and later create a new random identity, automatically or from Settings › AI Reflection › Reconnect AI, and restore your purchases to it. The new identity is linked to the previous one only so that usage limits carry over; the previous identity is no longer used and expires under the 365-day rule.

Apple processes in-app purchases. ReasonTrace uses RevenueCat to offer and restore purchases without a ReasonTrace account. Apple and RevenueCat may process a random app user identifier (anonymous, or the random identifier issued by the AI server if you use AI Reflection), product and entitlement status, transaction or receipt information, and limited app or device technical information needed for purchases. The AI server asks RevenueCat whether that identifier has an active subscription. Decision text, reviews, recordings, and transcripts are not sent to RevenueCat.

ReasonTrace contains no advertising SDK, advertising tracking, or behavior analytics SDK. JonnyLab does not sell your personal information or use it for advertising. The app does not request an advertising identifier.

Local records remain until you delete them, delete all app data, or remove the app. You can delete individual records, recordings, or all app data and reminders in the app. You can export records as JSON or Markdown using the system file exporter; exported copies are outside ReasonTrace and must be managed separately. Depending on your Apple and device backup settings, local app data may be included in an encrypted device or iCloud backup under Apple’s policies. AI server records follow section 7. Purchase records may be retained by Apple or RevenueCat under their policies and legal obligations.

JonnyLab does not store your journal, thoughts, reviews, recordings, or transcripts on its servers, and does not collect contacts, location, health information, financial account details, or biometric data through ReasonTrace. Text you choose to send with AI Reflection passes through JonnyLab’s server without being saved there.

ReasonTrace is not directed to children under 13. JonnyLab does not knowingly collect personal information from children through ReasonTrace.

ReasonTrace keeps journal content on your device, requires explicit action for recording, AI requests, and export, and offers App Lock and deletion controls. AI requests use HTTPS and App Attest, and the AI server stores identifiers rather than content. No storage or transmission method is completely risk-free; protect access to your device and exported files.

Apple services, including iOS, Speech, notifications, authentication, App Attest, file export, backups, and in-app purchases, are governed by Apple’s policies. RevenueCat purchase processing is governed by RevenueCat’s privacy policy. Cloudflare hosts the AI server. OpenAI processes AI Reflection requests under its API data policy.

We will update this policy when features or data handling change. The updated page will show a new effective or last-updated date. Questions and deletion requests may be sent to [email protected].