Privacy Policy
What you write here belongs to you.
Last updated: August 2, 2026
What we collect
We keep the smallest amount of information needed to run Lymonada for you:
- Account details — your email address, a securely hashed password (or your Google sign-in identifier), and the first name you choose to give us.
- Journal entries — anything you write in the daily journal.
- Mood check-ins — the mood you select and when you selected it.
- Streak and checklist data — your no-contact start date and which self-care tasks you have marked complete.
- Method exercise responses — what you write or select inside exercises, including urge logs, grounding practice records and saved reflections.
- Letters to your future self — stored sealed until their delivery date.
- Contact form submissions — the name, email and message you send us.
Your writing is private
Your journal entries, letters and exercise responses are private to your account. We do not read them, mine them, or use them for marketing, research or training of any kind. Access is restricted at the database level so that only your authenticated account can read your rows.
The only exceptions are narrow ones: where we are legally required to disclose information (for example, a valid court order or subpoena), or where a brief, limited look is unavoidable to fix a technical fault you have asked us to investigate.
Where your data is stored
Lymonada is built on Supabase, which hosts our database and authentication on cloud infrastructure in the United States. Data is encrypted in transit and at rest by our hosting provider. Supabase processes this data on our behalf as a service provider, not for its own purposes.
We do not sell your data
We do not sell, rent or trade your personal information or your writing to third parties, ever. We do not share it with advertisers or data brokers.
Analytics and cookies
Lymonada currently runs no third-party analytics, advertising pixels or tracking cookies. The only browser storage we use is what is needed to keep you signed in and to autosave exercise drafts on your own device. If we ever add privacy-respecting analytics, we will update this page before turning it on.
Export and deletion
You can ask us for a copy of everything associated with your account, or ask us to delete your account and its contents entirely. Email privacy@lymonada.com from the address on your account and we will action it within 30 days. Deletion is permanent — journals and letters cannot be recovered afterwards.
Children
Lymonada is intended for adults and is not directed at children. We do not knowingly collect information from anyone under 13, and our Terms of Service require all account holders to be 18 or older. If we learn that a child under 13 has created an account, we will delete it and its data.
Changes to this policy
If we make a material change, we will update the date at the top of this page and, where the change meaningfully affects you, let you know by email.
Governing law and contact
This policy is governed by the laws of the State of Texas, United States. Questions, requests or concerns: privacy@lymonada.com.