QuillDay - Privacy policy

Last updated: 26 August 2026

Quillday is a private, local-first daily journal published by Land Tech Web Designs, Corp. This policy applies to the Quillday iPhone, iPad, Apple Watch, Mac, and Android apps. It is not the generic Land Tech website privacy policy.

Related: Quillday Data Deletion Policy.

What Quillday stores on your device

Journal entries, titles, tags, mood check-ins, photos, audio, video, templates you create, optional Health and calendar details you add, Time Capsule letters, and an optional passcode stay in the app’s on-device store. Quillday does not create a Quillday.com account and does not run a journal server.

There is no “delete my Quillday account” control because there is no developer-hosted account. You can delete all local journals in Settings. That wipe includes Health snapshots stored on pages. If Quillday has been keeping an automatic encrypted copy in your iCloud or Drive, Settings asks whether to delete that copy as well. Keeping it stops Quillday from copying to it or reading it back until you use Backup. Subscriptions are cancelled in your Apple Account or Google Play settings. See the data deletion policy.

If you tap Photos from this day, Quillday asks for photo-library access in that moment and attaches photos whose library date matches that page. It does not scan your camera roll in the background.

What we do not collect

Land Tech does not receive your entry text, attachments, precise location, audio, Health snapshots, calendar titles, receipts, Companion API keys, backup passphrases, or the key that unlocks your encrypted backup. The apps do not send journal bodies to analytics.

Optional place and weather

If you add “where I wrote this,” Quillday asks for location only in that moment (not on launch) and can save a place name and map pin on that entry, on your device.

If you add weather, Quillday may request a forecast from Open-Meteo using the place you chose. That request goes to Open-Meteo, not to a Quillday server.

Optional Apple Health (Apple Watch)

On Apple Watch you may allow Quillday to read a snapshot when you save a page: heart rate, steps, activity rings, and last night’s sleep. This is asked in context (after you save a page, or from Health in the Watch app), never on launch. You can turn it off there at any time.

The snapshot is stored on that page on your devices, shown in an Apple Health section and on Movement, and included if you export that page. Quillday does not write to Apple Health and does not send Health data to Land Tech or to any other server.

Optional calendar

If you tap Add today’s calendar, Quillday may read today’s event titles and put them on that page. Permission is requested in that moment, not on launch. Titles stay on the device and are never logged.

Optional Companion, Ask your journal, and Life stories (Quillday Plus)

Companion follow-ups, Ask your journal matches, and Life stories recaps are computed on this device by default (Local only). Nothing is sent.

If you choose Local + my key and tap Ask with my key, Quillday first shows an in-app confirmation that names the provider, describes the excerpts, and requires Send excerpts. Cancel keeps the on-device answer. Only after you confirm does Quillday send what that feature needs to the provider you picked:

• Companion: a short pack of recent on-device notes (excerpts from about the last 14 days, plus the on-screen question)
• Ask your journal: only the matching page excerpts for that question
• Life stories: only the excerpts used to write that recap

The request goes to OpenAI (api.openai.com) or Anthropic (api.anthropic.com) using your API key, stored in this device’s secure store (iOS Keychain / Android Keystore / Mac Keychain). Quillday does not receive the key and does not host a model. You can turn this off at any time. Local-only mode and Off send no journal text to those providers.

Automatic encrypted backup (your own cloud)

Once a journal has pages, Quillday keeps one encrypted archive (quillday-backup.qday) in storage that belongs to you: your iCloud Documents folder on Apple devices signed in to iCloud, or your Google Drive application-data folder on Android once you connect Drive. The archive is encrypted on the device before it leaves it. Quillday refreshes it when you open the app, at most once a day — about every fifteen minutes if you use the Plus iPhone-and-Mac merge.

There is no passphrase to remember for this copy. The first time Quillday backs up, it generates a random key for your account and stores it where only you can reach it: a private CloudKit record (QDVault in the iCloud.com.quillday.app container tied to your Apple ID), or a quillday-vault.json file in that same Drive application-data folder. A copy is cached in this device’s secure store (iOS Keychain, Android Keystore, or Mac Keychain). Land Tech never receives that key and cannot open the archive.

If you install Quillday on the same Apple ID or Google account and the journal is empty, the app reads that key and restores your pages before showing you an empty journal. That is why reinstalling — including moving from TestFlight to the App Store, or setting up a new phone — does not lose your writing. Restoring is not a paid feature.

To stop the automatic copy on Apple, sign out of iCloud or turn off iCloud Drive for Quillday in your device settings. On Android, simply do not connect Drive. Removing an archive you already have is covered in the data deletion policy.

Passphrases, and the Plus merge

Passphrases still apply to a copy you take off your account. Export and Share encrypted archive seal a .qday with a phrase you choose, and Import can open one. Land Tech cannot recover a phrase you picked.

Quillday Plus on Apple can also write per-page encrypted CloudKit records (QDPage in the same container), so an iPhone and a Mac on one Apple ID settle on each page. Those records use the same account key — nothing for you to type. Merging runs on launch, when you tap Merge, about every twenty-five seconds while the app is open in front of you, and when your other device reports a change (see Background sync below). If the same page was edited on both devices while one of them was offline, Quillday keeps both versions — the second is saved as a separate page titled “Conflicted copy” — rather than discarding either one.

Land Tech cannot read those archives or records and does not operate the cloud storage.

Purchases

Quillday Plus is sold only through Apple In-App Purchase and Google Play Billing. Apple and Google process payment. Quillday does not take card numbers.

Optional dictation

If you tap Dictate (or Speak on Apple Watch), Quillday uses the microphone and the operating system’s speech recognizer to type what you say onto that page. When the device can do this on-device, it does. Otherwise Apple or Google’s system speech service processes the audio. Land Tech does not receive the recording or the transcript.

Lock and biometrics

An optional passcode and Face ID / device biometrics unlock the app on this device. Biometric data stays with the operating system.

Notifications

An optional daily writing reminder is scheduled only after you turn it on and grant permission on the reminder screen. A Plus On This Day notice can fire on mornings when a past year’s page exists. A Time Capsule notice can fire when a sealed letter opens (permission is requested when you seal the letter). Notices never quote a page or letter.

Background sync (Apple)

Quillday registers with Apple Push Notification service on iPhone and Mac so iCloud can signal that a page changed on your other device. These signals are silent: they display nothing, they do not ask for notification permission, and they carry no journal text — only the fact that something changed inside your own iCloud container. Receiving one lets Quillday merge in the background, so a page written on your Mac can appear on your iPhone without you opening the app first. The push token is issued by Apple and used by iCloud; Land Tech does not receive it and does not run a push server. Turning off Quillday’s iCloud access stops these signals.

Widgets, Siri, and Apple Watch

Home, lock-screen, and Watch tiles (including the Smart Stack “Write today” tile) show a streak or write-today count only — not journal text. Siri or Watch can save a quick page. The Watch hands that page to the iPhone with WatchConnectivity; the iPhone stores it in your local journal. Land Tech does not receive those drafts.

Share into Quillday

The iOS Share extension and Android share sheet can create a page from text, a URL, or a photo you send into Quillday. That content stays on the device.

Children

Quillday is not directed at children under 13 (or the age required in your country).

Changes and contact

We will update this page when the product’s data practices change.

Support: https://landtechwebdesigns.com/quillday-support/
Email: sales@landtechwebdesigns.com
Mail: Land Tech Web Designs, Corp, 859 Valley Ridge Dr, Pensacola, FL 32514