Pensate
Privacy Policy
Last updated: March 11, 2026
Introduction
Pensate is an iOS journaling app developed by Corvian Labs. This Privacy Policy explains what data the app collects, how it is stored, who can access it, and what choices you have. Because Pensate is designed around privacy, most of this policy is straightforward: your words stay on your device.
Data We Collect
The table below describes every category of data Pensate touches, where it is stored, and whether it is ever shared.
| Data type | Source | Where stored | Shared? |
|---|---|---|---|
| Journal entries | You | On device (SwiftData) | Never |
| Mood data | You | On device (SwiftData) | Never |
| Photos | You | On device (SwiftData) | Never |
| App preferences | Auto | On device (UserDefaults) | Widget only, via app group |
| Device locale | Auto | Not persisted | Never |
| IDFA (Advertising ID) | Only if ATT permission granted | Ad network | AdMob only, if opted in |
Pensate has no analytics SDKs, no crash reporters, and no tracking libraries beyond the optional AdMob integration described below.
On-Device AI Processing
All AI features in Pensate — daily reflections, weekly insights, monthly recaps, and personalized prompts — run entirely on your device using Apple's Foundation Models framework. No journal content, mood data, or any other personal information is sent to Corvian Labs or any external server. There are no AI API calls. Your words do not leave your device.
Optional iCloud Sync
Premium subscribers can opt in to iCloud sync, which is off by default. When enabled, Pensate uses Apple CloudKit to sync your journal data across your devices. This sync is end-to-end encrypted by Apple — Corvian Labs has no access to synced data and cannot read, retrieve, or share it. You can disable iCloud sync at any time in Settings.
Advertising (Google AdMob)
Pensate offers free users the option to watch a short rewarded video ad to unlock an additional hour of writing. This is entirely voluntary and optional.
- Ads are served by Google AdMob.
- When the app first launches, Apple's App Tracking Transparency (ATT) prompt will ask whether AdMob may use your device's Advertising Identifier (IDFA) to personalize ads.
- If you decline, ads will still be shown but without personalization. No IDFA is collected or shared.
- If you accept, AdMob may use your IDFA for ad measurement and personalization in accordance with Google's Privacy Policy.
No other advertising or analytics SDKs are present in the app.
Data Deletion and Export
- You can delete individual journal entries at any time within the app.
- You can delete all app data via Settings.
- All data stored by Pensate is permanently deleted when you uninstall the app from your device.
- You can export your complete journal as a PDF at any time via Settings → Export Data.
- If iCloud sync is enabled, you can delete iCloud data from your device's iCloud settings.
Security
Pensate offers an optional journal lock using Face ID, Touch ID, or a custom PIN. All data is stored locally in Apple's SwiftData and is protected by your device's built-in iOS encryption. No passwords or biometric data are transmitted or stored by Corvian Labs.
Children's Privacy
Pensate is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided data through the app, please contact us at the address below and we will take steps to delete it.
Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to check back periodically, particularly before major app updates.
Contact Us
If you have questions or concerns about this Privacy Policy or how Pensate handles your data, please contact us:
- Email: info@corvianlabs.com
- Website: https://corvianlabs.com/contact