Privacy

Last updated 4 July 2026

Your journal lives on your device

Acapo has no accounts and no sign-in. Everything you write and every photo you add is stored on your device. We can't read your journal, and we never receive it.

iCloud sync is yours, not ours

If you turn on iCloud sync, your journal syncs through your own iCloud account. Apple processes that data on your behalf; it never touches our server and we can't see any of it.

Diary links

Nothing reaches our server until you create a diary link. When you do, a snapshot of that one project and its photos is copied to our server so the page can load for the people you send it to. The server is hosted by Hetzner in Germany, in the EU. The copy stays there until you revoke the link or delete it in the app; the moment you do, the snapshot and its photos are deleted from the server and the page stops loading.

Diary pages are unlisted. Each link is a long random address that can't be guessed, there is no directory of pages, and every page tells search engines not to index it. Only the people you send the link to can see it.

Purchases

Buying Acapo goes through Apple and the App Store. We never see your payment details.

No tracking

No analytics, no ads, no trackers, and no third parties beyond Hetzner, who host the server. The server keeps short-lived technical logs (IP addresses, used to limit abuse) that rotate away within days.

Who is responsible

Acapo is made and run by one person: Noemi Banal, based in Ireland, who is the data controller for anything the server holds. If a page you shared holds data about you, or you have any question about it, write to support@acapojournal.app.

Your rights

The only personal data the server ever holds is what you chose to share: the snapshot behind a diary link. You can see it (it is the page itself), correct it (edit in the app and the page updates), delete it (revoke the link, or delete the project), or ask us to do any of that by email. Under the GDPR you also have the right to a copy of that data and to complain to a supervisory authority; ours is the Irish Data Protection Commission at dataprotection.ie.

Children

Acapo doesn't knowingly collect personal information from children. There are no accounts to create, and nothing leaves the device unless someone chooses to share a page.

Questions

Email support@acapojournal.app.