Privacy Policy
Winnow
Last Updated: March 24, 2026
Overview
Winnow is a cognitive behavioral therapy journaling app built by Psyfi Technologies. We designed Winnow with a privacy-first approach: your journal entries, mood data, and personal reflections stay on your device. This policy explains what data exists, what limited data leaves your device, and your rights.
Data That Stays on Your Device
The core of Winnow runs entirely on your phone using a local database. The following data is created and stored only on your device and is never transmitted to our servers or any third party:
| Data Type | Examples |
|---|---|
| Thought records | Situations, automatic thoughts, evidence, balanced thoughts |
| Mood check-ins | Selected emotions, intensity ratings, timestamps |
| Cognitive distortions | Distortions you identify in your thought records |
| Safety plan | Warning signs, coping strategies, contacts, reasons for living |
| User profile | Name (if provided), preferences, settings |
| Exported files | CSV and PDF exports you generate |
We have no ability to access, read, or recover this data. If you uninstall the app, this data is permanently deleted.
Data Processed by Third-Party Services
Two optional features involve sending limited data off your device. Both require a Pro subscription and explicit user action.
AI-Powered Suggestions (Pro Feature)
When you use distortion detection, balanced thought suggestions, or pattern analysis, the text of the relevant thought record step is sent to a Cloudflare Worker proxy operated by Psyfi Technologies. That proxy forwards the text to OpenAI's API for processing and returns the result. The text is not stored by our proxy beyond the duration of the request. OpenAI's data usage policy applies to the API call; as of this writing, OpenAI does not use API inputs for model training. No identifying information (name, email, device ID) is included in the request — only the thought record text and an anonymous user identifier used for rate limiting.
Subscription Management
If you subscribe to Winnow Pro, your purchase is processed by Google Play. We use RevenueCat to manage subscription state. RevenueCat receives your anonymous app user ID and purchase receipt from Google Play to verify your entitlement. RevenueCat does not receive your journal content, mood data, or any personal health information. See RevenueCat's privacy policy for details.
Data We Do Not Collect
Winnow does not collect analytics, crash reports, advertising identifiers, location data, contacts, photos, or any other data from your device. We do not use any analytics SDKs, advertising frameworks, or tracking pixels. There is no account creation, no email collection, and no sign-in required to use the app.
Children's Privacy
Winnow is not directed at children under 13. We do not knowingly collect personal information from children. The app's content rating is "Everyone" on Google Play, but it is designed as a mental health tool for adults and adolescents working with a therapist.
Data Security
Your local database is stored in the app's private storage directory, which is sandboxed by Android and inaccessible to other apps. The AI proxy communicates over HTTPS. Subscription verification uses encrypted tokens. We do not store any user data on our own servers.
Data Export and Deletion
You can export your thought records and mood data at any time as CSV or PDF files using the in-app export feature. To delete all your data, use the "Delete All Data" option in Settings, or simply uninstall the app. Since no data is stored on our servers, uninstallation constitutes complete deletion.
Changes to This Policy
If we make material changes to this policy, we will update the "Last Updated" date above and notify users through the app. We will not retroactively reduce your privacy protections without your consent.
Contact Us
If you have questions about this privacy policy or Winnow's data practices, contact us at:
Email: jake.edwards@oakencloud.com
Website: psyfitechnologies.com