Privacy

Last updated 28 September 2026. Written to be read: every sentence here is meant to be true of the app as shipped, and this page changes when the app changes.

What the phone collects

Narrate runs on your phone and, with your permission, collects:

• Where you are — location in the background, so the day has its places and journeys even while the phone is in your pocket. The names of nearby Wi‑Fi networks are used to tell one door from the next.
• How you moved — the phone's motion, to tell a walk from a drive.
• Screen time — how long the phone was in use and roughly on which apps. This stays on the phone and is never copied to the cloud.
• Steps and distance — from Health Connect, and only those two: no heart rate, no sleep, no body measurements. Read on the phone; nothing is sent to Google.
• Your photos' details — when a photo was taken, its size, which album it is in, and the place it was taken from the photo's own location tag, so the day can offer you its pictures and match them to where you were. These details stay on the phone: the place a photo was taken is never copied to the cloud, and the pictures themselves leave only when you choose one (below).
• What you listened to — recently played tracks from Spotify, if you connect it. Spotify sees only that you signed in and asked for your own recent plays.
• What you tell it — what you type or say to Narrate, and what you tell a connected AI to remember (below).
• Your name and age, which Narrate asks when you set it up. Both are kept as part of your record, so they are in the cloud copy too. Whether a parent or guardian agreed (asked when you are 13 to 17) stays on the phone and is never copied.

Narrate does not read your notifications or messages, your contacts or your calendar. Narrate contains no advertising or analytics kit.

The phone is the record; the cloud is a copy

Everything above is written to a database on your phone first. That is the record.

Signing in sends a private copy of your record to the cloud — for your other devices and the AIs you connect. Your phone stays the record. There is no separate switch: signing in is what sends the copy, and signing out stops it.

The raw stream — every location sample, every screen-time row, every music event — never leaves the phone. Only the conclusions do: places visited, journeys, days, and the things Narrate has learned about you.

In the cloud, the words are encrypted: what you wrote, the names you gave people and places, your day's text and its rating. Your place visits, journeys and daily step counts are stored in plain form, readable only by your account. This is encryption at rest, not end‑to‑end: the key that unwraps your words lives in our database's vault, and our server can read them to serve you. We will never describe it as end‑to‑end.

A photo you choose as a day's picture, or as your profile picture, is uploaded to your own private folder in our storage so your other devices can show it. A day you share carries its photo to the people you shared it with. No other photo is uploaded.

Where it is stored, and who processes it

• Supabase hosts the database, your sign‑in and your photo folder, in the EU (Ireland).
• Cloudflare runs Narrate's server: the connection your AIs talk to, the assistant, voice, and the nearby‑places lookup.
• Anthropic provides the model behind Narrate's own assistant and its day writing. When you talk to Narrate, your words and the parts of your record the app includes are sent to Anthropic through our server; our key never leaves the server. Under Anthropic's commercial terms, Anthropic may not train models on that content.
• Groq transcribes your voice when you speak to Narrate; the recording is sent for that purpose only.
• The Norwegian Meteorological Institute (api.met.no) receives a location, to about 1 km, to give the day its weather.
• Nearby places. To name where you were, the phone asks our server for places near a coordinate. The server answers from a map dataset it holds and does not store the lookup; our hosting provider may keep standard request logs briefly.

We do not sell your data, and we do not share it with anyone for advertising.

Connected AIs

You can connect the AIs you already use (Claude, ChatGPT, Cursor and others) to your record. A connected AI gets exactly two abilities:

• Recall — it can ask what Narrate knows about you and receives conclusions: a subject, a detail, which part of your life it belongs to, and when it was last confirmed. It never receives your coordinates, your place‑visit rows or your journeys.
• Remember — it can record something you told it, marked as coming from you through that AI.

You decide, per AI, which parts of your record it can see — Mind, People, Work, Places, Interests, Health — and whether it may record at all. These limits are applied by our server on every request, not by the AI's good behaviour. Switching an AI off, or removing it, takes effect on its next request: every token it holds is refused at once. What an AI does with what it has already read is governed by that AI's own policy, not ours.

Sharing with people

If you share a day with someone in Narrate, they receive the picture of it: the day's map as an image, the photo you chose, and what you chose to include. They never receive your stops, your coordinates or your place names — there is no field for them.

Your rights: export, pause, delete

• Export. From Account, you can export your whole record as a zip of plain files. It is assembled on the phone and handed to your share sheet; nothing is sent to us to make it.
• Pause (deactivate). Deactivating stops the cloud copy being served: your connected AIs are refused, you disappear from lookups, and everyone is signed out on every device. Signing in again restores it. One limit: a device already signed in may keep reading and writing its own copy for up to one hour, until its current token expires.
• Delete. When you delete, you choose: everything, including this phone's journal, or only the cloud account with your journal kept on this phone. A record that the deletion happened is kept, with none of your content.

Deactivate and delete are coming to the app. Until then, email us from the address you signed up with, and it is done within 30 days.

Children

Narrate is for people aged 13 and over. If you are 13 to 17, a parent or guardian must agree to your using it; Narrate asks you to confirm that when you set it up.

Who we are

Narrate is a product of New Analog, a company being formed in South Africa. Until it is registered, its founder operates Narrate personally. Questions about this page or your data: [email protected].

Changes

When the app changes what it collects or where it goes, this page changes with it, and the date at the top moves.