Privacy Policy
Effective 11 July 2026 · Getsu, by Nekko Labs
Getsu is a local-first monthly journal. By default your journal never leaves your device, and using the free app requires no account, no sign-up, and no tracking. This page explains exactly what data exists, where it lives, and the few optional features that can send data off your device (only when you turn them on).
THE SHORT VERSION
- Your journal, goals, moods, and photos are stored on your own device. We can't see them.
- The free app has no account, no analytics, no cookies, and no tracking.
- AI assist is optional and uses your own API key; when used, journal text (never photos) goes directly to Anthropic, not to us.
- Premium sync is optional: it stores a copy of your journal in our cloud so your devices can share it. It is encrypted in transit and at rest, but it is not end-to-end encrypted.
- You can export everything as plain files at any time, and delete it whenever you like.
Who we are
Getsu is made by Nekko Labs ("we", "us"). For any privacy question or request, contact privacy@nekkolabs.com. Getsu is open source; you can read exactly what the app does at github.com/nekko-labs/getsu.
What Getsu stores, and where
Everything you write lives in a single "vault": your monthly journal entries, highlights, optional struggles, moods, goals and their notes, trackers, and photos. By default this vault is kept only on your device, in two places you control:
- In the browser's local database (IndexedDB) on the device where you use Getsu.
- Optionally, in a folder you choose on your own disk. If you connect a folder, Getsu mirrors your journal there as plain Markdown and JSON files you can open in any editor. These files are written in readable form on your own machine.
A few small settings are also kept locally (whether you've seen onboarding, your last monthly-nudge date, and — if you add one — your AI key and model choice). None of this is sent to us.
What we do not collect
- No analytics or telemetry. Getsu contains no Google Analytics, PostHog, Sentry, Mixpanel, or any other tracking or usage-measurement tool.
- No advertising, no profiling, no data sales. We never sell or share your personal data, because in the default free app we never receive it.
- No cookies in the app. The Getsu app sets no cookies. (If you enable Premium sign-in, your login session is stored in your browser's local storage, not in a cookie.)
The marketing website (getsu.app)
These pages (the landing page, pricing, and this policy) load the Fraunces and Inter fonts from Google Fonts. To serve those fonts, Google receives your IP address and browser user-agent, as it does for any site using Google Fonts. We set no cookies and run no analytics on these pages. See Google's privacy policy for how Google handles font requests.
Optional: AI assist
Getsu can help you draft prompts or summarise a month using Anthropic's Claude models. This is off unless you add your own Anthropic API key. When it is off, an offline mock runs and nothing leaves your device.
When you add a key and use an AI feature, the request is sent directly from your browser to Anthropic (api.anthropic.com), not through our servers. What is sent is the text needed for that feature, for example a month's reflection, highlights, mood, goal titles, and tracker totals. Your photos are never sent. Your API key is stored only on your device and is never included in your vault, exports, or sync. Anthropic's handling of that text is governed by Anthropic's privacy policy.
Optional: Premium cross-device sync and backup
Premium lets your journal follow you across devices and keeps a cloud backup. It is entirely optional and off until you sign in. Sync and backup are provided using Supabase as our hosting and database provider.
When you turn it on:
| Data | Why | Where |
|---|---|---|
| Your email address | To sign you in with a one-time magic link (there is no password) | Supabase Auth |
| Your plan status (free / premium) | To know which features to enable | Supabase database |
| A copy of your vault (entries, goals, moods, trackers, and photos) | So your other devices can load the same journal | Supabase database |
Your rows are protected by per-user access rules so that only your signed-in account can read or write them.
Honest note on encryption: your synced data is encrypted in transit (HTTPS) and encrypted at rest on our provider's disks, but it is not end-to-end encrypted today. That means, in principle, it could be accessed on the server. If that matters to you, keep sync off and stay fully local, where only your device holds your journal.
Photos are part of the vault, so they are included in the cloud copy only when sync is enabled. Kept fully local (the default), your photos never leave your device.
Notifications
Getsu can show a single gentle reminder when a new month begins, using your device's built-in notifications and only if you allow it. There is no push server: nothing about the reminder is sent to us or anyone else.
Your choices and rights
- Export your entire journal at any time as plain Markdown and JSON.
- Delete local data by disconnecting your folder and clearing site data for Getsu in your browser.
- Delete cloud data (if you used Premium) by asking us at privacy@nekkolabs.com; we will delete your account, profile, and stored vault.
- Access, correction, and objection. Because your data is on your device you already have direct access to it; for anything we hold from Premium sync, you can request a copy or deletion. We honour applicable rights under laws such as the GDPR and CCPA.
Children
Getsu is not directed at children under 13, and we do not knowingly collect data from them. Because the free app stores nothing on our servers, no personal data is collected from any user by default.
Changes to this policy
If we change how Getsu handles data, we will update this page and its effective date. Material changes to Premium sync or any new data flow will be described here before they take effect. Because the app is open source, changes are also visible in the project's history.
Contact
Questions or requests: privacy@nekkolabs.com.