Privacy

What this covers

This covers dvelop.me, the writing and planning product, and the account you use to reach it. It does not cover anything you choose to send somewhere else.

What is stored

• An account. It holds your username, your email address, a hash of your password, a public key for each passkey you add, your language, your time zone and the day your week starts. The password itself is never stored: what is kept is a scrypt hash with a salt unique to your account, and that hash is what a database disclosure would yield.
• A personal workspace. Everything you write belongs to it, and every query the product makes is restricted to the workspace you are signed in to.
• A session record for each device you are signed in on. The cookie in your browser holds a random value; only a one way hash of it is stored, so reading the table gives nobody a way in.
• Your email address, encrypted under the same key as your writing, alongside a keyed hash of it that lets us find your account without reading the address. It is used for two things and no others: confirming that the address reaches you, and sending a reset link if you ask for one.
• What you write, once the journal exists. Each entry carries the data-use state you gave it.

Forgetting your password

If you forget it, we send a link to your confirmed address that lets you set a new one. The link works once and expires in thirty minutes, and using it signs out every device. This means whoever controls that mailbox can take over the account, which is the trade every reset link makes; a passkey, which you can add and which nothing requires, is not subject to it.

The form that asks for a reset answers the same way whether or not the address has an account, so it cannot be used to find out whether somebody is a user here.

What is not stored

• No name, and no address book. We hold the one email address you gave us and nothing else about who you are. It is never used to profile you, never shared, and never sent anything you did not ask for.
• Your password in any readable form. Only a salted scrypt hash of it is stored, and nothing in the product can reverse one.
• No raw network address. The rate limiter that protects sign in stores a salted hash instead, so the table cannot be used to confirm that a particular address visited.
• No advertising identifiers, no behavioural profiles and no third party trackers.

Cookies

• A session cookie, set when you sign in. It is HTTP only, restricted to this site, and expires after twelve hours or when you sign out.
• A language cookie, set when you choose or are offered a language. It remembers the choice for a year so you are not asked again. It carries a language, nothing else.

There are no analytics or advertising cookies on this site.

Your writing and the coach

Every entry carries one of three states: Private, Coach accessible or Memory eligible. Private entries stay outside coach context. Long-term memory is created separately and always requires your approval.

Who generates the coach's answers

Mistral AI, a French company, generates them. When you ask the coach something, the text of the entries you have marked Coach accessible or Memory eligible is sent to Mistral in the European Union, along with your question. Private entries and unfinished drafts are not sent, and nothing that talks to a model can retrieve one.

Mistral keeps what it was sent for up to thirty rolling days, to detect abuse of its service, and then deletes it. It is not used to train any model: this account is on a paid plan where that use is excluded by contract and disabled in the account settings.

We intend to move to Mistral's zero data retention option, which removes that thirty-day window. This page will say so when it is in place, and not before.

Where it is kept

The application, its database and its backups are in the European Union.

Your rights

Under the General Data Protection Regulation you can ask for a copy of your data, correct it, delete it, take it elsewhere, or object to how it is used. You can also complain to your national supervisory authority.

Deletion and export are controls in the product rather than a request you have to send to somebody.

Changes and questions

When this document changes in a way that matters, the change is described rather than quietly replaced. The contact address for privacy questions is published here before launch.