Privacy Policy

Last updated September 2026

Introduction

Sojourn is an atmospheric audio app for rest, focus, and sleep. This Privacy Policy explains what information the app handles, how it is used, and the choices you have. We built Sojourn to ask for as little as possible.

If you do not agree with this policy, please do not use the app.

You can use the app without an account

Sojourn is guest-first. You can open doors, listen, build playlists, and keep a private record of where you have wandered without ever creating an account. As a guest, this activity stays on your device and is not sent to our servers.

You only need an account if you want your record and playlists to follow you to another device. Creating one is always your choice.

Information we handle

If you create an account

• Email address. Used to sign you in and recover your account. You can sign in with Apple, with Google, or with a one-time code sent to your email.
• Your name, but only if you sign in with Google. Google includes it in the sign-in response and it is stored with your account. The app never reads it, never shows it, and never uses it for anything. Signing in with Apple or with an email code does not give us a name at all.

What syncs when you are signed in

• Visit history: the days you visited, how many times you opened each door, a private log of where you wandered, and your total listening time.
• Favourite doors that you mark.
• Custom playlists you build.
• The intention you chose in the opening ritual.

When you listen

• Door soundscapes stream from our audio storage the first time you open a door, then a copy is kept on your device so later visits play instantly. Delivering the audio involves your device making a standard internet connection to our storage provider, which processes connection data such as your IP address to serve the file. We do not use this to identify or track you.

Stored only on your device

• Your chosen wanderer name.
• App preferences and dismissed tips.
• All of your listening activity while you remain a guest.

How we use your information

We use the small amount of information above only to run the app:

• To provide the app and keep it working.
• To sync your record, favourites, and playlists across your devices when you are signed in.
• To sign you in securely and recover your account.
• To answer you if you contact support.

We measure the results of our own Apple Ads as explained below. We do not sell your data or use it to build behavioural advertising profiles.

Product analytics, and what we do not do

Sojourn uses PostHog to count how the app is used: which screens are opened, which features are tried, and when something fails. It tells us that a door was opened, never who opened it. We use it to find what is broken and what nobody can find.

We do not use PostHog for advertising, and session replay is switched off, so no recording of your screen is ever made.

You can turn analytics off at any time in Settings. Doing so stops further product analytics and crash reports being sent to PostHog.

Apple Ads measurement

On iOS, RevenueCat collects a standard Apple AdServices attribution token and sends it to RevenueCat. RevenueCat asks Apple whether an install came from our Apple Ads and connects the attribution information Apple returns with the RevenueCat app user identifier and purchase records described below. This helps us understand which campaigns, ad groups and keywords lead to subscriptions or Lifetime Keys.

We do not request the advertising identifier (IDFA) or use this measurement to target you across other apps or websites. This is separate from the PostHog product analytics setting. Apple Ads measurement is not collected by the Android or web app.

Whispers and notifications

Whispers are optional reminders you can set inside Sojourn, choosing the moods and hours yourself. They are scheduled entirely on your device by its operating system. We run no notification server, we hold no push token, and nothing about your whispers ever leaves your device.

You can change or turn off whispers at any time in the app, or silence them in your device settings.

Subscriptions

If you choose to unlock the Key (our optional subscription), purchases are handled by RevenueCat together with the Apple App Store or Google Play. To manage your subscription and receipts, RevenueCat receives an anonymous app user identifier while you are a guest, your Sojourn account identifier when you sign in, your device platform, and your purchase history and subscription status. This information supports purchase verification, access to the Key, and purchase reporting in RevenueCat.

RevenueCat does not receive your email address, your name, or your listening activity. Apple and Google process the payment itself; we never see your card or payment details.

Where your data is stored

For signed-in accounts, your data is stored with Supabase, our database and authentication provider (PostgreSQL hosted on cloud infrastructure).

• In transit: all data is encrypted over HTTPS.
• At rest: stored data is encrypted by our provider.
• Access control: row-level security means an account can only reach its own data.
• On device: a local cache is kept in your device storage and cleared when you remove the app.

No system is perfectly secure, so while we take reasonable steps to protect your information, we cannot guarantee absolute security.

Who we share data with

We do not sell your data and we do not share it with advertisers. We share only with the service providers needed to run the app, each acting for us and not for themselves:

• Supabase: authentication and cloud storage of your account, record, favourites, and playlists.
• RevenueCat, with the Apple App Store and Google Play: subscription purchase, verification, and management. On iOS, RevenueCat also works with Apple to measure our Apple Ads as described above.
• PostHog: product analytics, which you can turn off in Settings.
• Apple and Google: sign-in, when you choose to sign in with them.
• Legal compliance: we may disclose information if required to by law.

Each provider handles data under its own privacy policy.

Deleting your account and data

You are in control of your data:

• Delete your account: open the Profile tab, find the account panel marked LINKED, and tap DELETE ACCOUNT. This permanently removes your email, your synced visit history, favourites, playlists, and chosen intention from our servers. Full steps, including how to ask us by email if you have already uninstalled the app, are at sojournrealms.com/delete-account.
• Sign out: signing out stops syncing. Your local record stays on the device until you remove the app.
• As a guest: uninstalling the app clears everything, since nothing was stored on our servers.

Data retention

We keep your account data for as long as your account is active. When you delete your account, we purge your data from our systems within 30 days.

If your account has been inactive for 24 months, we may contact you at your account email before removing it.

Subscription records held by Apple, Google, or RevenueCat are governed by their own retention practices, independent of ours.

Children's privacy

Sojourn is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have, we will delete it.

Your rights

Depending on where you live, you may have rights over your personal data, including:

• The right to access the data we hold about you.
• The right to correct inaccurate data.
• The right to delete your data.
• The right to a copy of your data.
• The right to object to certain processing.

To exercise any of these, contact us using the details below.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will change the date at the top of this page. Your continued use of the app means you accept the updated policy.

Contact us

If you have any questions about this Privacy Policy, contact us at support@sojournrealms.com. Organization: Gallantin.