Privacy Policy

This policy describes how the operator of Sustine (“we,” “us”) collects, uses, and shares information when you use Sustine. It applies to the published website, including when you add it to a phone’s home screen.

Who we are

Sustine is a private practice journal. You sign in, record how the day went, and may ask the service to examine a day or write a letter about a stretch of days. We are based in New York, United States.

This service is hosted using xAI / Grok’s app-publishing infrastructure. The journals live in a database attached to this published app, not on your phone.

What we collect

We collect only what the product needs to run:

• Account. Name, email, and sign-in method (Google, X, or email and password). If you use Google or X, that provider shares the profile information you permit.
• Practice. Morning intentions; evening scores; evening notes; optional context marks for a day (for example sleep, movement, or stress), including a quantity when you enter one; departures you describe (including duration and type); and dates you keep.
• Generated reading. Examinations of a day, letters of a stretch, weekly reckonings, a next-morning watch, and pattern readings, produced when you ask for them or, for the watch, when you close an evening.
• Technical. Basic logs needed to sign you in and keep the site running (for example, that a request was made). We do not run advertising trackers.

You choose what to write. Do not enter information about other people that they would not expect to be stored, and do not enter data you are not willing to have processed as described here.

How we use it

• To show you your journal, scores, charts, and letters.
• To generate an examination, a letter, a reckoning, or a pattern reading when you press those buttons, and a next-morning watch when you close an evening.
• To keep you signed in and secure the account.
• To operate, fix, and protect the service.

We do not sell your information. We do not use your journal to advertise.

Artificial intelligence

If you choose Examine the day or Write the letter, the text of the relevant notes, scores, intentions, and departures is sent to xAI (Grok) so a reading can be generated. That reading is then stored with your account. If you do not press those buttons, that text is not sent for an examination or a letter. Optional context marks are stored with the day and are not included in the examination or letter reading.

Citadel may also ask for three further readings. The Reckoning sends the calculated figures for the week and the notes of those days. Tomorrow’s watch and Patterns send only figures the app has already calculated — counts, scores, and associations — not a fresh set of statistics. Each reading is stored with your account. If the key for that generation is not set, the reading is not invented; you are told it cannot be written.

xAI processes that content to return the reading. Their terms and privacy notices also apply to that processing. Do not treat the reading as medical, legal, or therapeutic advice.

Who else can see it

Other users cannot open your journal.

If you hold Citadel, you may send an invitation link to someone you trust. That person may later record an external mark — steadiness from 1 to 5, and a few fixed trait chips. They cannot open your journal, scores, departures, morning aim, context, examinations, letters, reckonings, tomorrow’s watch, or pattern readings. Those marks are stored apart from your evenings and are not averaged into your Stoic Score. You can read them in Measure, under External Perspective. The witness cannot. There is no public profile, directory, or ranking.

A companion, a circle, and a campaign are separate from a witness. People you invite into those can see whether a morning aim was set and whether an evening was closed, and the count of days kept. A circle orders that count only. They cannot open the journal, the Stoic Score, departures, the words of the morning, context, examinations, letters, reckonings, tomorrow’s watch, pattern readings, or witness marks. There is no public profile, directory, follower count, or virtue ranking. You can revoke an invitation, and revoking it closes what they could see.

We share information only:

• With hosting and database providers that run this published app (xAI / Grok’s publishing stack).
• With sign-in providers you choose (Google or X), to authenticate you.
• With xAI, when you request an examination, letter, reckoning, or pattern reading, or when closing an evening writes tomorrow’s watch, as described above.
• With Stripe, if you open Citadel checkout, so they can take the subscription. We store only the current entitlement (Practice or Citadel) and the Stripe ids needed to keep that current.
• If the law requires it, or to protect someone’s safety or the service.

We do not sell, rent, or barter journal contents. If the operator of this instance later uses a different host or database, this policy will be updated and the same limits will be intended to apply.

How long we keep it

We keep your account and practice records while the account exists. You may delete an individual day’s review in the journal. You may delete the entire account and its remaining records from Account in the app, or email us from the address on the account and ask for deletion. We will delete or irreversibly de-identify that data except where we must keep a record (for example, a fraud or legal hold).

If this published app is shut down, we will not keep your journal for a new purpose. Remaining copies on backup media are removed in the ordinary backup cycle.

Security

Access to your journal in the app requires your sign-in. Data is stored in the hosted database for this published instance. No method of transmission or storage is perfectly secure. Write accordingly.

Children

Sustine is for people 18 or older. We do not knowingly collect information from children under 18. If you believe we have, contact us and we will delete it.

Your choices and rights

You may access and edit your practice in the app. You may delete a day. You may delete the account from Account, or request a copy as described above. If you are a resident of a place that grants additional privacy rights (including California), you may also request that we confirm what we hold and that we not “sell” or “share” personal information as those laws define those words — we do not sell or share for cross-context advertising.

We will not deny you the service for exercising a privacy right, except that deletion of the account means you can no longer use the journal.

This is not health care

Sustine is a self-reported practice journal. It is not a medical device, not psychotherapy, and not a crisis service. If you are in danger or considering self-harm, contact local emergency services or, in the United States, the 988 Suicide & Crisis Lifeline.

Changes

We may update this policy. The date at the top will change. Continued use after an update is acceptance of the revised policy. Material changes will be noted in the app where practical.

Contact

For privacy requests, write from the email address on your Sustine account and state what you want (access, copy, or deletion). the operator of Sustine is in New York, United States.