PRIVACY

A clear account
of your data.

Your journal lives on your iPhone. Lore Drop temporarily relays encrypted captures. AI features require your permission.

Last updated: September 23, 2026

What stays on your iPhone

Lore stores entries, recordings, transcripts, images, image evidence, Inbox items, and Weekly Chronicles locally. Your OpenAI API key, receiver credentials, and private encryption keys are stored in the iOS Keychain. Audio recordings are transcribed on device and are not sent to OpenAI. Lore has no advertising or analytics SDKs.

Device or computer backups may include journal data and files. Those backups are managed by you and Apple. Device-only Keychain settings prevent the API key and receiver credentials from moving to another device through a backup.

Lore Drop transfers

After you approve a browser, it encrypts each image and the capture’s note and image metadata to your device before uploading. The private relay stores encrypted content, device and computer names, public encryption keys, routing and attestation identifiers, byte counts, delivery state, and expiry. It does not receive the private decryption keys or plaintext image content. Your browser keeps its encryption keys and encrypted pending uploads in local browser storage for retries, and uses an authorization cookie.

Undelivered captures expire after seven days. Receipt, cancellation, device-inbox deletion, and revocation schedule encrypted objects for deletion. Access ends immediately when a capture expires or is canceled, even if physical deletion needs a retry. Minimal delivery records are retained for up to 30 days. Disconnecting clears local browser transfer material. A received image remains on your iPhone until you delete it there.

Your receiver identity remains registered until you delete its remote inbox. Temporary computer sessions last eight hours and remembered sessions last 30 days. Expired or revoked computer records and deleted receiver records are removed after a 30-day cleanup period once their pending transfer cleanup is complete.

The service uses Cloudflare Workers, private R2 storage, and D1 records. Cloudflare processes network information, including IP addresses, to deliver and protect the service. Turnstile helps prevent automated pairing abuse. Apple App Attest verifies genuine app installations. Operational logs are limited to identifiers, timings, byte counts, and error codes; image content, notes, filenames, and keys are excluded.

Optional notifications

If you enable arrival alerts, Lore registers a device push token with the relay and uses Apple Push Notification service. Alerts contain a generic arrival message and no image, note, ticker, or filename. Notification acceptance is not proof that your phone received the capture. You can disable alerts and continue receiving through foreground and manual Inbox refresh.

What is sent to OpenAI

When you allow text sharing and provide your own API key, entry analysis sends note text, voice-note transcripts, and trading details directly to OpenAI. Weekly Chronicle sends structured details from a completed week when enabled. Lore’s developer does not receive your AI requests.

Images have a separate permission. If you choose image analysis, Lore sends resized copies of selected images, relevant source text, and trade context directly to OpenAI. You may separately enable automatic analysis of future imports. Importing or receiving an image never requires AI permission. Image suggestions can be wrong and remain editable; planned chart drawings are not treated as executions or realized trading results.

AI purpose and retention

Content is sent to provide the requested extraction or reflection, with response application storage disabled. OpenAI’s abuse-monitoring retention and account data controls still apply. API content is not used for training by default unless you opt in. API usage is billed separately by OpenAI.

Read OpenAI’s data controls and privacy policy.

Your choices

Use Lore’s privacy settings to stop all OpenAI sharing, including queued image analysis, or disable image sharing independently. Revoking permission cancels active requests where possible and prevents future retries. It cannot recall data already received by OpenAI. Local capture and review continue without AI.

You can revoke paired browsers on your phone, cancel undelivered captures in the sending browser, and delete your remote inbox. Delete All Data removes local entries, images, audio, Inbox items, recovery copies, and saved keys, and requests remote cleanup. Lore identifies incomplete cleanup so you can retry. Device backups and data already received by OpenAI are managed separately.

Demo mode

Demo uses fictional entries in an isolated temporary journal. It does not access your journal, API key, Lore Drop pairing, or real notifications, and sends no AI or relay requests. Closing Demo discards the session.

This website and support

This website and Lore Drop are hosted on Cloudflare. We have not added advertising, analytics, or contact forms. If you email support, your address and message are used to answer your request. Do not send API keys or private trading records. Contact support.

Updates

We update this page when practices change. Material changes to AI sharing require a new permission choice in Lore.