Privacy notice

Chapter One is run by Ivan Galenda, who is the data controller for everything described here. For anything about your data, write to hello@ivanlucagalenda.com. You must be 16 or over to have an account.

• Your email address and the name you choose to be called.
• The date and version of the terms you agreed to when you signed up.
• The journals you begin and what you write each day.
• Photographs and voice notes you attach to a day.
• The chapters the narrator writes back to you.
• Feedback messages you choose to send.
• A count of how many chapters you asked for each day, so the service is not overused.

There is no analytics, no advertising, and no tracking of you across other websites.

• To give you the journal you asked for — your account, entries, media and chapters. Basis: performance of our agreement with you.
• To keep the service working and fair — daily limits, security, and preventing abuse. Basis: our legitimate interests.
• To read and answer your feedback — only when you send it. Basis: your consent, which you can withdraw at any time by writing to us.

To turn a day into a chapter, the words you wrote — and any photograph or voice note attached to that day — are sent to an AI model that writes the chapter and returns it. It is not used to train the model, and the chapter is stored only in your journal. If you would rather a day was never sent, do not ask for its chapter.

• Our hosting, database, file storage and authentication provider.
• The AI provider that writes chapters and reads attached media.
• The email provider that delivers sign-in and password emails.

Each acts only on our instructions under a data processing agreement. Some are outside the European Economic Area; where that happens, transfers rely on the European Commission's standard contractual clauses.

No analytics or advertising cookies are set, so there is nothing to opt in to. Your browser stores only your sign-in session, any entry you have typed but not yet saved, and your reading preferences (light or dark, text size). None of it is shared with anyone. Clearing your browser data removes all three. The notice shown on your first visit simply says this; dismissing it stores one further value so it isn't shown again.

• Journals, entries, chapters, photographs and voice notes: until you delete them, or delete your account.
• Deleting your account removes all of the above immediately. Feedback you sent is kept, but the link to you is erased.
• Feedback messages: up to 12 months.
• Daily usage counts: 30 days.

• See and get a copy — "Download everything you've written" on your account page gives you one file with all of it.
• Correct it — edit any entry or journal in the app; write to us for your email or name.
• Delete it — delete a journal in the app, or delete your account and everything in it from the account page.
• Take it elsewhere — the download is a plain, portable file.
• Restrict or object to processing based on our legitimate interests — write to us and we will stop unless we must not.
• Withdraw consent for anything you gave it for, at any time.
• No automated decisions are made about you. The narrator writes prose; it decides nothing about your rights.
• Complain to your national data protection authority if you think we have got this wrong. We would rather you told us first.

Only you, unless you open a journal to readers. When you do, anyone holding that exact link can read the chapters — never your raw entries, photographs or voice notes. Shared pages are kept out of search engines. Close the link at any time and it stops working.

If a breach ever puts your data at risk, we will tell the relevant authority within 72 hours of becoming aware of it, and tell you directly if you are likely to be affected.

If this notice changes in a way that matters, the date above changes and we will say so in the app before it takes effect.