Your diary is none of our business.

Last updated: 14 November 2026

The short version

The oh deary app has no account, no server, no ads, no analytics and no tracking.
Your diary is encrypted on your phone. We never receive it, and we couldn’t read it if we did.
If you turn on backup (Premium), encrypted copies go to your own Google Drive, not to us.
This website sets no cookies and uses no analytics.

Who is responsible

Matthias Lischka, Klosterstraße 5, 3910 Zwettl, Austria
Email: hello@ohdeary.app

See the imprint for further details.

The app

Your diary

Everything you write in oh deary (entries, titles, photos, moods, tags and settings that belong to your diary) is stored on your device and encrypted there with AES-256-GCM. The key is protected by your password (using Argon2id) and by your recovery key. We have no copy of your password, your recovery key or your data, and we have no way to open your diary or reset your password.

Android’s own cloud backup is switched off for oh deary on purpose. Reminder notifications never show diary content.

Backup and sync with Google Drive (optional, Premium)

If you turn on backup and sync, you sign in with your Google account and allow oh deary to use a hidden app folder in your Google Drive (the drive.appdata permission). oh deary cannot see any other files in your Drive. The app then uploads encrypted files directly from your device to your Drive. These files never pass through any server of ours.

Google cannot read your diary. It can see how many files there are, how big they are and when they change. The connection between your device and Google is governed by Google’s ownprivacy policy. You can stop syncing at any time and remove the app’s access in your Google account settings.

Purchases

Lifetime Premium is sold through Google Play. Google processes the payment; we don’t receive your payment details. The app checks your purchase on your device with Google Play. Google Play’s handling of your data is described in Google’sprivacy policy.

Downloads and app statistics

When you install the app from Google Play, Google provides us with aggregated, anonymous statistics such as the number of installs and crash reports collected by Android if you have allowed this in your device settings. The app itself contains no crash reporting or analytics code.

CSV export

If you export your diary (Premium), you choose where the file is saved. The export is not encrypted: anyone with the file can read it.

Permissions

Notifications, for the optional writing reminder.
Run at startup, so your reminder still works after the phone restarts.
Network access, only used for backup and sync with your Google Drive and for Google Play purchases.
Biometrics (optional), to unlock your diary with your fingerprint or face. Biometric data stays in Android and is never accessible to the app.

This website

This website is a set of static pages. It sets no cookies, uses no analytics and loads no third-party content: fonts and images are served from this website itself.

The website is hosted by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA). When you visit it, your browser sends technical data such as your IP address, the page requested, date and time, and browser type. Cloudflare processes this data on our behalf to deliver the website and protect it from attacks (legitimate interest, Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework. We don’t use this data to identify you.

Email

If you email us, we use your address and message only to answer you (Art. 6(1)(b) or (f) GDPR) and delete them once they’re no longer needed, unless we have to keep them by law.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and to object, as far as the GDPR provides. Since we don’t hold any of your diary data, most of these rights are exercised directly in the app: you can export or delete your diary at any time. For anything else, contact hello@ohdeary.app.

You can also lodge a complaint with a supervisory authority. In Austria this is the Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.

Children

oh deary doesn’t collect personal data from anyone, including children.

Changes

If the app or this website changes how data is handled, we’ll update this policy and the date at the top.