Zendiary Privacy Policy

Last updated: November 12, 2026

This Privacy Policy explains how FiveSheep OÜ processes information when you use the Zendiary app (“Zendiary”). Zendiary is a diary app that can summarize your entries with AI and sync them across your devices with iCloud.

Privacy at a Glance

• Your diary entries are stored on your device and, if iCloud sync is on, in your own iCloud account. FiveSheep has no access to them.
• To summarize an entry, Zendiary sends its text through our AI service to a third-party AI provider. Only the entry being summarized is sent. We do not store it, but the AI provider may log it under its own terms.
• To check your subscription and protect the service from abuse, each summary request includes your App Store transaction ID and an Apple device verification token. These are not linked to your name or contact details.
• We do not sell your entries, use them for advertising, or use them to train AI models.
• Zendiary has no FiveSheep user accounts and does not include third-party analytics, advertising, or tracking frameworks.

Who Is Responsible for Your Data?

FiveSheep OÜ is the controller for any processing of personal data by FiveSheep described in this Privacy Policy.

FiveSheep OÜ
Tornimäe tn 7-3
Kesklinna linnaosa, Tallinn
Harju maakond 10145
Estonia
Email: help@fivesheep.co

Your Diary Stays With You

Your diary entries, photos you attach, and the moods and other details you record are stored on your device. FiveSheep does not operate servers that store your diary, and we cannot view or recover it.

You can delete entries in the app at any time. Deleting Zendiary removes its data from your device, although copies may remain in your iCloud account (see below) or in existing device backups.

iCloud Sync

Zendiary can sync your diary across your devices using Apple's iCloud. When sync is on, your entries are stored in your own iCloud account, which only you can access. FiveSheep cannot access the data in your iCloud account.

iCloud is provided by Apple and is governed by Apple's terms and Apple's Privacy Policy. You can turn off iCloud sync for Zendiary in your device's iCloud settings, and you can manage or delete the data Zendiary stores in iCloud there as well.

AI Summaries

Zendiary can create a short summary of a diary entry with AI. The summary is generated by a third-party AI model, so the entry has to leave your device for this.

What is sent: the text of the entry being summarized. Zendiary does not send your other entries or your name or contact details.

Who receives it: the entry is sent to FiveSheep AI Services, our backend, which runs on Cloudflare's infrastructure. Our backend passes the request through Cloudflare AI Gateway to OpenRouter, which forwards it to the AI provider that runs the model, such as Anthropic, OpenAI, Google, or Mistral. The summary is returned to your device the same way.

How it is used: the entry is used only to generate its summary. We do not use it for advertising, sell it, or use it to train AI models.

How long it is kept: the summary is stored with the entry on your device and, if iCloud sync is on, in your iCloud account. Our backend does not store the content of your entries, and logging is turned off in Cloudflare AI Gateway. However, we cannot control whether OpenRouter or the AI provider that runs the model logs or temporarily keeps requests, for example to operate their service or to prevent abuse. This is governed by their own privacy policies and terms.

Request information: with each summary request, Zendiary also sends your original App Store transaction ID and a device verification token from Apple's DeviceCheck service. Our backend checks the transaction ID against our subscription records to make sure you have an active subscription, and checks the token with Apple to confirm that the request comes from the genuine Zendiary app on an Apple device. This information is used only to verify requests and prevent abuse, is not passed on to OpenRouter or the AI providers, and is not linked to your name or contact details.

Protection by third parties: Cloudflare, OpenRouter, and the AI providers receive your entry only to process the request, and they process it under their own privacy policies and terms. We work only with providers whose terms commit them to protecting your data at a level equal to the protection described in this Privacy Policy. See, for example, the OpenRouter Privacy Policy and the Cloudflare Privacy Policy.

Diary entries can contain sensitive information, for example about your health, feelings, or relationships. Please keep this in mind before you summarize an entry.

Legal basis: processing your entry is necessary to provide the summary feature you use (Article 6(1)(b) GDPR). Checking your subscription and device verification token is necessary to provide the subscription you purchased (Article 6(1)(b) GDPR) and is in our legitimate interest in protecting the service from abuse (Article 6(1)(f) GDPR).

Analytics and Error Reporting

Zendiary does not include third-party analytics, advertising, tracking, or error reporting frameworks, and does not use your diary to build profiles about you.

Apple may provide app developers with certain information, such as App Store statistics and, if you have chosen to share them with developers in your device settings, crash reports and usage data. This information is collected by Apple and governed by Apple's terms and privacy policy. You can change these sharing settings in your device's privacy settings.

Support Requests

If you contact us, for example by email, we receive the information you choose to send us, such as your email address and the content of your message. Please do not send us diary content unless it is necessary for your request. We use this information to respond to you and to improve Zendiary, and we keep it only as long as needed for these purposes or to comply with legal obligations.

Legal basis: processing is necessary to respond to your request (Article 6(1)(b) GDPR) and for our legitimate interest in providing support and fixing problems (Article 6(1)(f) GDPR).

Sharing and Disclosure

We do not sell personal data. Apart from the AI summaries described above, we do not share your diary with anyone. We may disclose information we hold, such as support correspondence, where required by applicable law or necessary to establish, exercise, or defend legal claims.

International Data Transfers

Cloudflare, OpenRouter, and some AI providers are located in, or process data in, countries outside the EU and EEA, such as the United States. Where this happens, the transfer is based on safeguards recognized under the GDPR, such as an adequacy decision or the European Commission's Standard Contractual Clauses.

Your Rights Under the GDPR

If the GDPR applies to you, you may have the right to:

• Access personal data we hold about you
• Correct inaccurate or incomplete personal data
• Request deletion of your personal data
• Restrict certain processing
• Object to processing based on our legitimate interests
• Receive data you provided to us in a portable format where the right to data portability applies
• Lodge a complaint with a data protection supervisory authority

Because your diary is stored only on your device and in your iCloud account, you can access and delete it directly in the app or in your iCloud settings. To exercise your rights regarding any other data, email help@fivesheep.co.

You may also lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or the supervisory authority in the EU or EEA country where you live, work, or believe an infringement occurred.

Security

Your diary is protected by the security features of your device and your Apple Account, so we recommend keeping your device protected with a passcode and up to date. Requests for AI summaries are sent over encrypted connections. No method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.

Children's Privacy

Zendiary is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has sent us personal data, please contact us so we can delete it.

Apple Services

Apple may separately process information when it distributes Zendiary, handles a purchase, or provides iOS and iCloud services. FiveSheep does not receive your payment card details. Apple's processing is governed by Apple's Privacy Policy.

Changes to This Policy

We may update this Privacy Policy when Zendiary or applicable law changes. We will publish the updated Policy on this page and change the “Last updated” date. If a change materially affects how we process personal data, we will provide additional notice where required by law.

Contact Us

Questions and privacy requests can be sent to help@fivesheep.co.