Data Handling Policy

Where your data lives, how long we keep it, and how we secure it.

Last updated October 26, 2026

1. Where data is stored

Your data is stored with Google Firebase (Firestore and Cloud Storage) in secure, access-controlled data centers.

2. Security

Data is encrypted in transit (TLS) and at rest. Access rules ensure you can only see your own data and what others choose to share with you.

Staff access is limited to what is needed for support and is recorded in an audit log.

3. Retention

We keep your data while your account is active. Deleted items may remain in backups for up to 30 days before being permanently removed.

Billing records are kept as long as tax and accounting laws require.

4. Export and deletion

You can request a copy of your data or full account deletion by contacting us. We respond within 30 days.

5. Incident response

If a security incident affects your data, we will notify you and relevant authorities without undue delay.

Questions?

Contact us at hello@journeybinder.com.