Privacy

Last updated October 11, 2026

Puchku is made by Narayana, Inc. (“we”). This page explains what Puchku, the app for iPhone, iPad, Mac and Apple Watch, does with your information, and what this website does. We wrote it to be read.

In short

• What you tell Puchku stays yours. Your check-ins, your journal, the vents you keep and your voice notes are kept on your devices, locked. The safety check, turning a voice note into text, your reviews and your closer look all happen on your device, not on our servers. Puchku never sends your words to any AI company.
• When something leaves your device (syncing to your other devices, your weather for a friend), it's end-to-end encrypted with a key only your devices have. Not even we can read it.
• Puchku locks with Face ID, Touch ID or your passcode when you leave it, unless you turn that off in Settings. Your journal stays protected by your device's Secure Enclave.
• Nothing collected. No account needed. No ads, no tracking and no analytics, in the app or on this website. We never sell your data, and it's never used to train AI.
• Friends you link see your weather. They see what you write only if you choose to share it: you can send a friend your closer look, and your own words go in it only if you include them.
• For your therapist, Puchku makes a PDF on your device that you send yourself, with only what you pick.
• Everything in Puchku is free. Nothing in it is for sale, and it never asks you to pay.
• Puchku isn't a medical or crisis service, and it isn't a chatbot: it never writes a reply to what you tell it. If you're struggling, Get help in Puchku shows your region's own crisis line where we have one, and a list of helplines in many countries.

1. What Puchku keeps, and where

Everything below is kept on your device, encrypted. While sync is on, most of it is also on our server, end-to-end encrypted with your own key, so your other devices have it too (section 4).

Backups. Puchku's files, and the key that opens them, can travel with encrypted backups and transfers where your system carries Keychain items. Your journal and your closer look are different: their key never leaves your device's Secure Enclave, so a backup can't open them on another device, and they're kept out of backups. With sync on, a new device gets your journal through Puchku Sync and seals it with its own key.

How long. Nothing you wrote is deleted unless you delete it. While sync is on, something you delete on one device is deleted on your other devices too. Delete everything, in Me, removes what Puchku keeps on that device and the locked copy on our server, and unlinks your friends. Your other devices keep what's on them until you delete everything there too.

2. The lock

Puchku locks with Face ID, or Touch ID or your passcode where that's what your device has. It's on from the start, and it locks after 1 minute away; in Settings you can choose Immediately, 1 minute or 5 minutes, or turn it off. It also locks when it's open in front of you and nothing has been touched for 5 minutes. When Puchku can't tell how long it was away, it locks.

One unlock opens Puchku and your journal together, so nothing asks twice, and locking Puchku closes your journal again. While Puchku is locked or away, a plain cover hides everything, the app switcher's picture too, and Get help still opens without unlocking. With the lock off, your journal asks for Face ID, Touch ID or your passcode by itself. The lock needs a passcode on your device.

3. On your device only

The safety check. Every time you write, send or keep something, Puchku checks the words for signs that you might need help right now, on your device. If it finds them, Puchku shows you help, and nothing from that moment is kept, shared or counted.

Voice notes. Voice notes are turned into text on your device, never online. Puchku uses only your device's own speech reader, never a speech server. If your device can't read a language on the device, the note is kept without text, and the entry says so. The text is sealed in your journal with the note, shows under it, and is found by search. Voice notes kept before this are turned into text the same way, in the background, while your journal is open. A voice note's text is never sent to a friend. While you record, the sound sits in one temporary file that's deleted the moment the note is read into text.

Your reviews. Your day, week, month and year in Reflect are worked out on your device from your check-ins, never from anything you wrote. On devices with Apple Intelligence, Apple's on-device model can put a week into words, from those facts only, and every sentence is checked before you see it.

Your closer look. On devices with Apple Intelligence, Reflect's closer look uses Apple's on-device model, and only that model, on your device. It reads your period's check-ins and, while your journal is open, your entries' words and your voice notes' text, to reflect on the period as a whole. It never answers an entry. Its pictures are drawn from your check-ins, never by the model, and every part is checked against the check-ins or entries it rests on before it shows. If the period's words show you might need help, there's no closer look, and help is one tap away. Without Apple Intelligence there's no closer look, and your plain review shows.

Ready ahead. While Puchku is unlocked, it reads your day, week, month and year again soon after you check in or keep something, so your closer look is ready when you open Reflect. What it made is kept in one file sealed with your journal's key, so it opens only after you unlock. It never syncs and never leaves your device, it leaves your device's memory when your journal locks, and Delete everything removes it.

Your own pet. If you make a pet from a photo, the photo is read on your device, by Apple's on-device model or your system's own image reading, then deleted. It's never uploaded.

Not a chatbot. AI in Puchku never writes a reply to what you tell it. Puchku's music and sounds are inside the app and never streamed.

When you open a link, use Siri or dictation, or Apple downloads an on-device language or speech model, that's your system and Apple's privacy rules, not ours.

4. Puchku Sync and your other devices

Puchku syncs what it keeps between your devices through Puchku Sync, which we run. It's on from the start.

Encrypted with your own key. The first time you open Puchku, it makes a secret key on your device, with nothing about you in it. Everything Puchku syncs is encrypted with that key on your device before it leaves, so our server only ever stores it encrypted, under ids that say nothing about you or what's inside. Only your devices can read it: not us, not Cloudflare, which runs our server, and not Apple. Sync works without an account. Your journal is also sealed on each device with that device's own Secure Enclave key, so reading it there still needs Face ID, Touch ID or your passcode. You can leave your journal out of sync in Me › Privacy › Your devices, and a device without a Secure Enclave doesn't receive it.

Your other devices. Puchku keeps your key in your iCloud Keychain, under the Apple Account you already use, so your other Apple devices get it without a step; Apple can't read what's in iCloud Keychain. A device can also be linked with a code another device shows, by scanning it or typing it and checking that both screens show the same two words, or with your recovery code. A key can have up to 5 devices. The camera is used only to scan that code, and nothing it sees is recorded or saved.

Connect your Mac. On your Mac, Puchku shows a code. Your iPhone or iPad scans it, or you type it and check that both screens show the same two words. Then your check-ins and your journal are on your Mac too, synced like any other device.

Your recovery code. You can see your recovery code in Me › Privacy › Your devices. It's your key, written out. Puchku shows it only when you ask and never sends it anywhere. If you lose every device and don't have it, your synced data can't be recovered, by us or by anyone.

What our server keeps. Your encrypted data; the public keys of your devices (random, made on each device) and the month each was added; the month your key was made and the month it was last used; and the counts it needs for the device limits. Never your name, email, IP address, or a device's hardware or vendor id. We turn on no request logs. Our server runs on Cloudflare (Workers, Durable Objects and R2). Cloudflare keeps restore copies of the server's storage for up to 30 days, so something deleted from our server can stay in those copies for up to 30 days; like everything there, it's encrypted with your key.

Turning it off and removing it. In Me › Privacy › Your devices you can turn sync off, and Remove from Puchku's server there deletes your data from our server while your devices keep everything. If no device uses your key for 24 months, we delete everything stored for it.

Some things never sync: your closer look, and things that describe only one device.

5. Friends

Linking a friend uses a private channel on our server between your devices and theirs, sealed with a key only the two of you have. You send a link; its key is in the part after the “#”, which never reaches any server. You say yes to each person who asks, and a link works only once. A friend you link sees your name for friends, your pet, your weather if you both turn it on, and a heart or a check-in request you send. They never see your journal, the vents you keep, anything you said in a voice note, or anything from crisis help.

Your weather. It's off for everyone until you turn someone on in Me › Sharing, and it's shared only with friends who turned you on too. They see today's weather, like a rain cloud, never the feeling you tapped or what it was about. You can hide your weather for a day. It clears at your midnight, and neither of you keeps a history.

Hearts and check-ins. A heart is only a heart. I could use a check-in asks only the people you pick to reach out, with no details. To write to a friend, Puchku opens Messages, and you send it yourself. Puchku never sends text for you.

Your week or month. You can send a friend your week or month. You tick what's in it and see exactly what they'll see first. It never holds your vents or your journal. It goes sealed in your channel, and your friend's device deletes it after 30 days.

Your closer look. You can send a friend your closer look. You pick its parts and see exactly what they'll see first. Only what passed its checks goes, never a part you marked Not quite. Quotes of your own words, and your answers to its questions, go only if you turn on Include my words. It goes sealed in your channel with that friend, it clears at your midnight, and neither of you keeps it after.

A heart, a request or a shared week waits in the channel, sealed, until it's read, for 7 days at most. A channel nobody uses for 24 months is deleted. You can unlink or block anyone at any time, and they aren't told; unlinking deletes the channel from our server. We can't read channels, so we can't remove anything for you; blocking is the fastest way to stop someone.

If you delete everything while your device is offline, Puchku keeps a small list of the channels it still has to close (their ids and the keys that close them, nothing else) and tries again each time it starts or reconnects, until each one is closed or would have expired by itself. Until then a friend may still see you in their list; anything waiting in a channel expires within 7 days.

6. For your therapist

Session prep makes a PDF for your therapist on your device, with only what you choose: your moods and your review, what lifted you, the entries you starred, and any entry you pick one by one. A picked entry goes with its words, including what its voice notes said, never their sound. It can hold your closer look too: the parts you pick, with your own words only if you include them.

You see it before anything leaves, and you send it yourself, through your device's share sheet. Puchku never sends it, keeps no copy, and deletes the file when you close the screen. A hard moment is never in it, because it's never kept. Photos are never in it either. Once you share a file, the rules of the app or person you share it with apply, not ours.

7. Apple Health (optional)

It's off until you turn it on in Settings. Then each feeling you tap from that moment on, on your iPhone or iPad or on your Apple Watch, is added to Apple Health as a State of Mind: whether the feeling was pleasant or unpleasant, and its name. Never what you wrote, what it was about, or anything from your journal. Puchku never reads anything from Health. Turning it off stops new ones; what's already in Health stays there, and you can delete it in the Health app. Delete everything in Puchku leaves what's in Health.

8. Widgets and Apple Watch

Widgets. Your widgets and Lock Screen show Puchku, his room and your weather, never your words. When you tap a feeling in a widget, it writes only the feeling and the time to a small file that Puchku seals into your check-ins the next time it opens, then clears. No words ever go through what the widgets share with the app.

Apple Watch. One tap on your Watch checks in. The Watch keeps only today's check-ins and the ones still on their way to your iPhone, each a feeling and a time, and clears past days. It keeps no words and no keys, and it never connects to the internet itself. Your Watch and iPhone pass check-ins, today's weather and your pet's pictures to each other through Apple's own Watch connection; your pet's name is never sent. The Watch's complications show only pictures. Delete everything on your iPhone clears your Watch too.

9. On your Mac

Puchku on your Mac is the same app, with the same rules. It keeps its own copy of what you keep in its own folder, sealed with its own key, and your journal there opens with Touch ID or your Mac's password. It syncs with your iPhone and iPad once you connect your Mac (section 4). Around the notch, Puchku notices when an app is full screen, your microphone or camera is on, your screen is mirrored, a Focus is on or Low Power Mode is on, only so he can go home to the notch. None of that is kept or sent.

10. What Puchku can't control

• Screen sharing and recording. If you share or record your screen, what's on it can be seen.
• Your keyboard. Your system keyboard, or a keyboard app you installed, may learn words as you type.
• Dictation. If you use your keyboard's dictation instead of a voice note, your system settings decide where that happens.
• What you share. A message you send, or a file you share, follows the rules of the person or app you share it with once it leaves Puchku.
• Other websites. The helpline directory and other sites Puchku links to have their own policies. Puchku records nothing about what you open.

11. Email with us

If you write to support@puchku.app, we get what you write and your email address. Email to support@puchku.app reaches us through Cloudflare's email routing and our mailbox at Google, and our replies go out through Amazon's email service. We use your email only to reply, never add you to a list, and delete the conversation 6 months after the last message, or sooner if you ask. Please leave out anything private you've told Puchku.

12. This website

No cookies, no analytics and no trackers. This website is served by Cloudflare, which handles the technical information every website needs to deliver pages, like your IP address, under Cloudflare's own privacy policy. We don't turn on visitor logs; Cloudflare shows us only total numbers of requests.

13. Who Puchku is for

Puchku is for adults 18 and over. It isn't meant for children.

14. Your rights, deleting, and how to reach us

Wherever you live, including under the GDPR, the UK GDPR, California's privacy laws, Washington's health data law and India's Digital Personal Data Protection Act, you can ask what we hold about you and ask us to delete it.

The only thing we can connect to you is email you've sent us. Everything else we hold is encrypted with your own key, which we never have, under ids that say nothing about you, so we can't find it from your name or email. You can remove your synced data yourself at any time (section 4), and Delete everything removes what Puchku keeps on a device (section 1).

Where the GDPR applies, Narayana, Inc. is the controller: we store your encrypted data and run the server to give you the syncing and friends you use (to provide the service you asked for), and we answer your emails because you asked us to (legitimate interests).

If this policy changes what leaves your device, we'll say so in the app's notes for that version and update the date above.

Contact: support@puchku.app.

Narayana, Inc.