Privacy
A wellbeing app asks you to write down things you might not say out loud. Here is exactly what happens to them — with the section of the policy each claim comes from, so you can check it rather than take our word.
Journal text, mood and stress notes, gratitude answers, reminder labels and every Reflection are encrypted before they are written to the database, under a key unique to your account. The database never holds that content in readable form.
Your key is itself held only in encrypted form, with the material needed to unlock it kept apart from the database. Delete your account and the key is destroyed — which makes the remaining ciphertext permanently unreadable, by us as much as by anyone.
End-to-end would mean the key never leaves your phone, and ours does not work that way — sync and Reflections both need the server to be able to read your entries while it works on them. Structured values like a mood number or a timestamp aren't content-encrypted at all, because the app has to be able to count them. We would rather write this down than let you infer something stronger.
The production database and application servers are in Finland. Encrypted backups are held in Germany, by a provider that does not hold the key to them.
AI consent is separate from the consent that makes the app work, and it starts switched off. Without it a Reflection is still produced — from your own statistics, with no AI processing and nothing sent anywhere.
When AI is on, bounded extracts go to OpenAI Ireland Limited under an Article 28 processing agreement. Your name, email address and account identifier are never sent, nothing is attributed to you at the processor, and none of it is used to train or improve any model.
Sereneo carries no advertising identifier, no advertising or social SDK, no cross-app or cross-site tracking, and asks for no location, contacts, photos, microphone or camera. We do not sell personal data and do not disclose it for advertising.
No notification we send contains journal content, a mood value, a score or any substance of an entry. At most two app-initiated notifications a day, enforced in code rather than promised in a settings screen.
This site counts page views in a way that writes nothing at all to your device. Anything beyond that — the part that sets a cookie — runs only if you agree to it in the banner, is never loaded if you don't, and is deleted from your device the moment you change your mind. There is no advertising, no advertising identifier, and no tracking across other sites.
Taking a complete, machine-readable copy of everything and leaving costs nothing and is not gated behind any tier. Neither is deleting your account.
Sereneo is run from Norway by a registered sole proprietorship, under the GDPR, with Datatilsynet as the supervisory authority. Most of what the app holds is health data under Article 9, and it is processed on your explicit consent rather than on a legitimate interest we asserted for ourselves.
Behind that sit the documents the regulation actually requires: an Article 30 record of processing, an Article 35 data protection impact assessment, a processor register with a signed agreement for each one, the Article 32 technical and organisational measures, and a breach procedure. They are internal documents, but they are real, and the claims on this page are drawn from them rather than written for a website.
