Ulbo

Ulbo Privacy Policy

Last updated: 15 September 2026

Your journal is personal. We want you to understand exactly what happens to what you write in Ulbo, where it is stored, and when it is sent to other services.

1. Who we are

Ulbo is an independent app developed and operated in Australia.

If you have a privacy question or concern, you can contact us at [email protected].

We are based in Australia and, where applicable, handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

If you use Ulbo from the UK or European Economic Area, additional privacy rights and protections may apply to you under applicable data protection laws, including the UK GDPR or EU GDPR.

2. What we collect

We collect only the information needed to provide Ulbo and its features.

What you write

Depending on how you use the app, this may include:

Your journal may contain sensitive or personal information, including information about your mental health.

An anonymous account identifier

When you first use Ulbo, we create an anonymous account identifier so we can provide the service and apply reasonable usage limits.

This identifier is randomly generated and is not intended to identify you by name or through an advertising identifier.

Sign-in information

Signing in is optional.

If you choose to sign in with Apple or Google, we receive the account information provided to us by that service, which may include an email address or a service-specific identifier.

You can choose Apple's Hide My Email feature when signing in with Apple. In that case, Apple may provide us with a private relay email address rather than your personal email address.

We do not receive your Apple or Google password.

How you use the app

We collect a small amount of information about how Ulbo itself is used, so we can see where the app is confusing and improve it.

This records events such as opening the app, reaching a screen, finishing your daily entry, or starting a subscription, together with your anonymous account identifier and general device information such as device model, operating system version and country.

It never includes what you write. Your journal entries, your answers, the words Ulbo finds in them and the reflections it generates are never sent to our analytics provider.

We use PostHog for this. We do not record your screen.

What we do not collect

We do not use advertising SDKs, and we do not use your information for cross-app advertising or behavioural tracking. Ulbo does not ask for permission to track you across other companies' apps and websites, because it does not do so.

Unless otherwise described in this policy, we do not intentionally collect your contacts, precise location, advertising identifier, or photos from your device.

3. Where your journal entries are stored

How your entries are stored depends on whether you sign in.

If you do not sign in

Your entries are stored locally on your device and are not stored in your Ulbo account on our servers.

If you delete the app, locally stored entries may also be deleted. You should not rely on an unsigned-in installation as a backup.

If you sign in

Your entries are stored on our servers so they can be available when you sign in on another device.

We use Supabase as our backend and database provider. Your account and its associated entries are protected by database access controls designed to prevent one user's entries from being accessed through another user's account.

Ulbo does not routinely review your journal entries, and we do not sell your journal content.

4. When your writing is sent to AI

Some Ulbo features use artificial intelligence to generate reflections about what you write.

When you request an AI reflection, the relevant text is sent securely from the app to our server. Our server then sends the text to Google's Gemini API to generate the reflection.

We use the paid Gemini API service.

We do not use your journal entries to train our own AI models.

We also do not intentionally retain a separate copy of the journal text on our server after it has been sent to the AI service and the reflection has been returned, except where temporary processing, logging or security requirements may require limited retention.

Google processes information submitted through its APIs under its applicable terms and policies. You should review Google's current terms for more information about how Google handles API data.

5. Where your information is processed

Our backend and database are hosted using Supabase, with the database hosted in Sydney, Australia.

AI processing is performed using Google's infrastructure. This means that information sent to Gemini may be processed outside Australia.

Our product analytics are hosted by PostHog in the United States. These records describe how the app is used and never include your journal entries.

If you are located in the UK or European Economic Area, your information may also be transferred outside your country or region where necessary to provide the service. Where required, we rely on appropriate safeguards for international data transfers, such as standard contractual clauses or other legally recognised transfer mechanisms.

For Australian users, where your personal information is disclosed overseas, we take reasonable steps to ensure that applicable privacy obligations continue to be met.

6. Sensitive information and consent

Journal entries can sometimes contain information that is considered sensitive information under Australian privacy law or special category data under the UK or EU GDPR.

We do not require you to write about your mental health, but we recognise that your journal may contain this type of information.

Where required, we rely on your consent to process sensitive information for the purposes described in this policy. You can choose not to provide this information or stop using the relevant features.

Withdrawing consent does not affect processing that has already taken place where that processing was lawful.

7. Safety features

Ulbo includes an automated safety check designed to identify certain writing that may indicate an immediate risk of self-harm.

Where triggered, Ulbo may show crisis support information instead of generating a normal reflection.

This check is automated and is not a substitute for professional assessment or emergency assistance.

Ulbo does not monitor you, does not notify emergency services or other people on your behalf, and your entries are not reviewed by a human as part of this safety feature.

Ulbo is not a medical device, therapy service, counselling service or crisis service.

If you are in immediate danger, contact your local emergency service.

8. How we protect your information

We use reasonable technical and organisational measures to protect information handled by Ulbo, including encrypted connections when information is transmitted between your device and our services.

However, no online service or electronic storage system can be guaranteed to be completely secure.

You are also responsible for keeping access to your device and account secure.

9. Deleting your information

You can delete individual entries from within Ulbo.

If you have a signed-in account, you can delete your account through:

Settings → Your account → Delete your account

Account deletion removes your account, associated journal entries and applicable usage records from our active systems.

Some information may remain temporarily in encrypted backups or other systems that cannot be immediately overwritten. Our current backup retention period is up to 7 days, after which deleted information is removed from those backups through our normal backup cycle.

If you use Ulbo without signing in, your journal entries are stored locally on your device. You can delete them within the app or by deleting the app.

10. How long we keep information

For signed-in users, we generally keep your journal entries for as long as your account remains active or until you delete the entries.

After you delete an entry or account, information may remain in backups for up to 7 days before being removed through our normal backup processes.

Some limited information may be retained for longer where necessary to comply with legal obligations, prevent fraud or abuse, resolve disputes, or protect the security of our services.

11. Your privacy rights

Depending on where you live, you may have rights to:

Many of these actions can be completed directly within Ulbo.

If you have a privacy question or want to exercise a right that cannot be handled through the app, contact us at [email protected].

If you are unhappy with our response, you may also contact the relevant privacy regulator.

In Australia, this is the Office of the Australian Information Commissioner (OAIC).

If you are in the UK, you can contact the Information Commissioner's Office (ICO). If you are in the EU, you can contact the data protection authority in your country.

12. California residents

If you are a California resident, additional rights may apply to you under California privacy law, including the CCPA/CPRA.

Ulbo does not sell personal information and does not share personal information for cross-context behavioural advertising.

We do not knowingly use journal entries for targeted advertising.

13. Children

Ulbo is intended for people aged 16 and over.

We do not knowingly collect personal information from anyone under 16.

If you believe someone under 16 has provided personal information to Ulbo, please contact us at [email protected]. We will take reasonable steps to investigate and, where appropriate, delete the relevant information.

14. Third-party services

Ulbo relies on a small number of third-party services to operate the app, including infrastructure and AI providers.

These providers process information only as necessary to provide their services to us and are subject to their own privacy terms and contractual obligations.

Our current key providers include:

We may update our service providers as Ulbo develops. If a change materially affects how your personal information is handled, we will update this policy and provide notice where required.

15. Changes to this policy

We may update this Privacy Policy as Ulbo changes or as privacy requirements develop.

When we make a material change, we will update the date at the top of this policy and provide reasonable notice through the app or another appropriate method where required.

16. Contact

If you have questions, concerns or requests about privacy, contact:

[email protected]

We will do our best to respond to privacy requests within a reasonable timeframe.