Your words are yours.
MountainRiver is a private journal. Because what you write here can be among the most personal things you'll ever put into words — relationships, health, work, money, fear, hope — we've built the product so that your writing stays yours. This page explains, plainly, what happens to it.
Who we are
MountainRiver is operated by TJI Holding ApS (trading as “TJI Labs”), a company registered in Denmark. We are the data controller for your information.
Registered address: TJI Holding ApS, Fredericiagade 38, 2., 6000 Kolding, Denmark. CVR no.: DK44755505. For any privacy question, contact us at hello@mountainriver.app.
What we collect
- What you write — your entries, reflections, decisions, themes, goals, and the routes you chart. This is stored so the app can show it back to you, and for no other purpose.
- Your account — the email address you sign in with.
- Photos you attach — if you add a photo to an entry, the image is stored privately alongside your writing, so the app can show it back to you. Photos are stored only: they are never sent to AI providers, never analysed, and never used for any other purpose.
- Minimal technical data — a count of AI requests per account, used only to prevent abuse. We run no third-party analytics and no advertising trackers.
We do not collect your contacts, your location, tracking identifiers, or any behavioural profile.
Where it's stored
Your journal is stored with our infrastructure provider, Supabase, on servers in the European Union (Ireland). Access controls at the database level mean each account can reach only its own data. Photos you attach are stored in the same EU infrastructure.
The MountainRiver app and website are delivered through our hosting provider, Netlify, which processes technical connection data such as your IP address in order to serve the application to your device. Netlify is US-based; this is covered by the same transfer safeguards described below.
When you use AI features or subscribe, specific data is transmitted to the sub-processors named below (Anthropic, Voyage AI, and Stripe). These are US-based companies. Such transfers rely on recognised safeguards for EU–US data transfers, including the EU-US Data Privacy Framework and/or Standard Contractual Clauses, as set out in each provider’s data-processing terms. We never transfer your writing to anyone for their own purposes.
Who can see your writing
No human at MountainRiver reads your entries. We have not built — and do not have — any tool or process that shows the contents of your journal to us or to anyone else. Your writing is not reviewed, human-moderated, or handed to any third party for their own purposes.
When AI is involved
MountainRiver uses AI in two ways, both in service of you — never to profile you or mine your writing. In every case, no name, email, account ID, or other identifier is attached to your text; the AI provider receives the words and nothing that identifies you within MountainRiver.
To reflect — when you ask. When you ask for a reflection (to think through a decision, understand a relationship, or map a path to a goal), the words you bring are sent to Anthropic PBC (the company behind the Claude AI), which performs the analysis and returns it immediately.
- Under Anthropic's API terms, your writing is not used to train AI models.
- Anthropic may retain API content briefly for operational and safety purposes before deletion, per their published API policies. It is not used for training.
To make your writing searchable by meaning. So the app can answer your questions from the entries most relevant across your whole journal — rather than only the most recent — your entries are converted into a numerical representation (“embeddings”) by Voyage AI (a company owned by MongoDB, Inc.). Only the text is sent; the numbers are returned and stored in your account so the app can find related entries.
- Under Voyage's terms, your writing is not used to train AI models.
- (This applies to both providers above. We remove account-level identity — your name, email, and account ID are never attached. But the AI receives exactly what you wrote: if you include a person's name, a place, or other identifying detail in the text of an entry, that detail is part of the writing and is sent as written. We strip the identity around your writing, not the content of the writing itself.)
We use AI as a tool that works for you — never as a way to mine what you write.
Payments
If you subscribe to the paid layer, payments are processed by Stripe. Stripe receives your email and card details to take payment and manage your subscription. We store only your subscription status and Stripe's customer and subscription identifiers — never your card number. Stripe acts as a processor under its own terms.
Where your words go
Only when you use AI features · processed in the United States
Text only — no name, email, or account ID
immediately
stored in your account
EU→US transfers covered by the EU-US Data Privacy Framework · Brief operational retention only
Sensitive information you choose to write
A journal naturally holds some of the most personal things a person can record — which may include information about health, sexuality, religious or philosophical beliefs, or other sensitive matters. Under data-protection law these are “special categories” of personal data, which require your explicit consent to process.
By accepting this policy when you sign up, and by choosing to write such information into your entries, you give your explicit consent to MountainRiver storing it and — only when you use AI features — processing it through the sub-processors described above, solely to provide the service to you. You can withdraw this consent at any time by not using the AI features, and by deleting your data or your account.
How long we keep your data
We keep your writing for as long as your account is active, so it is there for you whenever you return. We do not hold it indefinitely if you stop using MountainRiver: if an account is inactive for 24 months, we will contact you at your sign-in email, and if there is no response we will delete the account and all its data. You can also delete everything yourself at any time (see below).
Deleting your data
You can permanently delete everything — all of your writing and your account — at any time from Settings. When you do, we hard-delete your data record and your account from our systems. This is not a hide or a soft-delete, and it cannot be recovered. You can export your writing before deleting if you'd like to keep a copy.
Your rights
If you are in the EU/EEA or a comparable regime, you have the right to access, correct, export, and delete your data, and to object to or restrict processing. Because export and deletion are built into the app, you can exercise most of these yourself, instantly. For anything else, contact hello@mountainriver.app. Our lawful basis for processing your writing is performing the service you've asked us to provide. For the AI features specifically (reflections and making your writing searchable), we rely on your consent, which you give when you accept this policy on sign-up, and can withdraw at any time by contacting us or deleting your account.
Age
MountainRiver is intended for adults. You must be 18 or older to use it. Given the intimate nature of a journal and the involvement of AI, we've deliberately made this an adults-only product, and we do not knowingly collect data from anyone under 18.
Does anyone screen or report what I write?
No human reads your writing — not at MountainRiver, and your identity is never attached to the text processed by the AI providers. The automated safety systems those providers run are aimed at preventing misuse of their services, not at surveilling what you write in a private journal. Nothing you write is routinely reviewed or reported to anyone.
The only exceptions are the ones that apply to every service on the internet: content that a provider is legally required to report (such as child sexual abuse material), and valid legal process, such as a court order compelling disclosure of data a provider holds. Beyond those, your writing is not monitored, flagged, or handed to anyone.
MountainRiver is a private place to think — including for the hard things. Journals have always held what is difficult, painful, or unresolved, and that is a legitimate and protected use of this one.
Changes
If we change how your data is handled in any material way — especially anything involving AI processing — we will update this page and, where the change is significant, ask for your consent again in the app.
Questions about any of this? Write to hello@mountainriver.app — a person will answer.