Second Look

Privacy Policy

Second Look is a private relationship journal for iPhone. It works without an account, and your journal stays on your device unless you choose to use an AI feature.

Last updated: August 30, 2026

Your journal stays on your iPhone

Your entries, people, dates, saved reflections, feedback, and reminders are stored locally. Second Look does not provide cloud sync. Voice input is transcribed on your iPhone; the recording is not saved or sent anywhere.

Optional AI features

Nothing is sent just because you open or browse the app. Before the first AI request, Second Look identifies OpenAI, explains what will be shared, and asks for your permission. If you choose Not now, nothing is sent and all local journaling features remain available.

When you allow and choose an AI action, Second Look sends only the text needed for that request to OpenAI through our service on Cloudflare. Depending on the action, this may include your question, the selected journal entries or date summaries, names or nicknames already included in that material, connection background you chose to include, and relevant earlier reflections, corrections, or feedback. The request also includes your device time zone so date words such as today and yesterday can be interpreted correctly.

Our service does not store your journal text or the AI response after the request is completed. OpenAI processes request data only to provide the feature and may retain it for up to 30 days for safety or legal reasons. OpenAI does not use API data to train its models by default. Read OpenAI's data controls.

Service, security, and subscription data

Apple handles purchases and payment details. For a Second Look+ request, the app sends Apple-signed subscription records so our service can verify access. Those signed records and transaction identifiers are used for the request and are not logged or stored by us.

Second Look uses Apple App Attest to confirm that online requests come from a genuine app. The service derives pseudonymous security and usage keys from the attested device key and, for Plus, the subscription family. It does not store the raw App Attest key, StoreKit records, IP address, journal text, or names in its usage ledger.

To prevent abuse and apply the disclosed AI usage limits, a Cloudflare Durable Object keeps a content-free record containing a pseudonymous budget key, a request UUID, request time, model cost, and settlement state. These records and any temporary pseudonymous device-to-Plus budget association expire after no more than about 35 days. Cloudflare and OpenAI may process basic connection and request data to deliver, secure, and operate the AI feature under contractual privacy protections.

Second Look has no ads or third-party analytics. We do not sell personal information or use it to track you across other companies' apps or websites.

Your choices

In Settings, you can turn off AI features and withdraw permission for future AI requests. Turning AI back on does not restore permission; the app asks again only when you next choose an AI action. You can also export your journal or permanently delete your journal and reminders from your iPhone. Deleting your journal does not cancel an App Store subscription; subscriptions are managed separately with Apple.

Contact and changes

For privacy questions, email yldigital.support@gmail.com. If this policy changes, we will update this page and the date above.