Privacy policy
Your journal is yours
Effective October 21, 2026 · updated for the one encouragement board and its safety policy
90 Days is a journal for men in a real battle. A man will only be honest in a journal he knows no one else can read, so it's built so no one else can. This page says exactly what the service can and can't see, in plain words.
What stays private
Everything you write or record in the journal is sealed on your device with AES-256-GCM before it syncs: your check-ins (morning and evening), moods, triggers, plans, commitments, journal entries, grades, prayers and thanks, goals, your garden, your warrior and gear, your progress, notes, letters, and your brothers' phone numbers and the names you give them. The key comes from your password on your device (PBKDF2, 600,000 rounds) and is never sent. The service stores only sealed records it can't open, and there's no back door: not even the people who run 90 Days can read them.
Private messages between shield-brothers are also end-to-end encrypted (ECDH P-256 and AES-256-GCM). Only the two of you can read them.
What the service does see
| What | Why | How long |
|---|---|---|
| Your email address | So you can sign in | Until you delete your account |
| A one-way check of your password and recovery code (never the password itself) | To confirm it's you | Until you delete your account |
| When you sync, and how many records you have | To keep your devices in step | Until you delete your account |
| A sign-in cookie on each device | To keep you signed in | 30 days |
| Your network address, briefly | To stop people guessing passwords or flooding the service | Up to 2 days |
| If you pair with shield-brothers: your day count, days crossed off, how many days you checked in this week, the date of your last morning and evening check-in, how many of today's 90 cards you read, your warrior, level, and Power, the name you choose, and a public key | So your brothers can see how you're doing (never what you wrote) | Until you unpair or delete your account |
| The quick shields you send a brother (a prayer, kudos, a verse, raising your shield) and when | To deliver them | 4 months |
| Messages between brothers, sealed so only the two of you can read them | To deliver them | 60 days |
| Invite links you make (only a scrambled form of the link, and the name you chose) | So the link works once, for 14 days | Until your account is deleted |
| If you turn on notifications: the address your browser gives for them, and whether you chose a private lock screen | To send them | Until you turn them off or the address stops working |
| If you set reminders: the time, your time zone, tonight's phone-down time, and the date of your last evening check-in | To remind you, and not when you've already checked in | Until you turn them off |
| When you last looked at what your brothers sent | So every device agrees on what's new | Until you delete your account |
| Posts on the encouragement board, with the topic you pick and any pen name you choose | They're meant to be read by every signed-in member, so they aren't encrypted. Others see your warrior and your pen name if you chose one, never your real name or email. Reports on posts are kept so the site owner can act on them. | Until you or a moderator deletes them |
| Safety holds: a post flagged for suicide or self-harm, abuse, or a minor, and whether your community access is paused | To get you help, and to let the site owner review it and meet any legal duty to report. See the safety policy. | Until the review is done. A post removed because it involves a minor is kept, even if you delete your account, for as long as the law requires for the report. |
| Messages you send through Contact | To answer you | Until they're deleted |
| Partner high-five times | To show them to you | Until you delete your account |
| Your first name, once, if the welcome letter is turned on | To address the letter | Not kept |
| Crash reports: an error message with any quoted text removed, where in the app's own code it happened, the app version, and a device label like "iOS Safari" | To find and fix problems | 30 days |
Notifications
Notifications from your brothers and your reminders use the standard web push services run by Apple, Google, Mozilla, and Microsoft. The push itself is empty. When it arrives, your phone asks 90 Days what to show, signed in as you, so no names, words, or verses pass through those companies. "Keep it private" makes the lock screen say only that a brother is with you, or that it's a reminder you set.
Who else is involved
- Cloudflare hosts the site and its database.
- Resend sends the welcome letter and Contact emails, if those are turned on.
- Apple, Google, Mozilla, and Microsoft deliver empty notification pushes, as above.
There are no ads, no analytics or tracking scripts, and nothing is loaded from other websites. We don't sell or rent anything about you.
Your choices
- Delete your account in Settings. That deletes your journal, your account, your brothers' pairings and messages, your board posts (except one removed under the minor-safety rule, which is kept for the legally required report), notifications, and reminders, right away.
- Delete any board post you made, any time, from the board or from "Your posts" on the full board.
- Download a backup of your journal in Settings. Backups and ledger PDFs aren't encrypted, so keep them somewhere private.
- Unpair a brother, turn notifications or reminders off, or keep your lock screen private, any time.
If you lose your password
Because no one else can open your journal, no one can reset it for you. Your recovery code, shown once when you create your account, is the only other way in. If you lose both, the journal can't be recovered.
Age
90 Days is for adults 18 and older.
Changes and questions
If this policy changes, the date at the top changes, and anything important is shown in the app. Questions? Use Contact in the app.