Privacy policy
Your journal is yours
Effective October 27, 2026 · updated for the Mind & Mood journey, which stays in your encrypted journal
90 Days is a journal for men and women in a real battle, whether it's an addiction or anxiety and depression. No one is fully honest in a journal they think someone else can read, so it's built so no one else can. This page says exactly what the service can and can't see, in plain words.
What stays private
Everything you write or record in the journal is sealed on your device with AES-256-GCM before it syncs: your battle or journey (including a Mind & Mood focus), your check-ins (morning and evening), moods, triggers, plans, commitments, journal entries, grades, prayers and thanks, goals, your garden, your warrior and gear, your progress, notes, letters, and your brothers' phone numbers and the names you give them. The key comes from your password on your device (PBKDF2, 600,000 rounds) and is never sent. The service stores only sealed records it can't open, and there's no back door: not even the people who run 90 Days can read them.
Private messages between shield-brothers are also end-to-end encrypted (ECDH P-256 and AES-256-GCM). Only the two of you can read them.
What the service does see
| What | Why | How long |
|---|---|---|
| Your email address | So you can sign in | Until you delete your account |
| A one-way check of your password and recovery code (never the password itself) | To confirm it's you | Until you delete your account |
| When you sync, and how many records you have | To keep your devices in step | Until you delete your account |
| A sign-in cookie on each device | To keep you signed in | 30 days |
| Your network address, briefly | To stop people guessing passwords or flooding the service | Up to 2 days |
| If you pair with shield-brothers: your day count, days crossed off, how many days you checked in this week, the date of your last morning and evening check-in, how many of today's 90 cards you read, your warrior and the gear it's wearing, whether you're a man or a woman, level, and Power, this week's battle numbers (a total and one number for each day, worked out on your device from what you did), the last day you showed up (any check-in, even an honest slip) and which days this week you did, that you're away and the day you're back (only if you tell them, with a reason if you pick one; the day you came back stays for two weeks so your time away isn't counted as going quiet), the name you choose, and a public key | So your brothers can see how you're doing (never what you wrote) | Until you unpair or delete your account |
| The quick shields you send a brother (a prayer, kudos, a verse, raising your shield, a nudge when he's gone quiet, asking your wall to sign your milestone banner, signing his) and when. When a brother has been nudged, his other brothers can see that it happened today (not who sent it), so nobody piles on. The words you sign on a banner travel as a sealed message. | To deliver them | 4 months |
| If you start or join a battle: its name, who started it, who's in it or invited, and when. The other men in a battle see the same shared numbers your shield-brothers see (listed above) and the name you chose, even if they aren't on your shield wall. A nudge, a welcome back, or thanks you send a man in your battle, and when. | So the men in a battle can fight one foe together and reach each other | Until the battle ends or you leave it; nudges 4 months |
| Messages between brothers, sealed so only the two of you can read them | To deliver them | 60 days |
| Invite links you make (only a scrambled form of the link, and the name you chose) | So the link works once, for 14 days | Until your account is deleted |
| If you turn on notifications: the address your browser gives for them, and whether you chose a private lock screen | To send them | Until you turn them off or the address stops working |
| If you set reminders: the time, your time zone, tonight's phone-down time, and the date of your last evening check-in | To remind you, and not when you've already checked in | Until you turn them off |
| When you last looked at what your brothers sent | So every device agrees on what's new | Until you delete your account |
| Posts on the encouragement board, with the topic you pick, any pen name you choose, and whether you're a man or a woman | They're meant to be read by every signed-in member, so they aren't encrypted. Others see your warrior, whether a man or a woman wrote it, and your pen name if you chose one, never your real name or email. Reports on posts are kept so the site owner can act on them. | Until you or a moderator deletes them |
| Safety holds: a post flagged for suicide or self-harm, abuse, or a minor, and whether your community access is paused | To get you help, and to let the site owner review it and meet any legal duty to report. See the safety policy. | Until the review is done. A post removed because it involves a minor is kept, even if you delete your account, for as long as the law requires for the report. |
| Messages you send through Contact | To answer you | Until they're deleted |
| Partner high-five times | To show them to you | Until you delete your account |
| Your first name, once, if the welcome letter is turned on | To address the letter | Not kept |
| Crash reports: an error message with any quoted text removed, where in the app's own code it happened, the app version, and a device label like "iOS Safari" | To find and fix problems | 30 days |
Notifications
Notifications from your brothers and your reminders use the standard web push services run by Apple, Google, Mozilla, and Microsoft. The push itself is empty. When it arrives, your phone asks 90 Days what to show, signed in as you, so no names, words, or verses pass through those companies. "Keep it private" makes the lock screen say only that a brother is with you, or that it's a reminder you set.
Who else is involved
- Cloudflare hosts the site and its database.
- Resend sends the welcome letter and Contact emails, if those are turned on.
- Apple, Google, Mozilla, and Microsoft deliver empty notification pushes, as above.
There are no ads, no analytics or tracking scripts, and nothing is loaded from other websites. We don't sell or rent anything about you.
Your choices
- Delete your account in Settings. That deletes your journal, your account, your brothers' pairings and messages, your board posts (except one removed under the minor-safety rule, which is kept for the legally required report), notifications, and reminders, right away.
- Delete any board post you made, any time, from the board or from "Your posts" on the full board.
- Download a backup of your journal in Settings. Backups and ledger PDFs aren't encrypted, so keep them somewhere private.
- Unpair a brother, turn notifications or reminders off, or keep your lock screen private, any time.
How to delete your account
This works the same in the Android app and in a web browser on any phone or computer:
- Sign in at behindandbefore.com (or open the app).
- Go to Settings, then Account, and tap Delete account…
- Tap Delete everything.
Everything listed under "Your choices" above is deleted right away. Nothing is kept except a post removed under the minor-safety rule, as described above. If you can't sign in, use Contact on the sign-in screen with the email address on your account, and we'll delete it for you.
If you lose your password
Because no one else can open your journal, no one can reset it for you. Your recovery code, shown once when you create your account, is the only other way in. If you lose both, the journal can't be recovered.
Age
90 Days is for adults 18 and older.
Changes and questions
If this policy changes, the date at the top changes, and anything important is shown in the app. Questions? Use Contact in the app.