Citta is a private place to write down what you are thinking and feeling. This page explains, in plain language, what leaves your device and what does not. We have tried to write it so that it is actually readable, rather than to bury the important parts.
The short version. Your entries are encrypted on your device before they are stored. Voice recordings never leave your phone. We do not show ads, we do not track you across other apps, and we do not sell your data.
But one thing matters and we want to be direct about it: several features — automatic tagging when you save an entry, and the AI-generated reports and reflections — require the plain text of your entry to be sent to our server and on to our AI model provider. If you would rather nothing of the kind ever leaves your device, you can turn AI features off in the app, or simply not use them.
Citta is operated by the developer of the Citta app (the “we” below). For any privacy question, or to exercise any of the rights described here, write to support@citta.fyi.
Your thoughts, mood ratings, dream notes, and self-assessment answers are encrypted on your device with a key that is generated and held only on your device. Our servers receive and store the resulting ciphertext, which we cannot read. If you lose the key — for example by reinstalling the app without a backup — we cannot recover your entries for you. That is a direct consequence of the encryption, not a limitation we can remove on request.
If you record a thought by voice, the audio is kept on your device only. It is never uploaded. Speech-to-text transcription is not enabled in this version, so no audio is sent anywhere for processing.
Citta has AI features. To make them work, the relevant text has to be readable by a language model, which means it cannot stay encrypted end to end during that operation.
| What is sent |
The plain text of the content involved —
for automatic tagging, the entry you just saved; for a report, a sample of your entries from
that period; for dream interpretation or creative writing, the text you selected.
Boundaries, stated precisely: deep insight sends aggregate statistics only (entry count, average score, theme and mood distributions) and no source text; literature matching runs with a local algorithm on our server and sends nothing to any model. |
|---|---|
| Where it goes | Over HTTPS to our server, and from there to our AI model provider, Alibaba Cloud Model Studio (a service of Alibaba Group, located in mainland China), using the qwen-plus model. |
| Why | Solely to produce the result you asked for — tags, a report, or a reflection. |
| What we keep | We do not write your text to our database or logs. Our internal task log records only the type of task, whether it succeeded, token counts, and how long it took. |
| What we cannot promise | We cannot make commitments on behalf of the model provider about its own retention practices. If that is not acceptable to you, do not use the AI features — the app's core journal, timeline, tags and search all work without them. |
Your mood ratings and the scores from the self-assessment questionnaires (PHQ-9, GAD-7, and a short personality exploration) are stored in a form our server can read, unlike your written entries. We use them to show you trends over time. They are health-related information, so we treat them as sensitive: they are not shared with anyone, and they are never used for advertising.
Our servers keep ordinary request logs (such as IP address and timestamp) for security and rate limiting. We do not use third-party analytics SDKs, advertising SDKs, or crash-reporting SDKs that profile you.
PHQ-9 and GAD-7 are widely used screening questionnaires. In Citta they are offered as a self-reflection aid, with an explanation of what each score range generally means. They are not a diagnosis and not a substitute for professional care. If a score is high, the app suggests talking to a professional and shows crisis helplines. We do not use your results to make decisions about you, and we do not contact anyone about them.
The Citta service runs on servers in the United States. The AI model provider described in section 2.4 is located in mainland China. If you use the app from another country, your information will therefore be transferred to and processed in those locations. By using the app you agree to that transfer, which is necessary to provide the service.
Citta is not intended for children under 13, and we do not knowingly collect personal information from them. The app is rated for older audiences because it discusses mental health and includes a questionnaire that asks about thoughts of self-harm. If you believe a child has provided us with personal information, contact us and we will delete it.
Traffic between the app and our servers uses HTTPS. Your entries are encrypted on your device before storage. No system is perfect, and we cannot guarantee absolute security — but we have deliberately designed the service so that the most sensitive thing you give us, the text of your thoughts, is the thing we are least able to read.
Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to certain processing. To exercise any of them, write to support@citta.fyi. The app also lets you export your own archive directly.
If we change this policy in a way that affects what happens to your data, we will say so in the app before the change takes effect, and update the date at the top of this page.
Questions, requests, or complaints: support@citta.fyi.