Privacy: Judgment Gym
Judgment Gym is made by one developer. What you write lives on your phone and is synced to the app's server. Nothing is sold, and there are no ads.
What leaves your phone
- Sign-in. You sign in with Apple. The server keeps only the anonymous ID Apple issues for this app, not your name or email. If Apple shares your name or email the first time, they stay on your phone.
- What you write. Your entries and edits, the notes you add while practicing, your answers to practice cards, your routines and rules and how you marked them each day, and the sources you name (a book, a podcast, a person) sync automatically to the server, which runs on Cloudflare, over HTTPS. It is not end-to-end encrypted: the server can read it. Deleting an entry records the deletion; earlier copies stay on the server until your account is erased.
- AI features. When you save a new entry, its text goes through the server to Anthropic (Claude), which suggests what kind of entry it is. Every entry you save or edit also goes to Voyage AI, which turns it into an embedding (a list of numbers) used to find similar entries. A draft you are typing goes to Voyage AI the same way, but not until the note about this on the capture screen has been dismissed (or your first entry saved). A photo you choose with "From a photo" goes to Anthropic to read its text; the photo is not kept. For these AI features the server keeps the embeddings, which stay even after you delete the entry, until your account is erased. Both providers process this under their own API terms. Practice notes, routines, rules and sources are not sent to either.
- Share links. If you share an entry, its text (and your name, if you type one) is stored on the server and readable by anyone with the link for 30 days. There is no button yet to take a link back early; email us and we will.
- Usage analytics. A few events go to Amplitude: the app opened; an entry saved (whether it came from a practice note, whether it sits under another entry, and how many entries you have); one of the app's starter examples added (which example, since that text is ours); a practice card answered (which of the three answers, and whether it came from "Practice more"); an entry shared, and a shared entry added (with the entry's type, and whether the sender gave a name, never the name). Never the text of anything you write. Each event also carries the app version and build, and Amplitude records session start and end and a random device ID, not your account. Amplitude also sees your device model, OS, language and IP address. There is no off switch yet.
- Server logs. Each request is logged with your account ID, timings, sizes and a short fingerprint (hash) of any text, never the text itself. Cloudflare, which hosts the server, also keeps its own short-lived request logs.
What stays on your phone
Reminders are scheduled on the phone (one a day, in the morning, with general wording, never an entry's words); there are no push notifications. The Home Screen widget shows only how many cards are ready today and whether a routine is still to do; the app hands it that on the phone, never a card's or a routine's words. Your settings stay on the phone. A technical diagnostics log (what the app did, never your text) leaves the phone only if you tap Export on the Diagnostics screen and choose where to send it.
Deleting your data
Deleting the app erases what it keeps on your phone. There is no button yet to delete your account or the server copy: email support@7hoenix.com and the developer will confirm which account is yours, then delete your synced data, share links, embeddings and server logs by hand within 30 days. Analytics events are not tied to your account, so they cannot be picked out and deleted.
Children, changes, contact
The app is not meant for children under 13. When this policy changes, this page and its date change with it. Questions: support@7hoenix.com.