Diffuse — Your companion for overwhelming moments
Your privacy matters — especially in a mental health app. Here's the short version:
The rest of this page explains each part in detail.
The following data is stored locally on your device and never sent anywhere:
This data is stored using your device's secure storage (encrypted) and shared preferences. You can delete all of it at any time through the Settings page, or by uninstalling the app.
Diffuse includes optional AI-powered features that are off by default and only activate if you explicitly enable them. These include:
When you use an AI feature, your data takes this path:
Diffuse itself does not retain your data after the response is delivered. The third-party processors involved — Google Cloud and Anthropic — may briefly retain inputs for operational reliability and abuse prevention as described in their privacy policies. Anthropic's standard policy retains API inputs for up to 30 days for trust and safety review; we do not currently have a zero-retention arrangement in place. Neither provider uses your inputs to train their models. Your data is not associated with you or any account, because Diffuse does not use accounts.
When your device sends data to the Cloud Function, your IP address is incidentally visible to Google Cloud's request logs as part of standard internet routing, and is retained briefly under Google's default logging policies. Diffuse does not link your IP address to your activity within the app or to any other data we hold.
If your writing contains language indicating a mental health crisis or self-harm — for example, phrases referring to suicide, self-harm, or hopelessness — Diffuse detects this locally on your device and:
This detection runs entirely on your device. No additional data is collected or transmitted as a result.
If you leave AI features disabled (the default), no writing or emotional data ever leaves your device. The app works fully without AI features.
The brain dump feature allows you to speak instead of type. If you use this feature:
For details on how your voice data is handled, see Apple's Privacy Policy or Google's Privacy Policy.
Diffuse uses Firebase Crashlytics to automatically collect crash reports when the app encounters an error. This helps us identify and fix bugs quickly.
Firebase Crashlytics retains crash report data for approximately 90 days, after which it is automatically deleted. You can review Firebase's privacy information for details.
Diffuse allows you to export and share your journal entries:
These actions are entirely initiated by you. Diffuse does not automatically share any of your data. Once data leaves the app via the share sheet, it is handled by whatever app or service you choose to share it with.
Diffuse does not require you to create an account, sign in, or provide any personal information to use the app. There is no registration process.
Diffuse communicates with external servers only in these specific situations:
The app does not perform any background network activity, behavioural tracking, or analytics beyond the above.
Diffuse uses the following third-party services:
Diffuse does not use any advertising, analytics, or tracking services.
Local data is stored on your device using:
Data sent to the AI service is transmitted over HTTPS (encrypted in transit) and passes through Google Cloud and Anthropic's servers for processing. Diffuse does not retain this data on its own servers after processing; retention by the underlying providers is governed by their respective policies, linked above.
You can delete all locally stored data at any time through the app's Settings page using "Clear Progress" or "Clear All Data". Uninstalling the app will also remove all local data.
Diffuse is not directed at children under the age of 16. We do not knowingly collect personal information from anyone under 16. If you believe a child under 16 has used the app, please contact us at the email address below and we will take appropriate action.
Diffuse is a wellness tool designed to help manage everyday stress and anxiety. It is not a medical device, does not provide medical advice, diagnosis, or treatment, and is not a substitute for professional mental health care.
The AI-powered features do not provide therapy, counselling, or clinical advice. They offer reflective responses and cognitive reframing questions only, and should not be treated as professional guidance.
If you are experiencing a mental health crisis, thoughts of self-harm, or suicidal ideation, please contact your local emergency services or a crisis helpline immediately. Crisis resources are available within the app.
Diffuse is available worldwide. If you enable AI features, your data may be processed on servers located outside your country. The Firebase Cloud Function and Anthropic's AI servers are primarily located in the United States. By enabling AI features, you consent to this transfer. If you do not enable AI features, no personal data leaves your device (except crash reports, which are processed by Google).
If you are located in the European Union, United Kingdom, or European Economic Area, you have specific rights under the GDPR (and UK GDPR):
Legal basis for processing. AI feature processing is based on your explicit consent (Article 6(1)(a) GDPR), which you can withdraw at any time by disabling AI features in Settings. Crash report processing is based on our legitimate interest in maintaining a stable, working app (Article 6(1)(f) GDPR). Voice-to-text processing is initiated by your action and handled by your device's operating system; the legal basis (and data controller) for that processing is Apple or Google, as applicable.
Special category data. When you use AI features, the content you share may include information about your mental and emotional state, which qualifies as "data concerning health" under Article 9 of the GDPR. Processing of such special-category data requires explicit consent in addition to the standard legal basis. Enabling AI features in Settings constitutes your explicit consent under Article 9(2)(a) GDPR. You can withdraw it at any time by disabling AI features, after which no further special-category data will be sent.
Because Diffuse stores almost all data locally on your device and does not collect personal identifiers, exercising most of these rights amounts to using "Clear All Data" in Settings or uninstalling the app. For questions about data processed by third-party services, contact us at the email below.
Because Diffuse stores almost all data locally on your device, you have direct control over it:
If you have questions about data processed by our third-party services, please contact us and we will assist you.
If we update this privacy policy, the changes will be posted on this page with an updated effective date. Material changes will be communicated through an update to the app description or this page.
If you have questions about this privacy policy, please contact:
The data controller for personal information processed by Diffuse is Calvin, operating independently from Australia. For any GDPR-related requests, please use the email above.
Effective date: May 2026