Privacy model
What stays on your devices, what leaves only when you ask for it, and what — if anything — Cairn ever sees. The short answer: the journal itself never leaves your device, not even to iCloud.
What never leaves the device
Your recordings, transcriptions and everyday analysis. The journal itself is stored locally and is deliberately not synced to iCloud, because entries carry heart-rate and HRV data and health information does not belong in a cloud backup.
What leaves only when you say so
Entries sent for deeper analysis, if you have switched on a cloud path — your own API key or Cairn Pro. It is per feature and per consent, never a blanket setting, and it can be withdrawn at any time.
What we can see regardless
Almost nothing. No account is required to use Cairn, so there is no profile to attach anything to. The exceptions are documented in the privacy policy — an anonymous churn reason code if you choose to answer, and cookieless traffic counts on the website.