Eggplant Diary is a private intimate-life record for adults. We designed it to belong to you by default: no account, no record server operated by us, and records stored on this iPhone with sensitive content encrypted at rest.
Effective date: November 10, 2026 · Version 1.0
01Scope and operator
This policy applies to the iOS app Eggplant Diary (Chinese name: 茄子日记; Bundle ID: com.1024star.eggplantdiary) and to this page. The operator is 千兆星尘 (1024STAR), located in Chongqing, China.
It explains how we handle information about you and how you can control it. It does not apply to third-party services you open through the app or this page, such as the App Store or iCloud Drive. Those services are governed by their own privacy policies.
02Data we handle
Eggplant Diary has no account system. Content you create is written to the local database on your device by default. We do not receive a copy.
Swipe horizontally to see all columns.
Category
What it includes
Storage and processing
Records
Date and time, context (with a partner / solo), partner links, acts, protection choices, roles, how it felt, duration, ejaculation details (optional), hidden / locked state, deletion state.
Record content is encrypted on this device. Date and deletion marker support the calendar, sorting, and data consistency.
Partner profiles
Nickname, relationship tags, avatar.
Encrypted on this device.
Identity details (optional)
Gender, orientation, relationship status, roles.
Encrypted on this device.
Photos (optional)
Images you explicitly select from the system photo picker.
Re-encoded as JPEG with original metadata removed, then stored as separately encrypted files on this device.
Preferences
Language, appearance, app lock and auto-lock, onboarding choices, age confirmation.
Stored in local preferences. They do not contain record content.
We do not ask for your name, email address, phone number, HIV status, or precise location. We do not collect your contacts, advertising identifier, or usage analytics.
Purchases
When you buy or restore an upgrade, Apple processes the transaction through StoreKit. We do not receive your payment card number, billing address, or Apple ID password. The app only reads the product and entitlement status provided by Apple on your device. Apple's handling of transaction information is governed by Apple's Privacy Policy.
This website
This page is served by our own static web server. The server keeps standard access logs for security and troubleshooting, such as IP address, time, user agent, and requested path. We do not use these logs for advertising or profiling, and we retain them only as long as needed for operations and security. This page sets no cookies and loads no external fonts, analytics, or tracking scripts.
03What we do not collect
No account, and no collection of your name, email address, or phone number.
No contacts, precise location, or advertising identifier (IDFA), and no cross-app tracking.
No advertising, analytics, social, or third-party crash-reporting SDKs.
We do not sell, rent, or trade your data.
The current version does not access Apple Health, does not read Apple Health data, and does not request notification permission.
We do not require you to record HIV status. PrEP, PEP, or similar information you choose to record is your own note and is not medical advice.
04How data is protected
4.1 Encryption
Records, partner profiles, identity details, and photos are encrypted with AES-GCM 256 before they are written. Each encryption uses a fresh random nonce and binds the record identifier and field name as authenticated data. The master key is randomly generated and stored in the iOS Keychain with the ThisDeviceOnly attribute. It is never synced to another device or uploaded.
4.2 File protection
Records, photos, and app-created backup files use iOS file protection and are excluded from iCloud and iTunes device backups.
4.3 App lock
You may protect the app with Face ID, Touch ID, or your device passcode. Biometric matching is handled by iOS; the app never receives your face or fingerprint data. When the app moves to the background, content is covered. When screen recording or mirroring is detected, sensitive screens are covered. iOS cannot prevent someone from photographing or screenshotting the screen, and we do not promise that screenshots are impossible.
4.4 No key escrow
We do not hold your encryption keys or backup passphrase. If the device is erased, the key is lost, or you forget the passphrase, we cannot recover your data.
05Where data lives and how long it stays
Records are stored in the app's local container until you delete them in the app or uninstall the app. Uninstalling the app removes its local database and photos.
When you delete a record, it disappears from lists and statistics immediately. To support undo and data consistency, the encrypted store may retain a deletion marker until the app is uninstalled or the data is replaced by a restore.
Deleting a partner profile removes the profile only. Historical records remain and show “Deleted partner”.
We hold no server copy, so there is no account deletion process.
Encrypted archives you export remain wherever you put them, on this device or in your iCloud Drive. We do not hold them, and uninstalling the app does not delete them.
06Backup and restore
You can create an encrypted backup manually. The passphrase is used to derive a key with PBKDF2-HMAC-SHA256 and a random salt. The passphrase is never stored or uploaded. If you forget it, the archive cannot be recovered.
You can copy the encrypted archive to your own iCloud Drive. You start that transfer; Apple's iCloud terms and privacy policy apply.
Restoring a backup replaces the records currently on the device. Confirm before restoring.
Records, photos, and backup files are excluded from iCloud device backups. If you have no exported archive and lose or erase the device, the records cannot be recovered.
07Network requests and third parties
The current version makes network requests only when:
you buy or restore an entitlement, through StoreKit to Apple; or
you explicitly copy an encrypted archive to iCloud Drive, to Apple iCloud.
It makes no other network requests. We do not operate a record server, and we do not include advertising, analytics, social, or third-party crash-reporting SDKs. Apple's services are governed by Apple's Privacy Policy.
08Sharing and disclosure
We do not sell, rent, or share your records. Because we do not hold a copy, we cannot provide record content to third parties.
If we receive a legal request, we can only state that we do not hold the data. If partner sharing is introduced in the future, we will update this policy before launch and use mutual consent, field-level controls, withdrawal, and end-to-end encryption.
09Your rights and choices
Access and export: view records in the app or create an encrypted backup.
Correction: edit records, partner profiles, and identity details in the app.
Deletion: delete records or partner profiles in the app. Uninstalling the app removes all local data.
Withdrawal: disable app lock, stop using iCloud copies, or delete data at any time. There is no account to close.
Data protection requests: if you are in the European Economic Area, the United Kingdom, California, or another jurisdiction with data protection laws, contact hello@1024star.com to exercise rights of access, correction, deletion, restriction, or objection. We normally respond within 30 days. Because we do not hold your records, many requests can be completed directly in the app.
This policy does not affect mandatory rights under your local law.
10Age and minors
Eggplant Diary is for adults aged 18 and over. It is not directed to minors, and we do not knowingly collect information from minors. If you believe a minor has used the app, contact us. Because data stays on the device, please also delete the app and its data on that device.
11Health and medical disclaimer
Eggplant Diary is a personal record-keeping tool, not a medical device. It does not diagnose conditions, estimate risk, recommend testing or treatment, or provide medical advice. Protection choices, PrEP, PEP, and similar information are recorded only as you select them and are not a prescription or clinical recommendation. If you have questions about sexual health, talk to a qualified healthcare professional.
12Changes to this policy
We may update this policy. When we do, we will change the effective date at the top of this page. For material changes, we will provide a prominent notice in the app or on this page. Continuing to use the app means you accept the updated policy. If you do not agree, stop using the app and delete your data.
We normally respond within 30 days. Please put “Eggplant Diary privacy request” in the subject line, but do not send us your record content, photos, or backup passphrase.
