Privacy Policy

Last updated: April 2026

This policy explains how Drift, operated by Norilab, Inc., handles your information.

What Stays on Your Device

Your private journal entries — text, drawings, and photos — are stored locally on your device using SwiftData. We cannot access, read, or recover them. They exist only on your device and are permanently deleted if you delete the app.

What We Collect

Account information. Drift uses Apple Sign In through Firebase Authentication. This creates an anonymous identifier for your account. During sign-in, Apple may provide your email address, but we do not store or use it. Instead, you are identified by a randomly generated nickname. We do not require your name, phone number, or any other personal information.

Anchors content. When you post to Anchors, your text and drawings are stored on our servers (Firebase Cloud Storage) and visible to other users. Posts are associated with your anonymous nickname, not your real name or email.

Device attestation. We use Firebase App Check with Apple's App Attest to verify that requests to our servers come from genuine app installations. This helps prevent fraud and abuse. No personally identifiable information is collected for this purpose.

Analytics (optional). We may use Firebase Analytics (Google) to understand how the app is used — such as which features are popular and how often the app is opened. This data is aggregated and not tied to your journal content or real identity.

What We Do Not Collect

  • We do not read your private journal entries.
  • We do not store your email address.
  • We do not collect crash reports or diagnostics.
  • We do not track your location.
  • We do not collect your contacts.
  • We do not send push notifications.
  • We do not sell any data to third parties.

Third-Party Services

Drift uses the following third-party services, each with their own privacy policies:

  • Firebase Authentication (Google) — anonymous account management
  • Firebase Cloud Functions (Google) — server-side operations
  • Firebase Cloud Storage (Google) — storage for public Anchors posts
  • Firebase App Check (Google) — fraud prevention and security
  • Firebase Analytics (Google) — optional usage analytics
  • Apple App Attest — device verification for security
  • Apple Sign In — authentication

Data Retention

Your local journal data exists as long as the app is installed. If you delete the app, it is gone permanently — we cannot recover it.

Your Anchors posts are stored on our servers and may be retained even after account deletion for moderation purposes and to maintain the integrity of public discussions.

You may request deletion of your account and associated server data by contacting us at hi@letitdrift.com.

Children

Drift is not intended for anyone under 17 years of age. We do not knowingly collect information from children.

Your Rights

You have the right to:

  • Delete your account and server data at any time through the app or by contacting us
  • Access the data we store about you (your nickname and public posts)
  • Opt out of analytics (this may be added in a future update)

Data Security

We use industry-standard security measures including:

  • HTTPS encryption for all data transmission
  • Firebase security rules to protect your data
  • Apple's App Attest for device verification
  • Anonymous identifiers instead of personal information

Changes

We may update this policy at any time. Continued use of Drift after changes constitutes acceptance. We will notify users of material changes through the app or our website.

Contact

Questions about this policy — hi@letitdrift.com

Norilab, Inc. Republic of Korea