Privacy
Last updated: 5 October 2026.
The short version
This app does not collect anything. Your journal is stored on your device, encrypted, and is not sent to us or to anyone else. There is no account, no server of ours, no analytics and no crash reporting.
What is stored, and where
Everything you put in your journal — entries, photographs, notebooks and settings — is kept inside the app's own storage on your device. The journal is encrypted with a key held in your device's Keychain. That key never leaves this device and cannot be read while the screen is locked. Nobody else can read your journal, including us: we have no copy and no way to obtain one.
Your journal is excluded from your device's own backups. iCloud backups and backups to a computer copy most apps' files automatically; this app asks them not to. That is deliberate: an app sold on "nothing leaves this device" should not be putting a copy of your diary on a company's servers on your behalf, even quietly.
It has a cost, and you should know it: if you lose the device and have not exported your journal or set up a copy in a folder, the journal is gone with it. Exporting is free, always, and puts a copy exactly where you choose.
What is not collected
- No name, email address, or account of any kind
- No analytics, usage statistics, or crash reports
- No advertising identifiers, and no advertising
- No location
- No contacts
- No photographs or files other than the ones you choose
Face ID, Touch ID and passcodes
If you turn on the lock, the app asks your device to confirm it is you. The confirmation happens inside the operating system; the app is told only whether it succeeded. Your biometric data never reaches the app and cannot be read by it.
A passcode you set for the app, or for a single notebook, is kept on this device inside the encrypted journal. It is never sent anywhere.
Dictation
If you dictate an entry, the app asks for the microphone and for speech recognition. Your words are recognised by your device's own speech recogniser, on the device. The app requires this: where a device cannot recognise speech on its own, the app offers no dictation rather than sending your voice to be recognised elsewhere.
Nothing is recorded. The sound of your voice is never handed to the app and no recording is kept anywhere; only the words become part of your entry. The microphone is used only while you are dictating.
Photographs
Photographs you add to an entry are copied into the app's own storage and encrypted there, like the rest of your journal. The app does not ask for access to your photo library: your device shows you its own picker and passes along only the pictures you chose, so the app never sees the rest. The app does not use the camera.
A copy in a folder
If you choose a folder for a daily copy, the app writes an ordinary export of your journal into that folder once a day, and another device of yours that you point at the same folder can read it back. We never see the folder. If it is in iCloud Drive or another storage service, the copy is kept by that service under your account, on the same terms as any other file you keep there.
The copy in the folder is not encrypted, so that you can always open it without this app. Choose the folder with that in mind.
Importing and exporting
When you import from another journal, the app reads the file you choose, on your device. When you export your journal or make it into a book, the file is created on your device and handed to your system's share sheet. Where it goes next is entirely your choice. The app does not upload anything.
If your journal contains photographs, the export is a zip archive so that the pictures leave with the words. Photographs are copied unchanged, which means any information the camera stored inside them — the date and often the place a picture was taken — travels with them. We do not strip it, because altering your files without asking is not something this app should do. It is worth knowing before you send an export to somebody else.
Reminders and the widget
A daily reminder, if you turn one on, is scheduled by your device itself; no server sends it. The widget shows the date and nothing you wrote.
Purchases
Subscriptions and the one-time purchase are made through the App Store and handled by Apple. The app asks the App Store on your device whether a purchase is active, and that is all it learns. We do not receive your name, your Apple Account or your payment details.
What Apple shows us
Apple shows every developer statistics about their app on the App Store, such as how many people viewed its page or downloaded it, without telling us who they are. If you have chosen in your device's settings to share analytics with app developers, Apple also passes on anonymous crash reports and usage figures. That is collected by your device's operating system under Apple's terms and your own settings; the app itself sends nothing.
Children
The app is not directed at children and collects nothing from anyone, including them.
Changes
If this policy ever changes, the updated version will be published here with a new date. Since the app collects nothing, any change would be about adding something — and adding anything that leaves your device would be announced in the app before it happened, not buried in a policy update.