A journal is the worst thing to put in the cloud

What you write changes when it can be read

People are extremely good at unconsciously adjusting for an audience. Not "I won't write this," but subtler — you use a slightly gentler word about a family member. You skip the part about the job. You frame the fight in a way that makes you look reasonable. None of it is a decision; it just comes out that way.

A journal you've edited for an imagined reader is a document about how you'd like to be perceived. That's a fine thing to write, but it doesn't do the job. The value of journaling is entirely in the gap between the polished version and the actual one, and if the gap closes, there's nothing left.

So privacy in a journaling app isn't a defensive feature. It's the thing that determines whether the product works at all.

The three ways "private" gets used loosely

Most journaling apps say they're private, and most of them are being sincere. But the word covers three very different architectures:

• Encrypted in transit and at rest. Your entry goes to a server, encrypted along the way and encrypted on the disk. The company can typically still decrypt it, because they hold the keys to operate features on it.
• End-to-end encrypted. Better. The server holds ciphertext it can't read. But it still holds it, and account recovery, sync, and any AI feature usually require punching a hole somewhere.
• On-device. The entry never becomes a network request. There's no server copy to encrypt, subpoena, breach, or accidentally log.

Only the third one lets you stop thinking about it. And that's the actual goal — not a security posture you can defend in an argument, but the absence of the question in the back of your head at the moment you're deciding what to say.

The AI complication

Here's where this got harder in the last few years. The most useful thing an app can do with a journal entry — transcribe it, summarize it, pull the tasks out of it — has historically required sending the text to a large model on someone else's hardware.

That's a genuine trade, and plenty of apps made it. The pitch is "we only send it to process it, we don't store it." Maybe true. But now your rawest material is a request body traveling to a third party, and the reason you were writing honestly in the first place is gone.

What changed is that phones got good enough to do the useful part locally. Speech recognition and summarization both run on-device now, at quality that's fine for this job. The trade isn't necessary anymore — which means an app that still makes it is choosing convenience over the thing that makes journals work.

What on-device actually means in practice

DayTape works like this: you talk, the audio is transcribed on your iPhone, and the summary and to-do extraction happen on your iPhone. No account. No sign-up. Nothing to opt out of, because there's no pipe.

There are real trade-offs and it's worth being straight about them:

• No magic web dashboard. Your entries are on your phone. That's the deal, and it's the point.
• Device-bound. The privacy comes from the entries not going anywhere, which by definition means they're where you left them.
• An on-device model is smaller than a frontier cloud model. For summarizing what you just said and pulling out the actionable parts, that's plenty. For writing you an essay, it isn't. Good thing that's not the job.

The test to apply to any journaling app

Forget the marketing page and ask three questions:

1. Does it require an account? An account exists so that a server can associate data with you. If there's no server copy, there's usually no reason for one.
2. Does it work in airplane mode? Turn the radios off and use every feature, including the AI ones. Anything that stops working was going somewhere.
3. What happens to an entry when you delete it? If the honest answer is complicated, it left the device.

The bar is low and it should be higher

People hand over an enormous amount of intimate material to apps every day and mostly don't think about it, which is understandable — the alternative is exhausting. But a journal is a special case, because it's the one place where the whole value proposition is unfiltered honesty, and honesty is exactly the thing that evaporates under observation.

Anything you'd hesitate to say into a phone that might upload it is precisely the thing worth saying. Build the app so that hesitation never arrives.