Built for privacy and security
Your diary is yours. Journal text, notes, people, places, letters and chats are encrypted before they are stored, with a key for every account. Our servers hold those keys so search and AI can work for you; staff do not read diaries.
- Encryption at rest with a separate key for every account
- Your data is never sold and never used to train AI
- AI features ask first and can be switched off
- Export everything or delete everything at any time
- Optional device lock with a PIN or Face ID / fingerprint
- 2-step verification: authenticator app, passkeys and one-time backup codes
Our promise
No ads in your diary. No selling of personal data. No reading of your journal by staff for support. Read our Privacy Policy for the details.
Under the hood
Each account gets its own random 256-bit data key, itself encrypted by a master key that lives only in our server's secret store. Entries are encrypted with AES-256-GCM before they reach the database. Search runs on keyed fingerprints. Media sits in a private bucket and every request is checked against your session. Sessions are HttpOnly, Secure cookies, and passwords are hashed with PBKDF2-SHA256. For entries only you should ever read, use Locked entries (end-to-end encrypted in your browser).