A journal that you write to honestly is one of the most concentrated forms of personal data you can produce. Every entry is essentially a labelled training example: tagged with your mood, your relationships, your fears, your medical symptoms, your finances, your political beliefs. Mathematicians call this a high-mutual-information dataset; the rest of us just call it "everything someone would need to manipulate me."
Hosted journaling apps treat that data the way every other SaaS does: it lives on the company's servers because that's where it's easiest to feature-build against. That's the part most users accept by default. It's also the part that should give every user pause. Once your entries land on a server, you have to trust the company to never get acquired, never be subpoenaed, never have a contractor leak credentials, never have an LLM provider mine the prompts they receive. That's a lot of "never"s for one journal entry about a hard week.
What "local-first" actually means here
"Local-first" is a worn-out phrase. We mean something specific: there is no cloud database storing your entries. Period. The vault file lives on your device. Every entry is sealed under a key derived from your passphrase. The bundled AI runs in-process — it doesn't phone home to generate a reflection prompt. The marketing site you're reading doesn't have a single tracker.
What it costs us
A lot, actually. We can't run analytics on user behavior to optimize onboarding. We can't A/B-test paywall copy with real-time response data. We can't show our investors a "monthly active users by feature" dashboard. Every product decision happens upstream of the user, before they ever touch the app — through interviews, beta testing, hand-tuned heuristics, and released-software instinct.
That's a slower way to build software. It's also the only way that matches the product we want to ship. A journal company that runs telemetry on journaling is the journaling equivalent of a therapist who recorded your sessions to make the next patient's intake form smoother.
What we ask of you
Pay if you find it useful. Tell us what you'd want next by writing to us (we read every message). And keep your recovery code somewhere safe — losing it is the only way we cannot help you, and we treat that as a feature, not a bug.
