PrivacySecurityJournaling

Where Does Your Journal Data Actually Go?

Mar 27, 20264 min read
Digital security and data privacy

Your journal is probably the most honest place in your life. It's where you write the things you wouldn't say out loud — about your marriage, your career, your fears, the mistakes you're trying not to repeat. So where does all of that go?

Most journal apps work like this: you write an entry on your phone, it gets sent to the company's servers (usually Amazon Web Services or Google Cloud), stored in their database, and synced back to your other devices. The company encrypts it 'at rest' — meaning it's encrypted on their hard drives. But they hold the keys. Their engineers can read it. Their database admins can query it.

Day One, the most popular journal app, stores entries on Automattic's AWS infrastructure. Reflectly uses their own servers. Rosebud processes entries through their backend. In every case, a company has access to your private thoughts — or at minimum, the infrastructure to access them if they chose to.

This isn't theoretical. Data breaches happen. Companies get acquired and policies change. Employees sometimes have more access than they should. And law enforcement can subpoena data from companies that hold it.

There's a different approach. Apple's CloudKit provides a private database for each user, tied to their Apple ID, that app developers literally cannot access. When you use an app built on CloudKit with Advanced Data Protection enabled, your data is end-to-end encrypted — Apple can't read it, and neither can the developer.

This is how Forge works. Your journal entries are stored on your device and in your private iCloud. We don't have a server. We don't have a database of journal entries. The infrastructure doesn't exist for us to read your data, even if we wanted to.

The only time your text leaves your device is during AI analysis, when it's sent to Anthropic's API. Anthropic doesn't store or train on API inputs — your text goes in, your breakdown comes out, nothing is kept.

If you're going to write honestly — and that's the only way journaling is useful — you should know where your words end up. With Forge, they stay yours. Learn more about our privacy approach at axislabs.app/forge.