A journal only works if you're honest in it, and you're only honest in it if you trust where it lives. That's the whole topic. The moment some part of you wonders who else could read an entry — a company, a subpoena, a breach, a future acquirer with different values — the writing gets careful, and careful journaling is barely journaling at all.
So before the app list, the three questions that actually decide privacy:
- Where do entries physically live? “In the cloud” means on computers belonging to someone else. Encryption helps — end-to-end encryption helps a lot — but not-being-there beats being-there-encrypted.
- Is there an account? An account ties your most personal writing to your identity, and makes the app a login away from anyone who obtains it.
- Can you leave with everything? Privacy includes the future. A journal you can't export is private the way a safe with no key is secure.
The subscription problem is a privacy problem
Subscriptions aren't evil, but notice what they structurally require: your entries live in their sync system, behind their account, so that leaving means losing something. Your memories become the retention mechanism. And when a subscription journal shuts down or gets acquired — it happens — years of your inner life are along for the ride.
What local-first looks like
Hejour was built on the boring answer to all three questions. There are no servers and no accounts — not “we don't read your data,” but there is nowhere to send it. Every day is one small plain file on your Mac. Sync, if you want it, runs through your own iCloud Drive — Apple's infrastructure, your Apple ID, no third party added. Touch ID locks the window from shoulder-surfers. And the door is open by design: Settings exports every day as a date-named Markdown file, a format that will outlive every app in this post. Pro is a one-time $19 — we'd rather sell you software once than rent your diary back to you monthly.
The honest comparison
| App | Entries live | Account | Export | Price |
|---|---|---|---|---|
| Hejour | Local files (optional iCloud) | None | Markdown | Free; $19 once |
| Apple Journal | iCloud (E2E encrypted) | Apple ID | Minimal | Free |
| Day One | Their sync (E2E option) | Required for sync | JSON, PDF | Subscription |
| Obsidian | Local files | None | Already Markdown | Free; paid sync |
Credit where due: Day One's end-to-end encryption is real, and Apple Journal is genuinely private for a cloud app — its weakness is the locked exit, not the storage. Obsidian shares Hejour's local-files soul; the difference is that it's a notebook you assemble, not a journal that opens on today.
Your journal should be the one place with no audience at all. Hejour is a free download — no account to create, nothing to sign. Open it and today's page is yours alone.