How your journal stays private
Everything you write here is locked on your phone before it’s saved. Only your phone has the key. Not us, not the company that stores our data, and not anyone who breaks in can read it.
Locked before it leaves your phone
When your reading is saved, your phone scrambles your words with a key that only it has. What reaches our database is a jumble of letters, like v1:Qm9yZ…, that means nothing without your key.
What we can and can’t see
Locked away
- Your card
- What’s on your mind
- What you notice
- Your conversations
- Your sealed lines
What we see
- Your email address, to sign you in
- The days you drew a card
- Whether you sealed it
Talking with your reader
A reader on your device lives inside your phone. Your conversation never leaves it.
Claude lives online. To write each reply, your conversation travels over a secure connection to Anthropic, the company that makes Claude. We don’t keep a readable copy, and Anthropic doesn’t use it to train its models. What gets saved in your journal is still locked.
Your key, and your way back
Your key lives only in this browser. To keep a way back, the app offers to email you a recovery link. Your own mail app sends it, so the key never passes through us. On a new phone, sign in and tap the link, and your journal opens again.
Keep that email private: anyone with the link and access to your email could read your journal. Without the link, nobody can open your old readings, not even us. You’d start a fresh journal.
Keep a recovery linkIn all honesty
- The locking is done by this app’s code, so you’re trusting the app to do what this page says.
- If you choose Claude, you also trust Anthropic with the messages it replies to.
- Anyone who can unlock your phone can open your journal, just like your photos or messages.