Choosing a private journal app means checking more than whether it has a lock icon. Ask where entries live, what leaves the device, and how you can keep a copy of your writing.
Use these questions to read an app’s policy and try its controls. For a concrete example, see how iglu handles journal data.
1. Where are the words and attachments stored?
Look for separate answers for text, photos, and videos. In iglu, entries and photos can sync through private iCloud storage, while video files remain on the device and may be included in device backups. That distinction matters if you expect every attachment to appear on another device.
2. Does the app require its own account?
An account can be useful for access across devices, but it also creates another relationship to manage. Iglu does not require an app account. That does not mean no services are involved: Apple, RevenueCat, and Aptabase have roles described in the policy. Treat “no account” as one fact, not a complete privacy assessment.
3. What does search or AI send elsewhere?
Ask about journal text, search terms, and any derived data. Iglu’s search and recommendations run on the device. Journal content and searches are not sent to an external AI service or used to train AI models.
4. What analytics and purchase information is collected?
A private writing space can still use usage analytics and purchase infrastructure. Iglu uses Aptabase for usage events and RevenueCat for purchases. Its policy distinguishes this operational information from journal content. Read those sections even if a product page emphasizes that your entries stay private.
5. What does the app lock actually protect?
A Face ID gate helps restrict access through the app when someone has your phone. It does not by itself explain cloud encryption, exports, backups, or what another service receives. Evaluate the lock and the data handling separately rather than treating one feature as proof of every protection.
6. Can I export a copy I can inspect?
Find the export control, create a small sample, and open the result. Check text and attachments rather than assuming the word “export” means your preferred format. Iglu supports exporting entries and attachments as a ZIP file. Keep exported copies somewhere appropriate for the personal information they contain.
7. What happens when I delete something?
Deleting an entry, uninstalling an app, and canceling a subscription are different actions. Iglu’s policy explains that cloud copies, backups, and exports may remain separately, and deleting the app does not cancel a subscription. Make sure the steps you take match the outcome you want.
Make the choice concrete
Before committing a long journal, write a harmless test entry, try the lock, and inspect an export. Save the policy link so you can revisit it when your needs change. Iglu’s full policy is the source for the product details above. Use it alongside the current App Store information.