the short version: your pages stay on your iphone and in your private icloud. we cannot read them. journal has no account, no server of ours, no analytics and no tracking. here is the long version.
your pages: the day, the time of each sitting, your words, and the plain version of each sitting. they are stored on your iphone and, if you are signed into icloud, in your private icloud database, which only your apple account can access. apple encrypts private icloud data in transit and at rest. mostly lentils llc has no way to see, read or recover any of it.
real words are encrypted on the device with a key kept in your icloud keychain. the drawing template is also kept in icloud keychain. both can sync to devices using the same apple account. covers and sketch metadata are stored separately from the encrypted words. the drawing controls whether the app shows those words; it is intended for casual-browsing privacy, not forensic protection. without a drawing configured, the app shows real words normally.
unfinished free and guided writing is saved in an encrypted recovery file on this phone, separate from kept journal pages. with a drawing configured, leaving the app clears the active writing surface; reveal pages to continue a draft. local drafts are not synced through the journal's cloud database. the checkmark saves a page to the journal. press and hold an unfinished page to delete its draft.
each cover comes from a bank of generic sentences included in the app. an available apple on-device model may select a sentence using the page as context; it never generates or paraphrases cover text. this processing runs locally, without an ai service or a server of ours. covers are fixed after selection until the page is edited. covered history uses neutral marks independent of the writing; meaningful sketches appear after reveal.
nothing. journal contains no analytics, no advertising frameworks and no tracking of any kind. it sends nothing to us. private icloud sync is handled by apple under your apple account.
siri and shortcuts can add words to today's page and say whether today's page is written. they cannot read a page back, by design. widgets show only whether today is written. the optional daily reminder is scheduled on the device and says only that your page is waiting.
the optional app lock uses apple's local authentication on the device. journal never sees your face or your passcode, only whether the check passed.
the one-time purchase is handled entirely by apple's app store. we receive no payment details. the app only learns whether the purchase has been made.
press and hold a revealed page to erase it, or use settings → erase all pages to erase every kept page, cover, and local draft. journal deletions sync through private icloud. settings → your drawing → forgot your drawing? offers a different action: erase hidden writing and local drafts, retain ordinary covers, and reset the drawing. both actions explain their consequences before confirmation. deleting the app removes its data from that iphone; private icloud copies follow your icloud settings.
you can export all kept pages, including private writing, as plain text or pdf after revealing or proving your drawing when required. the app removes its temporary export files when export closes. copies you save or share remain at the destinations you choose.
journal is not directed at children under 13 and collects no data from anyone, of any age.
if this policy ever changes, the update will appear on this page with a new date below. questions, a bug, an idea? retrack@mostlylentils.com
last updated: september 22, 2026 · © 2026 mostly lentils llc · support