A private journal app, private by architecture
By Bottle Me
Most journal apps promise privacy in the settings menu while the architecture quietly syncs to a cloud. Real privacy is structural: no account to compromise, no server to breach.
What on-device actually means
Your bottles and notes live in local storage. There is no account, no cloud sync, no analytics SDK phoning home. Close the app and your journal is not “stored somewhere” — it is nowhere but your phone.
Sharing is always explicit
A bottle travels only when you hand it over via code, QR or link. Nothing is ever broadcast or discoverable. The default state of every entry is invisible.
The honest trade-off
On-device means no cross-device sync and no cloud backup. For a private journal, most people judge that trade worth making.
Frequently asked questions
- What happens if I lose my phone?
- Entries are on-device, so a lost phone means lost entries — the privacy trade-off.
- Is there a lock?
- Use your device passcode and Screen Time for access control.
- Any data collected?
- No accounts, no analytics, no third-party SDKs collecting journal data.