Journal app privacy: what to check before you write

Before you write anything personal in a journal app, find answers to five questions. What does it collect besides your words? Are entries encrypted while stored and while they travel? Who or what reads them, including AI services? Are they used for ads or to train models? Can you export and delete everything? A good privacy policy answers each one in plain language. If you cannot find an answer, treat that as an answer too.

Why journal text needs more care than other app data

A step count says little about you. A few lines of journal text can name your fears, your relationships, your health and your work, and a month of entries can show patterns you have not told anyone. The things you write when you are struggling are exactly the things you would least like to see leak.

Journal apps also collect information around the text: timestamps, mood ratings, device identifiers, rough location, how often you open the app and whether you pay. Put together, that can sketch your routine and your emotional state even without reading a single entry.

Why writing it down is worth protecting

Privacy matters here because journaling has real benefits, and those depend on writing freely. Naming a feeling seems to take some heat out of it. In a 2007 brain imaging study, putting a feeling into words reduced the response of the amygdala and other emotional brain regions to upsetting images. Looking at an experience from a little distance helps too: in a 2008 study by Kross and Ayduk, people who reflected on a low moment as if from the outside reported less depressed mood afterwards, and fewer recurring thoughts about it a week later. Perspective distancing is one of the techniques built on that idea.

None of that works if part of you is editing every sentence for an imagined reader.

Five questions to answer from the privacy policy

Policies are long, so search them. Useful words to look for: journal, content, sensitive, share, advertising, retention, delete, AI, train, service provider.

1. What is collected besides your entries?

Look for each category of data and the reason given for it: running the feature, security, analytics, advertising or "improving our services". The last one is broad. Better policies say which data it covers and let you opt out.

2. Is it encrypted, and how?

Encryption in transit protects data on its way between your phone and a server. Encryption at rest protects it where it is stored. End-to-end encryption, where the company cannot read your content at all, is stronger still, but it usually makes account recovery and syncing harder, and it rules out features that need to read your text. If an app claims end-to-end encryption, the policy should explain how keys and recovery work.

3. Who and what can read your words?

This is the question policies answer least directly. Check for staff access, support access, contractors, and outside services that host or process your data. Limited access for fixing a bug can be reasonable. What you want to see is the boundary: who, when, and whether you choose what gets shared. Sharing with a therapist or a community should be off until you turn it on, item by item.

4. Are entries used for ads or model training?

"We do not sell your data" is a good start, but it leaves questions open. An app can avoid selling data and still share it with partners, use it for internal analysis, or keep it longer than you expect. Look for a direct statement about advertising and about training AI models.

5. Can you export and delete everything?

Check whether you can delete single entries, delete your whole account, and get a copy of what you wrote. Check what deletion covers and how long backups keep data.

AI features need their own questions

Many journal apps now summarize entries, suggest prompts or analyze mood. Ask four things about any AI feature:

• Does it process your full journal text, or only what you choose to send?
• Is an outside AI company involved, and which one?
• Is your text used to train or improve a general model?
• Can you use the journal without the AI feature?

A narrow feature with a clear job is easier to trust than one that promises to understand your mental health.

Reading reviews of journal apps

Reviews help when they quote or summarize the current policy and the in-app settings, and say plainly what they could not find out. Check the date, because ownership, AI features and data partners change. Treat "it feels private because it has a passcode" as a comment about the lock screen. It says nothing about how data is stored on servers.

How I handle journal entries in Shora

I made one decision early that shapes everything else. The first version of Shora took what you wrote in the journal and wove it into the meditation script. It made things worse: hearing your own worries read back keeps your mind on them, when the point of the session is to get some distance. So I removed it. Today the journal is used for one thing only, suggesting your next session.

Here is what that means in practice, as our privacy policy describes it:

• Entries are stored in Google Cloud (Firebase) and encrypted at rest and in transit.
• A language model reads a few sentences and turns them into four numbers: mood, energy, focus and connection. That analysis runs server-side through Google Vertex AI. If you move the dials instead of writing, no language model runs at all. The AI page lists every moving part.
• Your data is never sold and never used for ads. Analytics never receive journal entries, mood values or your email address.
• Deleting your account removes all of it. You can do that in the app's settings or on the delete account page.

The journal page explains why naming the feeling is part of the practice. If that sounds like what you want, you can download Shora without creating an account.

When to choose paper, or get support

Match the tool to what you plan to write. For quick mood check-ins and coping notes, a well-documented app is a reasonable trade for syncing and reminders. For trauma details, legal matters, medical records or identifiable information about other people, a paper notebook or an offline journal may be the better place.

A journal app is also not a confidential clinical record, unless the provider explicitly works under the legal protections of one. If writing keeps bringing up distress you cannot settle, or anxiety and low mood are affecting your daily life, talk to a clinician. In a crisis in the US, call or text 988 to reach the Suicide and Crisis Lifeline.