A journal only works if you’re honest in it. And you’re only honest when you’re sure no one is reading over your shoulder. So it’s worth asking a question most journaling apps would rather you didn’t: when you write something down, who else can see it?
The uncomfortable answer, for most apps, is them. Your entries sit on their servers in a form they can read — which means their staff can, their analytics can, anyone who breaches them can, and anyone who subpoenas them can. The app feels private because it has a passcode and a calm font. That’s not the same thing.
”Encrypted” is doing a lot of quiet work
Almost every app says it encrypts your data. The word hides an important fork.
Encrypted in transit / at rest means your writing is scrambled while it travels to the server and while it sits on their disk — but the server itself holds the keys. It unlocks your entries to show them to you, which means it can unlock them for other reasons too. This is the common kind. It protects against an outside thief stealing the hard drive. It does not protect your words from the company holding them.
End-to-end encrypted means your entries are locked and unlocked on your device, with a key only you hold. What reaches the server is a blob of nonsense it cannot read — and has no way to read, even if it wanted to, even if it were forced to. The company is structurally unable to see your journal. That’s the version that actually matches what a journal is supposed to be.
How to tell which one you’re using
You don’t need to read the cryptography. Ask one practical question:
- “If I forget my password, can they email me my entries?” If yes, they can read your entries. There’s no way around it — recoverable-by-them means readable-by-them.
That single test cuts through most marketing. Convenience and true privacy trade off here, and a lot of apps quietly pick convenience for you.
Where slowbloom lands
slowbloom is end-to-end encrypted. Your entries and photos are locked on your device before they ever leave it, and we hold no key that can open them. Your time capsules stay sealed — even to us — until the day they bloom. The optional AI companion is off by default and runs in the EU when you turn it on. Friends can see that you wrote; they can never see what.
The practical upshot isn’t a feature list. It’s that you can write the thing you wouldn’t put anywhere else, and be right to trust that it stays yours.
Open slowbloom and write like the only reader is you — because, by design, it is.