a private journal app with no account and no servers

any journal app can call itself private. the word costs nothing to print on a landing page. what matters is whether the privacy is structural — built into where your words live and who can reach them — or just a promise made in good faith. before you trust an app with the things you would only tell a page, it is worth knowing which questions actually separate the two.

the questions that actually matter

privacy is not one feature. it is the answer to a handful of plain questions, and you can ask them of any journal app, including this one.

does it require an account?

an account is a copy of you on someone else’s system — an email, a password, a profile that ties your writing to your identity. a journal that makes you sign up has, by design, connected your entries to a name. the most private apps do not ask you to create anything. you open them and begin.

where does your data physically live?

there is a real difference between “in the cloud” and “on your device.” some apps keep your journal on their own servers; some keep it only on your phone; some sync through infrastructure you control, like your personal icloud. ask where the words actually sit when you close the app. if the answer is “our servers,” the company is holding your diary.

on-device-only is the most private arrangement, but it comes with a quiet cost: lose the phone and you lose the journal. syncing through your own icloud is the middle path — it gives you a backup and keeps your writing across your devices without handing a single word to the company that made the app. the point is not to fear the cloud. it is to know whose cloud it is.

can the company read your entries?

even with good intentions, a company that stores your writing in a form it can read can be asked to hand it over — by a subpoena, a breach, or a change of ownership. the question is not whether they would; it is whether they can. on-device storage, or end-to-end encryption through your own account, means the answer is simply no.

what does export look like?

a journal you cannot leave is not fully yours. check whether you can take everything out in a standard, openable format — not a screenshot, not a feature held behind another upgrade. real ownership means you can walk away with your words whenever you decide to.

what happens when you delete the app?

deleting should mean deleting. some apps leave copies on their servers long after the icon disappears from your phone. know in advance what remains, where it remains, and how to erase it for good.

how memento.sky answers them

memento.sky is a private journal of the people you meet, and it was built to answer those questions the structural way rather than the reassuring one.

there is no account. you never make one, because there is nothing to make — no email, no password, no profile. your journal lives on your device and syncs, if you want it to, through your own private icloud. the developer runs no servers that hold your entries and cannot read your diary. that is not a policy sentence; it is the architecture.

the usage analytics that do exist are pseudonymous — no name, no email, tied to no identity — and there are no ads and no sale of your data, ever. you can read exactly what that means in the privacy policy.

you can export everything as a zip whenever you like, and delete it all in one step. without icloud, deleting the app clears the sky — the words were only ever on your phone. it is a journal, not a network: nothing to broadcast, and no one holding a copy but you. what you choose to keep there — a people journal of the ones who mattered, or a commonplace book of the encounters worth remembering — stays between you and the page.

privacy, when it is real, is quiet: you should not have to think about it at all.