Plume
Is Day One private?
How your journal is stored.
Short answer: yes, for most people. New Day One journals are end-to-end encrypted by default, and Day One says it cannot read them. The longer answer has a few edges: older journals, lost keys, plain exports, and AI features. Here is how it works, what it costs, and how it compares with Apple Journal and Plume.
How Day One stores your journal
Day One keeps your entries on your device. Sync is optional, and it runs through Day One's own service, which needs a Day One account. Multi-device sync is a paid feature. Day One's backup and sync guide lays out the options.
When sync is on, the question becomes what the server can see. For journals created in version 4.2 or later, the answer is: not the content. Day One encrypts entries and media on your device before they are uploaded. In its own words, your journal data “cannot be read by our servers or by Day One employees.” The key is held on your device and can optionally be backed up to iCloud.
That is real engineering, and it deserves credit. Day One is a mature, carefully built journal app.
Four details worth knowing
End-to-end encryption answers the main question. These are the edges around it.
Older journals stay as they were
Journals created before end-to-end encryption use Day One's standard encryption. Day One says there is currently no way to convert them. You would need to create a new journal and move entries over.
Lose the key, lose the sync copy
Day One never has your private key. If you lose it and have no backup, your synced journal cannot be decrypted. That is the price of the design, and it is the right one.
Exports are plain
Text and JSON exports are not encrypted. Wherever you save them, treat them like the journal itself.
AI features are a separate question
The Gold plan adds AI features such as Daily Chat and Go Deeper. How those requests are processed is not covered in the encryption FAQ. Check Day One's docs on how AI requests are handled before you use them on sensitive entries.
Is Day One secure?
Day One commissioned an independent review of its end-to-end encryption by the security firm nVisium, and says it has addressed the issues that review found. That is more than many journal apps can show.
Security also depends on you. A journal is only as safe as the phone it sits on. Use a strong device passcode, keep the encryption key backed up, and store exports carefully. For a broader look at what makes a journal app private, see our guide to local-first journaling apps.
What Day One costs
Prices from Day One's pricing guide, September 2026. All tiers include end-to-end encryption.
| Plan | Price (US) | Sync | What it adds |
|---|---|---|---|
| Basic | Free | No multi-device sync | Unlimited journals and entries, 1 photo per entry, export |
| Silver | $49.99/year | Yes | Up to 30 media per entry, audio, video, drawing |
| Gold | $74.99/year | Yes | AI features: Daily Chat, Entry Highlights, Go Deeper, summaries |
If the subscription is the sticking point rather than privacy, our list of Day One alternatives without a subscription compares the costs over five years.
Day One vs Apple Journal vs Plume
Three private journal apps, three different trust models. Published by the makers of Plume, so read the Plume column with that in mind.
| Day One | Apple Journal | Plume | |
|---|---|---|---|
| Account needed | Day One account to sync | Apple Account for iCloud | None |
| Sync | Day One service, paid plans | iCloud | Optional iCloud, off by default |
| Sync encryption | End-to-end for new journals | End-to-end in iCloud | Encrypted on device with your passphrase before upload |
| App lock | Yes | Face ID, Touch ID, passcode | Face ID, Touch ID, passcode |
| Export | JSON, text, PDF | Export and PDF printing | Plain text and JSON, always |
| AI | Gold plan | On-device suggestions | Off by default, on-device, local, or your key |
| Platforms | iOS, Mac, Android, web | iPhone, iPad, Mac | iPhone, iPad, Mac |
Sources: Apple iCloud data security, Apple Journal export, Day One encryption FAQ.
So, should you stay?
Stay with Day One if
You journal across Android and Apple devices, use the web app, rely on rich media, or want AI built in. Its encryption is solid, and the subscription buys ongoing work.
Look elsewhere if
You do not want an account at all, you would rather not pay yearly for sync, or you want AI to stay off your entries unless you choose otherwise.
Plume is one option in the second group. No account. Your journal lives on your device. Sync is optional, and entries are encrypted with your own passphrase before they reach iCloud. Export works at any time, including after the 21 writing-day trial, when the app goes read-only rather than locking you out. It also imports Day One JSON with a preview step. The Plume vs Day One comparison and how Plume's privacy works have the details.
Frequently asked questions
Is Day One journal private?
For most people, yes. Since version 4.2, new Day One journals use end-to-end encryption by default, and Day One says it cannot read that content. Older journals created with standard encryption cannot be converted, and exports are not encrypted. Syncing requires a Day One account.
Is Day One secure?
Day One's end-to-end encryption was reviewed by the security firm nVisium, and Day One says it addressed the issues found. The encryption key lives on your device and can be backed up to iCloud. If you lose the key, synced journals cannot be decrypted. No app is secure on an unlocked phone, so your device passcode matters too.
Can Day One employees read my journal?
Not for end-to-end encrypted journals. Day One states that its servers and employees cannot read that data. For journals created before end-to-end encryption, and for any features that process entries in the cloud, check Day One's documentation for how that data is handled.
How much does Day One cost?
As of September 2026, Day One Basic is free with no multi-device sync and one photo per entry. Silver is $49.99 a year and adds sync and more media. Gold is $74.99 a year and adds AI features such as Daily Chat and Entry Highlights. Prices can vary by region.
Day One vs Apple Journal: which is more private?
Both use end-to-end encryption for synced entries. Apple Journal syncs through your Apple Account and iCloud and is free. Day One syncs through a Day One account and needs a paid plan to sync. The bigger differences are platforms, features, and whose account holds your journal.
Can I move my Day One journal to another app?
Yes. Export a JSON archive from Day One. Plume includes a Day One JSON importer with a preview step, so you can check entries before they are added. Keep the exported file somewhere safe, since exports are not encrypted.
A journal with
no account at all.
Your entries stay on your device. 21 writing days free, then read-only. Never locked out.