Plume was built with one non-negotiable principle: your private thoughts stay private. Here's exactly how we protect your privacy.
Plume has zero access to your journal. Not "limited access" or "encrypted access" — absolutely zero access. We built Plume so that it's technically impossible for us or anyone else to read your entries.
Your journal entries, thoughts, memories, and personal reflections never leave your device unless you explicitly choose to export them. There are no servers, no cloud syncing (unless you set it up yourself), and no way for anyone to access your data remotely.
All your journal entries are stored locally in a SQLite database on your Mac, iPad, or iPhone. This database never leaves your device unless you explicitly export it.
If you want to back up your journal or transfer it to another device, you can export your data. These exports are encrypted to protect your privacy:
We use CloudKit with encrypted syncs to keep your journal seamlessly updated across all your Apple devices:
Here's a complete list of things Plume absolutely does not do:
We operate under the principle: if we don't collect it, we can't leak it, lose it, or be forced to hand it over.
With Plume, you have complete control:
We're committed to being transparent about how Plume works and how we protect your privacy. If you have any questions or concerns, we're here to help:
Your trust matters to us, and we take privacy seriously — not as a marketing point, but as the foundation of how we build software.
Last updated: October 2025
This privacy policy reflects our permanent commitment to user privacy.