The most private journal for Mac.

A journal is only useful if you feel safe enough to be completely honest in it. The moment some part of you suspects a stranger might read a page, you start writing for that stranger instead of for yourself, and the whole point is lost. So I built Ember to be a fundamentally private journal app from the first line of code. I don't want to read your entries, and I didn't build the machinery that would let me.

No account, no server, nothing to breach

Most apps that promise privacy still ask you to make an account and still keep your data on their servers, then ask you to trust their policies. Ember removes the thing you would have to trust.

• No account. There is no sign-up, no email, no password protecting a profile somewhere. You just open the app and write.
• No central server. Your life's stories are not sitting in a database I operate. There is no pile of user journals to leak, subpoena, or sell, because that pile does not exist.
• The developer cannot see your entries. Not "won't," but cannot. I have no server-side copy of your writing and no key to one. Your words never reach me.

No AI reads a single word

The modern software industry increasingly wants to point a model at your private thoughts, to summarize your mood, prompt you, or "understand" you. Ember does none of that, ever. There are no automatic summaries, no sentiment scoring, no generated suggestions, and no chat that has quietly read your year.

Ember never reads, writes, summarizes, or suggests a single word. When people you're tending go quiet, Ember can resurface them beside your own last words to them, but it writes nothing for you and never tells you what to say. The blank page stays blank until you fill it.

Everything stays on your device

Your entries live locally on your Mac, stored as an open archive on your own drive. If you want your journal on more than one device, it syncs exclusively through your own Apple iCloud, with your account and your keys, the same private path your other Apple data already takes. Nothing routes through me.

In the interest of being completely straight with you: Ember collects anonymous product analytics tied to a random device id, the kind that tells me a button was tapped, never who tapped it. The content of your entries is strictly blocked from ever leaving your machine. What you write is not a data point. It is simply yours.

Privacy as a philosophy, not a feature

This isn't a checkbox on a marketing page. It is a philosophy of restraint that runs through the whole app. Ember does nothing on your behalf. It holds what you give it and shows it back, primitive and trustworthy, like a physical notebook tucked in a drawer.

The difference is that this notebook can quietly weave your people and stories together. Type @ to mention someone and the entry is linked to them forever. Group memories into Stories that span years. See your relationships as a living graph. All of that richness, and still not one word of it ever leaves your control. That is the version of private I actually wanted, and it is the only version worth building.