---
title: "Ember | The Most Private Journal App for Mac, iPhone & iPad"
description: "Ember is an intensely private journal for Mac, iPhone and iPad. No account, no Ember server, no AI reading your words. The developer cannot see your entries."
url: https://ember.mov/private-journal-app/
language: en
---

Ember • Journaling

# The most private journal for Mac, iPhone and iPad.

![A woman in a white dress sits on the grass in a meadow, reading a book, a fan beside her.](https://ember.mov/assets/art/morisot-reading.webp)

*Berthe Morisot, Reading, 1873*

A journal is only useful if you feel safe enough to be completely honest in it. The moment some part of you suspects a stranger might read a page, you start writing for that stranger instead of for yourself, and the whole point is lost. So I built Ember to be a fundamentally private journal app from the first line of code. I don't want to read your entries, and I didn't build the machinery that would let me.

## No account, no server, nothing to breach

Most apps that promise privacy still ask you to make an account and still keep your data on their servers, then ask you to trust their policies. Ember removes the thing you would have to trust.

- **No account.** There is no sign-up, no email, no password protecting a profile somewhere. You just open the app and write.
- **No central server.** Your life's stories are not sitting in a database I operate. There is no pile of user journals to leak, subpoena, or sell, because that pile does not exist.
- **The developer cannot see your entries.** Not "won't," but cannot. I have no server-side copy of your writing and no key to one. Your words never reach me.

## No AI reads a single word

The modern software industry increasingly wants to point a model at your private thoughts, to summarize your mood, prompt you, or "understand" you. Ember does none of that, ever. There are no automatic summaries, no sentiment scoring, no generated suggestions, and no chat that has quietly read your year.

No AI reads, writes, or summarizes your words. When people you're tending go quiet, Ember can resurface them beside your own last words to them, but it writes nothing for you and never tells you what to say. A blank page may offer one gentle question, in Ember's words or your own, and you can turn those off in Settings.

## Your journal lives on your device

Your entries live locally on your own device, and your backups are an open archive you can read without Ember. If you want your journal on your Mac, iPhone and iPad at once, Ember Plus syncs it through your own private iCloud, encrypted by Apple, the same path your other Apple data already takes. Nothing routes through me, and Ember never sees it.

In the interest of being completely straight with you: Ember collects anonymous product analytics tied to a random device id, the kind that tells me a button was tapped, never who tapped it. The content of your entries is strictly blocked from ever leaving your machine. What you write is not a data point. It is simply yours.

## Privacy as a philosophy, not a feature

This isn't a checkbox on a marketing page. It is a philosophy of restraint that runs through the whole app. Ember does nothing on your behalf. It holds what you give it and shows it back, primitive and trustworthy, like a physical notebook tucked in a drawer.

The difference is that this notebook can quietly weave your people and stories together. Type @ to mention someone and the entry is linked to them forever. Group memories into Stories that span years. See your relationships as a living graph. All of that richness, and still not one word of it ever leaves your control. That is the version of private I actually wanted, and it is the only version worth building.

### Ready to start writing?

Ember is a private life archive for your Mac, iPhone and iPad. Local-first, no lock-in, no AI, no noise.

[Download on the App Store](https://apps.apple.com/app/apple-store/id6775558241?pt=128905247&ct=site&mt=8)