A page, not a form
The app opens on today's blank page with the cursor already in it. No button to press first. It saves itself as you type, and a local save cannot fail for network reasons.
How was today?A private journal · encrypted end to end
A daily page for the things you would rather not leave lying around. Everything is encrypted on your device before it goes anywhere, so writing honestly costs you nothing.
Write · Archive · Search · Vault
The app opens on today's blank page with the cursor already in it. No button to press first. It saves itself as you type, and a local save cannot fail for network reasons.
How was today?Every day you wrote is a dot, brighter the more you wrote. No streaks, no scolding. Tap an empty day to write into it.
Full text, tags, photos, mood. It all happens on your device, because the server could not index what it cannot read even if we wanted it to.
#harbour#earlyhas photoLeave the app and it forgets the key, so getting back in costs a face or a passphrase — never an email. Previews can stay blurred until you ask.
Locked→UnlockedWhy you can be honest in it
Because this is your entry, as it sits in our database. Five columns: the date, so the app can order your journal and tell you whether you have written today — and then everything you actually wrote, sealed with a key that only exists on your device.
We can see that you journal, and roughly how much. Never what. It is a property of how the app is built, not a promise about our conduct.
What if I forget my passphrase? →No title column. No body column. No tags, no mood, no photos.
They are all inside the ciphertext.
Worth knowing up front
There is no “forgot password” here, because there is nothing on the server that could perform one. You get a passphrase you choose and a recovery code we show you exactly once. Either one opens the journal.
Lose both and the entries are gone — not recoverable by you, not by us. That is the same sentence as “nobody can read your journal”, read from the other end. Keep the code on paper, somewhere you keep a passport.
Door one
copper lantern drifting
Your passphrase. Stretched 600,000 rounds before it becomes a key, which is why unlocking pauses for a moment — it costs an attacker the same, per guess.
Door two · shown once
Your recovery code. We keep no copy, anywhere. You can issue a fresh one any time you still have the passphrase.
A third, optional door: Face ID or a fingerprint, wrapped on that one device and never sent anywhere.
Install
Open soulswap.app, add it to your home screen, and it behaves like any other app — including notifications and its own icon.
Offline
Writes land locally first and always succeed — on a plane, in a basement, with the server on fire. Syncing is just a backup that happens later.
Voice
The speech model runs on your device. The audio never leaves it — the same bargain as the entries themselves.
Leaving
One encrypted file your passphrase opens, or plain Markdown if you would rather. No export queue, no waiting for an email.
Takes about a minute to set up: an email to sync between devices, a passphrase only you know, and a code on paper.
No card · no trial · nothing to cancel