Skip to content
The privacy moat

We can't read
your journal.

Most wellness apps treat journal text the same as any other data — synced, backed up, indexed, sometimes used for AI training. Morrow Self does not. Your entries stay on your phone and are never transmitted. Not for sync, not for backup, not for anything.

The privacy moat

A wellness app that can't read your journal.

Your entries are stored on your phone and never uploaded. Not for sync, not for backup, not for AI training. The app has no code that sends them anywhere, and you can check that yourself with airplane mode. Your account, your daily wins and tasks, and your points do sync, so they follow you across devices. Your writing does not.

Data
Morrow Self
Typical wellness app
  • Journal entriesNever syncSynced to their cloud
  • Voice recordingsNever collectedOften collected
  • AI trainingNever. Period.Frequently used
  • Journal timestampsOnly a session-done pingSynced with the entry
  • Account requiredOptionalRequired
Apple privacy nutrition labels: Data Not Collected for journal content, voice recordings, and message content.
Architecture

What stays. What syncs. What never leaves.

  • Journal text
    On your phone only
    Stored locally in the app's own storage on your phone. No backup to our servers, no iCloud upload, no Google Drive.
  • Voice journal recordings
    On your phone only
    Processed via on-device speech-to-text (expo-speech-recognition). Audio file lives in app sandbox. Never transmitted.
  • Journal session timestamps
    On your phone, except one ping
    What you wrote and how long you wrote for stay on the phone. Finishing a session does fire one analytics event, journal_done, with none of the writing attached, so the server learns that a session happened and when.
  • Wins, tasks and account data
    Synced to Supabase
    Your daily wins and tasks, your onboarding answers and preferences, and your points and streak stats. Used to keep your account consistent across devices.
  • AI prompts (Pro, opt-in)
    On your phone only
    Local LLM via llama.rn, running inside the app. No journal content is sent to it, or to any other model. You can disable AI prompts entirely.
  • Account email
    Synced to Supabase
    Optional. Apple Sign-In supports private relay. Account is only needed for cross-device streak sync.
On-device AI

The reflection AI runs on your phone.

The daily reflection question and the weekly recap are written by a small model that runs inside the app on your phone. Your journal text is never sent to it, or to any other model. The first-run onboarding is the one part that runs on our server, and it never sees your journal either.

The honest version of a wellness app.

Privacy-first only works if the free tier actually works. The 18 wins, the three journal sessions, and the streaks are all free, forever. No trial. No paywall behind the value.