Disclosure: we run Goodnight Journal, one of the apps mentioned below. We have tried to be straight about the limits of online privacy, including ours.

The reason most people stop journaling is not time. It is the quiet awareness that someone could read it. And a journal you write defensively is not much of a journal — if you are editing yourself as you go, you have lost the only thing the habit is actually for.

So it is worth being precise about what "private" means when your journal lives online, because the word covers several very different arrangements.

Start with the honest baseline

A notebook in a locked drawer is more private than any hosted service. Nobody is pretending otherwise. The notebook has no password to leak, no company that could be acquired, and no server anyone could subpoena.

What it does have is a different risk: it is in your house, where the people most likely to read your diary live. That is not a small point. Plenty of people write far more honestly behind a password than they ever did in a notebook sitting on a shelf.

So the question is not "which is private" but "private from whom." Decide that first, because it changes the answer completely.

The four things that actually matter

1. Is it private by default, or private by setting?

This is the difference most people miss. Some apps keep everything private unless you deliberately publish an entry. Others have a visibility setting somewhere in preferences, which means one mis-tap or one changed default can expose years of writing at once.

Per-entry control is the safer design. If sharing is a decision you make one entry at a time, there is no single switch that can be wrong.

2. Who at the company can read your entries?

Most hosted journals are encrypted in transit and stored on servers the company administers. That means staff access is a policy question, not a mathematical one. If you want it to be mathematical, you need end-to-end encryption, where the service holds only ciphertext and cannot read your entries even if it wanted to.

Day One offers end-to-end encryption, and if that is a hard requirement for you, it should decide your choice on its own. Be aware of the trade: with true end-to-end encryption, losing your key usually means losing your journal. There is nobody who can recover it for you, because that is the point.

3. Can you get your entries out?

Privacy includes the ability to leave. A journal you cannot export is one you have lent to a company rather than written for yourself, and the risk is not hypothetical — Open Diary ran for roughly twenty-five years and still closed, giving members a window to download their diaries. Find the export button before you have three years of entries in there, not after.

4. Is it paid for by advertising?

If a journal is free and ad-supported, something is reading it well enough to target you. That may be fine for a notes app. For a diary it is a strange arrangement, and worth knowing about before you start.

What to actually do

Use a password you use nowhere else, and a password manager to hold it. Reused passwords are how most accounts are lost. Your journal deserves a unique one more than your newsletter signups do.

Turn on two-factor authentication if it is offered. It is the single highest-value thing you can do, and it takes two minutes. A leaked password alone then gets nobody in.

Lock the device, not just the account. This is the gap people leave open. An unlocked phone on a kitchen table defeats every server-side protection a service has. A screen lock does more for your journal's privacy than most app settings.

Check what a notification shows. A daily reminder that previews your last entry on the lock screen is a leak with a friendly face. Turn previews off for your journal app.

Be careful on shared and work machines. Browser profiles sync, autofill remembers, and a work laptop may be monitored by your employer entirely legitimately. If you journal at work, use your own device.

Export every so often. Twice a year, download your entries and put them somewhere you control. It protects you against a shutdown, a lockout and a billing lapse all at once.

Where Goodnight Journal fits

Entries are private by default, and sharing is a per-entry decision rather than an account-wide setting — which is the design point from the list above. You can keep years of writing entirely to yourself and still publish the one entry you want other people to see. There is no advertising sitting next to your diary.

To be straight about the limits: this is a hosted service, not an end-to-end encrypted vault. If your requirement is that no one but you could ever technically read your entries, Day One's encryption is the better fit and we would rather say so than oversell. What we offer instead is a private journal that does not have to be a lonely one.

Try Goodnight Journal

The part worth remembering

Privacy in a journal is not really a feature list. It is whether you can write the unflattering, frightened, unreasonable version of a thought without a quiet voice asking who might see it. If a setup gives you that, it is private enough. If it does not, no amount of encryption will fix the writing.

If you are weighing specific apps, our comparison of the main online journals covers how each handles this, the best free online journal apps covers the ad-supported question, and digital vs paper covers the notebook-in-a-drawer option properly.