Before writing sensitive details, check who can open the journal, where entries are stored, what leaves the device, and what deletion actually removes. If an answer is unclear, start with a brief, non-identifying note while you find out. You can record a useful observation without recording every private detail.
Check six separate questions
- Who can open it? Consider people who know your device passcode, use a shared computer, or can access another signed-in device. Check whether the app has its own lock and what happens after you leave it open.
- Where is the entry stored? Look for a clear explanation of device storage, account storage, syncing, and backups. These are separate features. A login screen or an app lock does not answer the storage question.
- What does this particular feature send? A written journal, voice transcription, community post, and AI conversation can have different data flows within one app. Read the explanation for the feature you plan to use.
- Who is the audience? Check the destination before posting or sharing an entry. Avoid assuming that a small group, a private profile, or a pseudonym prevents another person from copying it.
- What else appears in the note? Names, attached photos, locations, and screenshots may identify other people as well as you. Include them only if they serve a clear purpose you are comfortable with.
- How can you remove it? Distinguish deleting one entry, deleting an account, removing an app, and cancelling a subscription. Check whether backups or shared copies are treated differently.
Use device tools as one piece of evidence
Apple's App Privacy Report shows permission access and contacted domains after you enable it. It can help you investigate an app's activity; a list of domains alone does not establish which information was sent or how long a provider keeps it. See Apple's App Privacy Report explanation.
Apple also documents locking, syncing, and backups for its own Journal app. That is a useful example of why those questions need separate answers. Those protections describe Apple Journal; they do not establish the protections of Unhook or another journal. See Apple's Journal protection guide.
Apply the checklist to Unhook
Read the Unhook Privacy Policy before entering sensitive information. It describes service providers and states that messages sent to Lumina are transmitted to OpenAI for processing. A policy explains the provider's stated practices; it is not an independent technical audit or a guarantee that every feature keeps data only on your phone.
Review the account and data-deletion guidance separately. The account-deletion confirmation explains that community posts and messages may remain under an anonymous label. Do not use an account-deletion option on the assumption that it erases every copy of something you shared.
A privacy decision you can write down
Copy these prompts into a place you already trust:
- My purpose for this journal is:
- The smallest amount of detail I need is:
- People who can access my device or account are:
- What I understand about storage and backups is:
- What I still need the provider to explain is:
- Details I will leave out are:
For example, “I reached for my phone after a difficult conversation; tomorrow I want a short walk first” may preserve the observation without names or a transcript. Once you are comfortable with your choice of journal, use the two-minute journal template to keep entries focused.
Sources and further reading
- Apple: About App Privacy Report
- Apple: Protect your journal entries on iPhone
- Unhook Privacy Policy
- Unhook Support: account and data deletion
This article is an educational resource from the Unhook product team, not personalized medical advice. Examples and worksheets are illustrative. Read our content standards.



