Your entries are private
Everything you write is locked on your phone before it leaves. Only you and your partner can open it. Not us, not anyone else. Even if our servers were stolen tomorrow, your entries would stay locked.
When you write an entry, your phone scrambles it into a code that only you (and your partner, if you're paired) can unscramble. The scrambled version is what lives on our servers. The key that unscrambles it lives only on your phone.
For the longer explanation, see How your privacy works.
What's locked
- The words you write
- The feeling you picked
- The category
- How intense it was
- Your partner's name, love language, attachment style, and profile photo
What we can see
- That you wrote an entry (an anonymous ID, the week it belongs to, whether it was marked shared)
- The time it was created
- That you have an account at all
We can't see what you wrote, what you felt, or anything about the content.
What this means for you
- You can write whatever's true without worrying about a third party reading it. There's no "Open Heart support team" with a window into your journal.
- A data breach can't expose your entries. What's on our servers is gibberish without your key.
- A legal demand for your content can't surface anything readable — we don't have anything readable to hand over.
- Losing your phone without a recovery phrase means losing your past entries. This is the cost. We can't get them back for you. It's why we ask you to save a recovery phrase.
Your partner sees what you choose to share
Each entry has a privacy level:
- Shared — included in the next reveal. Your partner sees it when you both mark ready.
- Private — kept on your device, never goes anywhere. Your partner never sees it.
- Unsend — exists for one minute, then disappears. Useful for venting.
Privacy is set per entry. You're never locked into one mode for the whole week.
Related
Read this page as plain markdown: /docs/features/end-to-end-encryption.md