Privacy
What we do with your journal. And what we do not claim.
A private journal is only ever confided to someone specific. Here are the facts, including the ones that do not flatter us.
What is true
The account is optional
Nacre installs and runs entirely without an account. In that mode your pages never leave your phone: there is nothing to intercept because nothing is sent.
No trackers, no ads
No analytics, no ad SDK, no third-party audience measurement, no data sold. Nacre has no economic interest in what you write — you pay for the app, not an advertiser.
Locked on the device
Face ID, Touch ID or a passcode, required on open. Content never flashes on screen before the lock appears.
The AI starts switched off
Chapters are the only feature that sends text anywhere, and they are off by default. If you enable them, your entries are passed to Anthropic to write the narrative, and you can switch it off whenever you like.
Your data leaves freely
Export to Markdown, JSON, TXT from the settings: free, complete, links between pages, quests and people included. Leaving has to be easy, otherwise staying means nothing.
Deleting means deleting
The trash holds for 30 days, then erases permanently — attachments included. Deleting your account removes the content attached to it.
What we do not claim
Plenty of journal apps write “end-to-end encrypted” without it being true. Here is our situation, exactly.
This is not end-to-end encryption
If you enable sync, the text of your pages is encrypted at rest on the server — but with a key the server can read. So technically the operator could access it. That is a deliberate trade-off: it makes account recovery and Chapters possible. Real end-to-end is the V1 goal, and we will not announce it before we have it.
The local database is not separately encrypted
On your phone your pages are protected by the operating system’s sandbox and by the biometric lock, not by an extra layer of encryption. On an unlocked, compromised device, that would not be enough.
We need a minimum about you
If you create an account we store what is needed to identify you and sign you back in. No more. And if you use Nacre without an account, we hold nothing at all.
The documents that bind
This page explains. Those are the ones with contractual weight.
Start tonight.
A mood and two sentences is enough. In a year you will have a thread to reread.
Same app: the App Store listing is still titled Quest.