What your own entries seem to show — worked out from your data, never invented, and labelled by how much evidence sits behind each one.
Ask your journal
Questions are answered from retrieved entries and computed statistics, with the evidence shown.
Search and statistics run privately on this device. To write the final answer, only the question, derived information, and source records shown in the privacy preview are sent to Anthropic. No other journal entries are uploaded.
Trends
How one thing has moved, and whether it moves with another.
Compare with
Settings
Journal and check-in
Reminder
Evening nudge
A gentle “How was your day?” shown when you open the app after this time without an entry.
Calendar
Weeks start on
Changes how the Journal calendar is laid out. It does not move any entry.
Appearance and reading
Journal display
Show journal summary tiles
Shows the colourful summary cards beneath the calendar in Journal. Select a card to reveal more detail.
AI and privacyBackup, import, recovery, and conflicts needs attention
Export as JSON
Complete restore backup, including entries, notes, recovery records, insight history, and explicitly saved AI narrative memories.
Export encrypted backup
Passphrase-protected complete Ledger backup. Losing the passphrase means losing access to it.
Export as Markdown
A readable archive of entries and occasional notes.
Print archive
A cleanly typeset copy of your whole journal — use Save as PDF for a yearbook.
Export daily fields as CSV
Song of the day and structured daily-entry numbers, for spreadsheets.
Bring data in
Import Ledger backup
Preview a backup, then merge safely or replace after confirmation.
Import a Garmin Connect CSV
Fills in matching daily numbers such as steps and sleep. Only fields you already track are touched, and your writing is never changed.
AccountDevelopment-only options
What Ledger can and cannot see
Your writing is encrypted before it leaves this device
Entries, notes, letters and drafts are encrypted in your browser with a key derived from your password. The server stores the result and cannot read any of it. Nobody at Ledger can open your journal, and there is no way for us to recover it if you lose both your password and your recovery code.
The server does know some things
Your email address, when you signed in, and roughly how many records you have and when they changed. It has to, to sync them. It never sees what any of them say.
AI requests are the one time text leaves
When you ask a question, request a reflection, or explicitly create a narrative memory, the entries you selected are decrypted here and sent to Anthropic. Narrative-memory creation always shows a privacy preview and saves only the returned prose as encrypted user data; ordinary Ask answers and reflections are not saved.
There is no tracking
No analytics, no advertising, no third-party scripts. Like any website, the server that hosts Ledger records ordinary request logs — an address, a time, a path — and those cannot reveal anything about your entries.