Journal

Journal is an evening ritual: write a few lines about the day, attach one photo if you like, and get a letter grade and a short note back. It is the most private thing on the domain, so it lives in its own app with its own lock rather than inside Health, where it started.

Nothing in it is readable at rest. The page you see is the only place an entry is ever shown in the clear.

• The grade reveal

  A breathing ring while the grader reads, then the letter flips in and the card glows. An A gets confetti; with reduced motion turned on, nothing moves.

• Narration that stays home

  Speak instead of type. A speech model on hardware at home writes it out and the audio is deleted. The browser's own dictation is not offered, because it sends the recording to a cloud service.

• History and trends

  Every entry with its photo and grade, a GPA-style average, the best day, the streak and the writing rhythm.

• A PIN on top of the sign-in

  Nothing loads until the PIN is entered, and the journal locks itself again when the tab goes idle or into the background.

• A gentle nudge

  An evening reminder if the day has no entry yet. It asks only whether one exists, never what it says.

Encrypted at rest from day one. Every entry, grade note and photo is sealed with AES-256-GCM under a key that belongs to one person, and those keys are wrapped by a master key kept apart from the app's data and out of every backup. Dates and letter grades stay plain, so the streak, the trend and the reminder work without opening anything.

The grade is the one time an entry leaves the app: it goes to Claude, with a model on hardware at home as the fallback, and the notification that follows names the day, never the words. Logs keep dates and counts only, and the page loads no third-party scripts and no analytics.