Optional subscription
Leaflog+
Automatic end-to-end encrypted backups of your journal.
Automatic backup of your journal
End-to-end encrypted with a key only you hold
Restore everything on a new iPhone
Recovery code if you lose your devices
End-to-end encrypted
We cannot read your journal.
Before anything leaves your device, it is encrypted with AES-256-GCM using keys generated on your device. Those keys never leave your devices except in encrypted form, protected by your recovery code or your iCloud Keychain. Leaflog's servers store only ciphertext and have no way to decrypt it.
There is no password reset and no support-assisted recovery: if you lose your devices and your recovery code, your backup is unreadable by anyone, including us.
What the server holds
Your encrypted (ciphertext) backup blobs
Their sizes and timestamps
A keyed hash of your Apple account identifier
Your subscription state
Nothing else
No email address, no name
No device names
No IP address retention beyond short-lived rate-limit windows
No analytics, no advertising, no third-party SDKs
Restore and recovery
Two ways back in. No third.
iCloud Keychain
Your key is stored in iCloud Keychain, so a new iPhone signed in to the same Apple account can restore without typing anything.
Recovery code
Shown once when you enroll. Keep it somewhere safe; it is the only other way to unlock your backup if your devices are gone.
If you lapse
Your journal stays fully usable without Leaflog+. Encrypted backups are kept for 90 days so you can come back or restore, then permanently deleted. Delete your account anytime from Settings → Leaflog+ → Account.