Day One

What this pass recorded. A private journal is the single most sensitive text a person produces - it is written precisely because it is not for anyone else - and Day One is a journaling app that syncs to cloud storage. The question that determines everything is whether sync is end-to-end encrypted and whether it is on by default, since encryption the user has to find and enable protects only the users who went looking. Day One has historically offered end-to-end encryption, which is genuinely more than most apps in this tab provide. Nothing confirmed this pass; verify current default settings before relying on this.

• Severity
• Evidence tierUnassigned
• Claims confirmed
• Last verified2026-08-04

Primary source. None recorded — Unverified - heuristic first draft.

Arbitration

Not independently confirmed this pass — standard binding arbitration + class action waiver expected.

Data sharing

Not independently confirmed this pass with a specific named lawsuit or breach. A journaling app (owned by Automattic, also owner of WordPress.com/Tumblr) storing potentially highly personal diary entries; Day One's current privacy policy states that all new journal entries are end-to-end encrypted, while owners of older entries are encouraged to enable it manually (the policy elsewhere still describes E2EE as an option, so confirm in-app defaults).

Contacts

Privacy contact. Not recorded.

Legal notice. Not verified this pass. If publicly traded: SEC Form 10-K cover page gives the official corporate address; the Secretary of State business-entity search in the state of incorporation gives the registered agent, which must accept service. If private: the state registered agent is usually the only reliable route.

Mailing address. Not recorded.