Candor is a private journal with an AI brilliant enough to be useful — and architected so it can never read you. Encrypted on your device. Intelligence on your device. Yours for life.
You don't want a paper notebook your kids might find. You don't want a cloud journal that, somewhere in its terms of service, reserves the right to be acquired. And you definitely don't want to paste the worst week of your year into a chatbot trained on a hundred million strangers.
So you stopped. Or you only write the safe version. Or you keep meaning to start again.
The problem was never the writing. The problem was that no journal had earned the right to hold what you actually have to say.
Every entry — typed, spoken, photographed — is encrypted on your device the moment it lands. The AI that helps you reflect runs on your phone, not in someone else's cloud. There is no server reading your text. There is no model training on your life. There is a vault, a key, and you.
Write honestly. Get the intelligence anyway.
One encrypted vault format. Same brand, same architecture, tuned to each platform's strengths. Your archive moves with you.
On-device Gemma 4 via Google's LiteRT-LM. Per-record AES-256-GCM, SQLCipher full-database encryption. Auto-encrypted Google Drive backups.
Apple MLX on the Metal GPU — Gemma or Llama, your pick. XChaCha20-Poly1305, Face ID + Secure Enclave. End-to-end encrypted iCloud sync.
Per-record authenticated encryption. Full-database encryption underneath. Master key wrapped by your device's Secure Enclave / Keystore, unlocked by your biometric. We don't have a "we won't read it" policy because we structurally can't.
A modern open-weight model runs on your device — for chat, summaries, reflections, action-item extraction. No cloud round-trip. No telemetry. No training. Verify it yourself in the on-device privacy receipt.
Snapshot recaps your week. Year-in-Reflection maps the whole year. On-This-Day surfaces what you were thinking about a year ago today. Every entry makes the next one more valuable.
One encrypted vault format. Auto-backed-up to your own Google Drive or iCloud. Exportable to plain markdown into Obsidian or anywhere else. The day you want to leave, you take everything with you.
A calm, paper-feeling place to write. A library that turns into a self-portrait. An AI hub that does the thinking work, on your phone.



Most journaling apps add AI by adding a cloud call. Candor adds AI by running a model on your device. The difference is structural, not marketing.
Read the full privacy policy: Candor for iOS · Candor for Android
Free for the journal itself — unlimited entries, on-device AI, voice transcription, photos, mood tracking, year-in-review. Pay only for the safety net: encrypted cloud backups, full-vault export, restore on any device.
Candor is the private AI journal from Belvantis. Encrypted on your device. Intelligence on your device. Yours for life.