Encryption
How the encryption works
Entries, photos, voice notes and videos are stored on your phone in an encrypted database. The keys live in the device’s system key store and never leave it.
Your PIN is part of the key
The app does not store your PIN and cannot recover it. Without the PIN the diary cannot be decrypted, which is why the lock cannot be turned off. For quick unlocking you can turn on Face ID, Touch ID or fingerprint.
The diary closes when you leave it
As soon as the app goes to the background, the diary is closed. After several wrong PINs in a row the app pauses before the next attempt. On Android, screen protection is on by default: screenshots and screen recordings of the diary come out black. With TAEONIA Horizon you can also keep a log of access attempts on the device and, if you choose, have a front-camera photo taken after three wrong PINs. It is off by default, and the system camera indicator is not hidden.
Nothing is sent anywhere
The diary has no network client of its own, and the Android build does not ask for internet access. There is no account, no analytics and no advertising. Purchases of TAEONIA Horizon are handled by the App Store or Google Play; your entries are never part of them. The speech model — and on Android the photo search model — is downloaded by the App Store or Google Play only when you ask for it. On Android, the app asks the Play Store whether an update is available; on iPhone it does not. Photo metadata — location, EXIF, camera maker notes — is removed before a photo is stored.
What this does not protect against
Someone who has your unlocked phone and knows your PIN can read the diary. If you export entries to Markdown, Word or PDF, the file is not encrypted: outside the app it is protected only by wherever you keep it.