Skip to content
guides · 4 min read

Private AI Journaling: Thinking Out Loud Without an Audience

Journaling with a model that responds is genuinely useful — but only if the space is actually private. How it works, how to set it up, and where the limits are.

Journaling works. That is one of the better-supported findings in the psychology of writing: putting difficult experience into structured language reliably helps people process it.

What journaling has never had is a response. You write, you close the notebook, and the thinking stops where you left it. A language model changes that — it can ask the follow-up question, notice the thing you circled twice, and push back on the story you’re telling yourself.

It also introduces an obvious problem, which is that a journal is the single most private thing most people write.

This article sits under What People Actually Use Private AI For.


Why privacy isn’t a nice-to-have here

Every other AI use case degrades gracefully without privacy. You edit yourself a bit, the answer gets a bit worse, life goes on.

Journaling doesn’t degrade. It breaks.

The entire mechanism depends on honesty. The moment you’re aware of a possible reader — even a hypothetical, well-behaved, policy-bound one — the writing changes. You explain instead of admitting. You justify. You leave out the part that makes you look bad, which is reliably the part worth writing about.

This isn’t paranoia; it’s how writing works. Any writer will tell you a private draft and a draft-that-might-be-read are different documents, produced by different parts of the brain. A journal that is performed is just autobiography, and autobiography doesn’t help you think.

So privacy isn’t a feature you’d like to have. It is the precondition for the thing working at all — which is why where the model runs matters more here than in almost any other use case.


What a model is actually good at here

Set expectations correctly and this is genuinely valuable. Set them wrong and it’s a chatbot telling you your feelings are valid.

Asking the next question. The most useful thing by a distance. You write six paragraphs about a work situation and the model asks “what would need to be true for you to stay?” — the question you’d been steering around.

Noticing patterns. With a project’s accumulated context, a model can point out that the same tension has come up repeatedly under different headings.

Forcing articulation. Half the benefit arrives before the model responds. Explaining a situation clearly enough to be understood is itself the work.

Reframing. “How would you describe this if it had happened to a friend?” Simple, effective, and easy to forget to ask yourself.

Structure on request. Turning a tangle into a list of the actual decisions.

Being unbothered. You can write the same worry on eleven consecutive nights. A model doesn’t get tired of you, and it doesn’t need managing — which is different from a friend, and occasionally exactly what’s needed.


What it is not

Plainly, because this matters.

It is not a therapist. No clinical training, no duty of care, no ability to recognise deterioration, no capacity to intervene. It cannot tell the difference between a bad week and something serious. If you are struggling, talk to a professional. A journal is a good companion to that, not a substitute for it.

It is not a source of truth about you. It responds to what you wrote, and it tends toward agreement. If you describe a situation unfairly, it will usually accept your framing. It is a mirror with a vocabulary, not an objective observer.

It is not a memory. Models are prone to affirmation. “That sounds really difficult” is not insight. Set up the framing so it asks rather than soothes — see below.


Setting it up

The default behaviour of most models is to be supportive and give advice, which is close to useless for journaling. A dedicated project with a system prompt fixes this.

In Cloaked, a project carries its own system prompt and its own conversations, all stored on-device. Something like:

You are helping me think, not advising me. When I write a journal entry:

- Ask one or two questions that get at what I'm avoiding.
- Point out patterns and contradictions in what I've written.
- Do not reassure me or tell me my feelings are valid.
- Do not offer solutions unless I ask for them.
- Keep responses under 150 words.
- If I seem to be describing something serious, say so directly.

That last line matters. The instruction to not reassure shouldn’t extend to ignoring something that needs attention.

Choosing a model. Journaling entries are usually a few hundred words with no need for hard reasoning, so the default is well suited. Qwen 3.5 0.8B at 622MB is fast enough that responses feel conversational and capable enough to ask a decent question; step up to Qwen 3.5 2B if your device has 6GB or more and you want sharper follow-ups. Turn thinking mode off; it adds latency without adding much here.

Context. Long journaling projects will eventually exceed the context window. Rather than one endless thread, start a new conversation per entry or per week. The project’s system prompt carries the framing across all of them.


Patterns that work

The evening dump. Write whatever’s in your head, unedited. Ask: “what am I actually worried about here?”

The decision thread. One conversation per decision. Return to it as thinking develops. Ask the model to summarize the state of the argument.

The pre-mortem. Before something difficult: “this conversation goes badly — why?”

The retrospective. After something difficult: describe what happened, then ask what you’d do differently.

The pattern check. Periodically paste several weeks of entries and ask what keeps recurring. Often uncomfortable, usually the most valuable.

Voice entries. On-device speech recognition means you can talk rather than type, which for many people produces more honest material — it’s harder to self-edit while speaking.


The test

Here’s how to tell whether your setup is right.

Write an entry about the thing you’d least want anyone to read. Not a dramatic secret — just the ordinary petty, resentful, frightened, or embarrassing thought you’d normally leave out.

If you hesitated, the setup is wrong. Not because you’re doing it badly, but because some part of you correctly assessed the risk of putting that in a place it could be retrieved from.

With a model running on your device, in airplane mode, with no account and no server — the hesitation has nothing to attach to. That’s the point. AI Apps That Don’t Collect Your Data covers how to verify that for yourself rather than take it on trust.


Download Cloaked on the App Store — projects, conversations, and memory all stay on your device, with no account and no server to store them.

Frequently asked questions

Is AI journaling actually useful?

For many people, yes. The value is in articulation — explaining a situation clearly enough for a model to respond forces you to structure your own thinking. The responses help most when they ask a question you had avoided rather than offering advice.

Is it safe to journal with an AI?

It depends entirely on where the model runs. With a cloud assistant your entries are transmitted and retained under a policy that can change. With an on-device model, entries are processed locally and never transmitted, which is the only version that makes complete honesty reasonable.

Can AI journaling replace therapy?

No. A language model is not a therapist, has no clinical training, no duty of care, and no ability to recognise when someone needs real help. It is a thinking aid. If you are struggling, speak to a professional — and use a journal alongside that, not instead of it.

How do I set up a journaling workflow?

Create a dedicated project with a system prompt describing how you want the model to respond — usually asking questions rather than giving advice. Keep entries in that project so the framing persists. In Cloaked, projects carry their own system prompt and stay on-device.