AES-256, encrypted on your device No servers No ads No sign-up

Old words, new light —
a corner kept only for you.

Capture sparks on iPhone, add half a line from your wrist, read slowly and refine on iPad, finish at your Mac.

AES-256 本地加密 没有服务器 没有广告 无需注册

温故以知新,藏思于一隅

iPhone 随手存灵感,Apple Watch 抬腕补半句,iPad 慢读细酌,Mac 伏案成文。

OffMemory home screen on iPhone — notes, streak and mood marks 密匣笔记 iPhone 首页:笔记列表、连续天数与心情标记
iPhone Quick notes随手记
OffMemory home screen on iPad, laid out for the bigger screen 密匣笔记 iPad 首页,为大屏重新排版
iPad Read it wide慢慢读
OffMemory quick capture on Apple Watch — note, mood and save to vault 密匣笔记 Apple Watch 抬腕快记:正文、心情与存入保险箱
Apple Watch On your wrist抬腕就写
OffMemory on Mac — three-pane window with sidebar, note list and editor 密匣笔记 Mac 版三栏窗口:目录、笔记列表与编辑器
Mac At your desk坐下来写

Free to download · One purchase covers iPhone, iPad and Mac · The Mac version is in App Store review

免费下载 · 一次买断,iPhone / iPad / Mac 通用

Real stories

Things you only dare to write down here

Not where you log what you had for lunch — where the things you had nowhere to say go.

真实的故事

有些话,只敢写在这里

这里不记今天吃了什么 —— 这里收着你没处可说的话。

A diagnosis, kept quiet

He never told his family.

The scan results came back on a Tuesday afternoon. He stood in the hospital corridor for ten minutes, folded the sheet into four and pushed it into his inside pocket. At dinner his wife asked why he was so late; he said a meeting. That night he opened OffMemory and wrote it down line by line — the date of the next scan, where it hurt today, whether he could still finish a bowl of rice. Then he locked it and put the phone face-down on the nightstand. He will tell them once the results are settled. By then, perhaps, he will be able to say it without his voice changing.

一个没说出口的诊断

他没告诉家里人。

复查报告是周二下午出的。他在医院走廊里站了十分钟,把那张纸折成四折,塞进内袋。回家吃饭时妻子问他怎么这么晚,他说开会。夜里他打开密匣,一句一句写下来:几号复查、今天哪里又疼、一碗饭还能不能吃完。写完锁上,把手机扣在床头柜上。他打算等结果定下来再说 —— 到那时候,也许他就能不动声色地把它说出口了。

Everything in one locked place

The passwords no one else knows.

Every card's PIN, where the spare key to the safe is kept, which account the first payment should come out of if he is no longer there — all of it in here. He never meant for anyone to read these lines, but he knows a day will come when someone has to. So he writes it properly: which bank, which branch, who to ask, which papers to bring. Then he locks it, the way you lock a promise that is not due yet.

所有重要东西,都锁在一个地方

那些谁也不知道的密码。

每张卡的密码、家里保险箱的备用钥匙藏在哪、如果哪天他不在了,第一笔钱该从哪个账户取 —— 全记在这里。他从没打算把这些字给谁看,但他知道总会有那么一天,有人需要它。所以他写得很清楚:哪家银行、哪个网点、找谁、带哪些材料。写完锁上,像锁一个还没到期的承诺。

Anything goes in

Whatever you can't post.

A status edited three times and never published. A letter to the person he was ten years ago. The night his daughter first said "mama" — four in the morning, and he cried harder than she did. None of it fits anywhere public: too long, too soft, too out of season. OffMemory doesn't ask. It keeps the words, and stays quiet.

什么都能写

凡是不敢发出来的。

一条改了三次、最后还是没发出去的状态;写给十年前那个自己的一封信;孩子第一次叫「妈妈」的那天 —— 其实是凌晨四点,他哭得比孩子还厉害。这些字在朋友圈里没有位置:太长、太软、太不合时宜。密匣不问这些,它只把字收好,然后闭嘴。

2 a.m.

Some things only get written at night.

What cannot be said in daylight queues itself up at two in the morning. He doesn't turn on the light. He drops the brightness as low as it goes and writes, line by line. There is no one to send it to and no one to explain it to — the moment the screen dims, he is already asleep. Reading it again the next day, the sentences look a little messy. Every one of them is true.

凌晨两点

有些事,只写在夜里。

白天说不出口的话,到了凌晨两点会自己排好队。他不开灯,把亮度调到最低,一句一句地写。写完不需要发给谁,也不需要向谁解释 —— 屏幕暗下去那一刻,他已经睡着了。第二天再看那一段,字有点乱,但每一句都是真的。

A hotel room

Phone face-down on the nightstand.

The room isn't his. Someone else's hotel name is printed on the key card, and he doesn't know the city outside the window. He writes two lines about tomorrow's meeting, then two lines he will never say in it — about the proposal he has to nod at, about wanting to resign. Neither line will ever have a third reader. In the morning he shows up on time, and keeps the two sets of sentences perfectly apart.

出差的酒店

手机扣在床头柜上。

房间不是他的,房卡上印着别人的酒店名字,窗外的城市他也不认识。他写了两句明天要谈的事,又写了两句绝不会在会议上说的话 —— 关于那个必须点头的方案,关于他其实想辞职。这两句都不会有第三个读者。第二天他照样准时出现在会议室,把两套话分得干干净净。

At home

A paper notebook anyone could flip open — no.

As a child she kept a paper diary under the mattress. Her mother found it and read it aloud to the whole family at dinner. She never used paper again. Now her son plays with her phone and the family shares one iPad — the password is the only door there is, not a polite "please don't open that", which no one has ever actually obeyed.

在家里

一本谁都能翻开的纸质本子,不行。

小时候她有一本纸质日记,藏在床垫底下,被母亲翻出来,在饭桌上一段一段念给全家听。从那天起她再没用过纸。现在孩子拿着她的手机玩,家人共用一台 iPad —— 密码是唯一那道门,不是一句「请别点开」的客气话。那句话,从来没有人真的听过。

Ten years on

Only the future you will understand.

Cloud drives shut down. Accounts lapse. Companies get acquired, formats expire. An encrypted backup on your own drive still opens in ten years — no one's approval needed, and no need to remember which email address you signed up with. He exports one every six months, keeps it on two drives, and leaves one at his parents' place. A time capsule, addressed to himself.

很多年后

只有未来那个你,才读得懂。

云盘会停服,账号会欠费,公司会被收购,格式会过期。而一份放在自己硬盘里的加密备份,十年后插上就能打开 —— 不需要谁的批准,也不用记得当年注册的是哪个邮箱。他每半年导一次,存两块硬盘,一块放在父母家。这是他寄给自己的时间胶囊。

A letter to future you

The mess you're in now — you'll laugh later.

That day he wrote down every worst case he could think of: if the interview went badly, if the savings didn't last the year, if she really left. Afterwards he felt like a fool — and locked it anyway. Three years later he found the entry again and sat at his desk laughing for a long time. Not because it was absurd. Because he had actually come through it.

写给十年后的自己

现在的狼狈,以后会笑出来。

那天他把能想到的最坏结果都写了下来:如果面试没过、如果存款撑不到年底、如果她真的走了。写完他觉得自己像个傻子,但还是锁好了。三年后他翻到这一段,坐在办公室里笑了很久 —— 不是因为当时有多可笑,是因为他发现自己真的走过来了。

For a child not born yet

By the time you arrive, I've already written a lot.

She started the week the test came back positive: how many times she was sick that day, which song was playing, how big that dot on the scan was. She wrote that she was frightened, and she wrote that she was absurdly happy — often one line apart. On his eighteenth birthday she plans to hand him this encrypted backup. The passphrase is his birthday. He will guess it.

写给还没出生的孩子

等你出生,我已经写了很多页。

验出两条线的那周她就开始写:今天吐了几次、当时在放哪首歌、B 超单上那个小点有多大。她写自己害怕,也写自己高兴得不像话,两种情绪常常只隔一行。她打算等他十八岁生日那天,把这份加密备份交到他手里。口令是他的生日 —— 他一定会猜到。

The day I was laid off

I didn't tell anyone I cried.

Called into a meeting ten minutes before the end of the day; by the time he came out his badge no longer worked. He sat in the convenience store downstairs until dark with a cardboard box beside him, bought a bottle of water and didn't drink it. In those three hours he wrote a few thousand words: how much was left on the mortgage, how to tell his family next month, what exactly he had done wrong. The next morning he was up at seven, on the third revision of his CV.

被裁的那天

我没告诉任何人我哭了。

下班前十分钟被叫进会议室,出来时门禁卡已经刷不开了。他抱着纸箱在楼下便利店坐到天黑,买了瓶水,一口没喝。那三个小时里他写了几千字:房贷还剩多少、下个月怎么跟家里说、自己到底哪里做错了。第二天他照样七点起床,把简历改到第三版。

Outside the therapist's office

Nobody knows I'm in therapy.

Every Wednesday at three she arrives ten minutes early, kills the engine and writes in the car: what she wants to bring up today, why last week's sentence still stings, whether she is any better. Then she locks it and walks upstairs. She has never mentioned the diary to her therapist either — some feelings, she says, have to go through paper once before they can be said out loud twice.

咨询室门外

看心理医生这件事,我没让任何人知道。

每周三下午三点,她提前十分钟到,把车熄了火,在车里写:今天想聊什么、上次那句话为什么还扎人、有没有好一点。写完锁上,再上楼。这本日记,她连咨询师都没提过 —— 她说,有些情绪得先在纸上过一遍,才能开口讲第二遍。

Why there is no cloud

The cloud is convenient.
It just is not yours.

We could sync. We chose not to — because every cloud sync adds one more party who could open your diary. Here is what that convenience would have cost you.

Shipping a sync button is not hard: one account, one database, one server-side key, live in a few weeks — and it would sell far better as a subscription. We didn't build it. A diary is the one kind of text where a second copy is the problem: it holds the sentences you haven't worked out yet, and a second copy is one more thing that can be requested, crawled or sold. So sync was replaced with an encrypted backup you carry yourself — the same data, still restorable on a new device, but nothing anyone can open for you.

为什么没有云

云端很方便。
但它不是你的。

同步不是做不到,是我们刻意不这么做 —— 不想让「你的日记」再多出一个能打开它的人。下面三件事,是「云同步」要你交出的代价。

做一个同步按钮并不难:一个账号、一个数据库、一份放在服务端的密钥,几周就能上线,改成订阅制还能卖得更贵。我们没做。因为日记偏偏是「多一份副本就全盘皆输」的那种文字 —— 里面是你还没想清楚的话,而多出来的那一份,就是一个可以被调取、被爬取、被转手的入口。所以我们宁可少做一个功能,把唯一的钥匙留在你手里:同步被换成了「你自己带走的加密备份」,同一份数据,换机照样能恢复,但没有任何一方能替你打开它。

01
A copy you cannot see

On a server, deleting usually means flagging a row. Your diary should not have a copy that only someone else's admin panel can see.

一份你看不见的副本

放在服务器上的东西,「删除」往往只是打个标记。你的日记不该有一份副本,只有别人的后台看得见。

02
An identity to hand over

An account means someone can establish that these words are yours. No account: nothing to request, nothing to expose.

一个可以被要求的身份

账号意味着有人能证明这些字是你写的。没有账号,就没有可以调取、也没有可以泄漏的东西。

03
A middleman to trust

Sync needs a relay. We replaced it with encrypted backups you carry yourself — Files, AirDrop, or your own drive.

一个必须信任的中间人

同步需要一个中转。我们把它换成你自己带走的加密备份 —— 交给「文件」、AirDrop,或者你自己的网盘。

OffMemory vs. a cloud diary app

密匣笔记 vs. 云端日记应用

OffMemory Typical cloud diary典型云端日记
Where your words live内容存放在哪 Only on your device只在你的设备上 On the vendor's servers在厂商服务器上
Sign-up required是否需要注册 None — no email, no sign-up不需要 —— 无邮箱、无注册 Sign-up and login需要注册与登录
Network access联网情况 Only for Apple's purchase仅 Apple 购买时 Required to sync同步必须联网
Encryption加密方式 AES-256 before it hits the disk写入磁盘前即 AES-256 Varies — often server-side only视情况而定,常仅服务端加密
Screenshot blocking笔记页截图拦截 Yes有 Rarely基本没有
Pricing收费方式 One-time purchase一次买断 Monthly / yearly subscription按月 / 按年订阅
Ads & analytics广告与埋点 None, ever完全没有 Common比较常见
Export your data导出自己的数据 3 formats, including plain Markdown三种格式,含可读 Markdown Often limited or paid常受限或需额外付费
If you forget your password忘记密码时 Security questions recover it, keeping every entry密保问题可救回,保留全部数据 Email reset — because they hold the data靠邮箱重置 —— 因为数据在他们手里

No one else can reset your password either. That is not a bug — it is the whole point. 其他人也无法重置你的密码。这不是缺陷 —— 这正是它存在的意义。

This is not a limitation. It is a decision. A diary is worth more when nobody else can be asked for it.

这不是技术做不到,是产品不该这么做。一本没有人能被要求交出来的日记,才更值得写。

1
Password密码 6+ characters, letters and numbers至少 6 位,含字母与数字
2
Face ID / Touch ID面容 ID / 触控 ID One glance to open抬眼即开,不必输密码
3
Background auto-lock后台自动上锁 Immediately, or after a delay you choose切回后台立即上锁,或按你设的延时
4
Screenshot blocking截图拦截 Note pages refuse to be captured笔记页禁止截屏与外录
Four layers of lock

Nothing gets out.
Nothing gets in.

Most diary apps protect one door. OffMemory stacks four — and none of them is optional. Even someone holding your unlocked phone has to get past all of them, in order.

1
PasswordAt least 6 characters with letters and numbers. Your password is never transmitted and never stored on a server — only a key derived from it lives in the iOS Keychain.
2
Face ID / Touch IDUnlock in a glance instead of typing, with a passcode-backed copy so it stays available after a restart.
3
Background auto-lockThe moment the app leaves the screen it can lock itself — immediately, or after a delay you set.
4
Screenshot blockingOpen a note and screenshots and screen recordings are refused by the system. What you write cannot be quietly copied out.
四层锁

什么都出不去,
什么也进不来。

大多数日记应用只守一道门。密匣笔记叠了四道 —— 而且没有一道是可选的。就算有人拿着你已解锁的手机,也要按顺序闯过全部四层。

1
密码至少 6 位,含字母与数字。密码从不被传输,也不存放在任何服务器上 —— 只有由它派生的密钥保存在 iOS 钥匙串里。
2
面容 ID / 触控 ID抬眼即开,不必每次手动输入。底层有一份系统口令副本,重启后依然可用。
3
后台自动上锁应用一旦离开屏幕就能自动上锁 —— 可以立即锁,也可以按你设定的延时锁。
4
截图拦截进入笔记页,系统层面的截屏与录屏都会被拒绝。你写下的话,没法被悄悄复制出去。
Everything inside完整功能

Every feature, in the open

No tiers, no locked-away extras. This is the whole app — from the four locks to the mood calendar to the cleanup guide.

所有功能,一次说清

没有分级、没有藏起来的付费项。这就是完整的功能清单 —— 从四层锁到心情日历,再到空间清理向导。

First, three things most diary apps don't do 先说三件别家不一定做的事

A backup with its own lock

Export one .sdbackup sealed with a passphrase you choose. It restores on a new phone, after a reinstall, even on your computer — a copy that leaves the app still opens for nobody but you.

备份也带锁

导出一个 .sdbackup,用你自己设的口令封好。换新手机、重装、甚至拷到电脑上都原样打开 —— 备份离开了 App,也还是只有你打得开。

A second password, a second room

Your other password opens a different diary entirely — its own notes, its own folders, invisible to the first. What stays behind is only ever behind the password you kept to yourself.

第二个密码,另一间房

用另一个密码进去,落到的是一本完全独立的日记:自己的笔记、自己的文件夹,和第一本彼此看不见。真正想收好的那些,永远只在你没说出口的那个密码后面。

One purchase, four devices

Jot it on iPhone, add a line from your wrist, read it wide on iPad, keep going at your desk — one purchase unlocks all four, and they are one family. Nothing moves between them behind your back: when you want your words on another device, export the passphrase-protected backup and open it there. Your diary travels when you say so.

一次买断,四端都在

iPhone 上随手记、抬腕补一句、iPad 上慢慢读、坐到桌前接着写 —— 一次买断,四端全部解锁,它们是一家人。四端之间不会背着你同步:想让哪一台也看到,就导出带口令的加密备份,在那一端打开。日记什么时候出门,由你决定。

∞ notes

No note limit

Write as much as you want, for as long as you want. The only ceiling is your device's free storage — and the app tells you exactly what is using it.

Encrypted backup that travels with you

Export an encrypted backup and bring every note, photo and mood back on a new iPhone — or right after reinstalling. Set a backup passphrase and the very same archive restores across devices. Your diary stops being tied to one phone, without ever being uploaded.

OffMemory backup and restore screen with encrypted archive

No cloud, no servers

There is no backend behind the app. No tracking, no analytics, no uploads, no attribution SDKs. Online or offline, it behaves identically.

AES-256, local only

Titles, bodies and images are encrypted with AES-256 before they touch the disk. The key is derived from your password with Argon2id and kept in the Keychain.

Four layers of lock

Password, Face ID / Touch ID, background auto-lock and screenshot blocking on note pages. Layered — and not optional.

On This Day

Open the app and it quietly shows what you wrote on this exact date in past years. The entries you had forgotten are the ones that turn out to matter most.

Mood marks & a writing calendar

Tag each entry with how you felt — happy, calm, sad or anxious — then revisit the year as a heatmap. See how many days you wrote, your longest streak, and how you were doing while you wrote them.

Full-text search

Search every title and every line of body text, with matching snippets highlighted. Filter by tag, then act on the results in bulk.

A gentle daily reminder

A local notification at the hour you choose — nothing leaves the device. Choose a night-time hour and it still appears, but arrives silently, so it never wakes you.

Three ways to export

An encrypted archive for moving devices, a plain .zip of readable Markdown plus images, or a plain .txt. Your writing is never held hostage.

A real Markdown editor

Headings, lists, quotes, coloured text and inline photos, from a toolbar that folds away when you just want to write. A live character count sits in the corner.

Folders, tags & favourites

Nest folders however you like, tag a note into several places at once, and star the entries you return to. Deleting a folder promotes its notes — it never deletes them.

Trash with a safety net

Deleted notes rest in Trash for a set number of days and can be restored in one tap. Nothing vanishes the moment you mis-tap.

Sort the way you think

By last edited, by date created, or by title A→Z. The choice is remembered, so your list looks the way you left it.

Storage you can see

See exactly what is using your space, then follow a three-step cleanup guide: save a safe backup first, empty the Trash, drop old backups.

OffMemory storage details and cleanup guide

Security questions that save you

Set up to eight security questions during setup. Answer them correctly and you can set a new password while keeping every single entry — no server, no reset link.

15 languages

English, Chinese (Simplified and Traditional), Japanese, Korean, German, French, Spanish, Brazilian Portuguese, Italian, Dutch, Polish, Turkish, Vietnamese and Russian.

Dark mode, made for late nights

A quiet dark theme that follows the system, or stays where you put it. Writing at 2 a.m. should not light up the room.

OffMemory dark mode home screen

One purchase, forever

Download free, then a single one-time purchase permanently unlocks writing. No subscription, no auto-renewal, no ads, no analytics, and your content is never monetised. Keeping a secret should not come with a monthly bill.

Rebuilt for iPad

Portrait and landscape, from the home screen to the editor, the calendar and the unlock page. See it in full below.

∞ 篇

没有篇数上限

想写多少就写多少,想写多久就写多久。唯一的限制是你设备的剩余空间 —— 而应用会明确告诉你空间被什么占用了。

加密备份,换机不丢

导出加密备份,换新 iPhone 或重装应用后,都能把每一篇笔记、图片与心情完整带回。设置备份口令后,同一份备份还能跨设备恢复 —— 你的日记不再被绑在一台手机上,也始终没有上传到任何地方。

密匣笔记加密备份与恢复界面

没有云端,也没有服务器

应用背后没有任何服务端。没有埋点、没有统计、没有上传、没有归因 SDK。联网与断网,它的行为完全一样。

AES-256 本地加密

标题、正文与图片在写入磁盘之前,就已用 AES-256 加密。密钥由你的密码经 Argon2id 派生,保存在系统钥匙串中。

四层锁

密码、面容 / 触控 ID、后台自动上锁,以及笔记页的截图拦截。层层叠加 —— 且没有一层是可选的。

那年今日

打开应用,它会安静地告诉你:往年今天,你写过什么。那些早已被你忘掉的句子,往往才是最重要的。

心情标记与书写日历

给每一篇记下当时的心情 —— 开心、平静、低落或焦虑 —— 再回到日历热力图上看这一年:写了多少天、最长连写了多久、写下那些字的时候你过得怎么样。

全文搜索

标题与正文全域搜索,命中的片段会高亮显示。还能按标签筛选,再对结果批量处理。

每日提醒,但不吵你

在你选定的时间发一条本地提醒 —— 数据不出设备。若你选的是深夜时段,提醒照常出现但静音送达,不会把你吵醒。

三种导出方式

加密归档用于换机迁移;明文 .zip 内含可读的 Markdown 与图片;另有纯文本 .txt 导出。你写的东西,永远不被挟持。

真正的 Markdown 编辑器

标题、列表、引用、彩色文字与插入图片,工具栏在你想专心写时可以收起。角落里有实时字数统计。

文件夹、标签与收藏

文件夹可以任意嵌套,一篇笔记能同时打上多个标签,常读的可以加星收藏。删除文件夹只会把笔记提上来,绝不会连笔记一起删掉。

有安全网的回收站

删除的笔记会先在回收站停留若干天,一键即可恢复。不会因为你手滑一下就永远消失。

按你的方式排序

按最后编辑、按创建时间,或按标题 A→Z。选择会被记住,列表永远保持你离开时的样子。

看得见的存储

明确显示空间被什么占用,并提供三步清理向导:先存一份安全备份、清空回收站、再删掉旧备份。

密匣笔记存储详情与空间清理向导

能救回你的密保问题

初始化时可设置最多 8 个密保问题。答对即可在保留全部数据的前提下设置新密码 —— 不需要服务器,也没有重置链接。

15 种语言

简体中文、繁体中文、英语、日语、韩语、德语、法语、西班牙语、巴西葡萄牙语、意大利语、荷兰语、波兰语、土耳其语、越南语与俄语。

深色模式,适合深夜

安静的深色主题,可跟随系统,也可以固定在你喜欢的那一种。凌晨两点写字,不该点亮整个房间。

密匣笔记深色模式首页

一次买断,永久使用

免费下载,一次购买即永久解锁书写。没有订阅、没有自动续费、没有广告、没有埋点,你的内容也永远不会被当成商品。守护秘密这件事,不该按月收费。

为 iPad 重新设计

横竖屏皆宜,从首页到编辑器、日历与解锁页全部重新排版。下面有完整截图。

Encrypted backup

Your diary should not die with your phone

For a long time, keeping everything local had one real weakness: your diary lived on exactly one device. An encrypted backup closes that gap — export a passphrase-protected .sdbackup that restores on a new device, after a reinstall, even on your computer, without ever adding a door anyone else could open.

Export a single encrypted .sdbackup file from Settings → Data
Set a backup passphrase, and the same file restores on a different iPhone — or after reinstalling
Notes, folders, tags and images all come back — imported items are added, never overwritten
The archive stays encrypted end to end. Put it on iCloud Drive or a USB stick if you like — we still cannot read it
加密备份

你的日记,不该随手机一起消失

过去「一切留在本地」有个绕不开的硬伤:你的日记只活在一台设备里。一份加密备份填上了这个坑 —— 导出一个带口令的 .sdbackup,换机、重装、甚至换到电脑上都能原样打开,全程不新增任何一扇能被别人推开的门。

在「设置 → 数据」里导出一个加密的 .sdbackup 文件
设置备份口令后,同一份文件可恢复到另一台 iPhone,或重装应用后恢复
笔记、文件夹、标签与图片全部带回;导入是「追加」,绝不会覆盖你现有的内容
整份归档全程加密。你想放 iCloud 云盘或 U 盘都行 —— 我们依然读不到里面是什么
OffMemory encrypted backup export and restore screen
密匣笔记加密备份导出与恢复界面
Mood & calendar

A year of your life, in one glance

Mood marks turn a pile of entries into something you can actually read: a record of how you were, not just what you did.

Mark each entry happy, calm, sad or anxious — with a colour legend you can read at a glance
A calendar heatmap showing how many days you wrote and your longest streak
Last-7-days trend, so a quiet month is visible before it becomes a quiet year
On This Day resurfaces what you wrote on this date in earlier years
心情与日历

一年的日子,一眼看完

心情标记把一堆散落的笔记变成真正能读的东西:它记录的不只是你做了什么,而是你那段时间过得怎么样。

为每篇标记心情:开心、平静、低落或焦虑 —— 配有色块图例,一眼可辨
日历热力图统计你写了多少天,以及最长连续书写记录
近 7 天走势,让「这个月有点安静」在变成「这一年都安静」之前就被看见
「那年今日」把往年今天写下的句子重新送到你面前
OffMemory calendar heatmap with mood colour legend
密匣笔记日历热力图与心情色块图例
Search & tidy up

Find anything, then tidy in bulk

A diary that has grown for years is only useful if you can get back into it. Search now reads the body text, not just the titles.

Full-text search across titles and body text, with highlighted snippets and a result count
Long-press to enter multi-select, then move, tag or delete many notes at once
Sort by last edited, date created or title, and the choice sticks
Deleted notes wait in Trash, ready to be restored for a set number of days
搜索与整理

什么都找得到,还能批量整理

写了多年的日记,只有「能翻回去」才有价值。现在的搜索读的是正文,而不只是标题。

标题与正文全域搜索,命中片段高亮,并显示结果数量
长按进入多选,一次批量移动、打标签或删除多篇笔记
按最后编辑、创建时间或标题排序,选择会被记住
删除的笔记会在回收站停留若干天,随时可以恢复
OffMemory full-text search with highlighted snippets
密匣笔记全文搜索与高亮片段
Apple Watch & iPhone

Catch it on your wrist,
before it escapes.

Most thoughts do not wait for you to unlock a phone. OffMemory ships a real Apple Watch app: dictate or scribble a line, tap a mood, and it queues on your watch — then lands in the same encrypted vault the moment your iPhone is reachable and unlocked.

Quick capture — the watch text field brings up dictation and Scribble natively. No new permission is requested, because it never touches the microphone.
Four complication families — circular, rectangular, corner and inline. Your streak, whether today is written, On This Day count and pending captures all live on the watch face.
Offline queue — write with your iPhone out of range or locked. Captures wait in the watch's own Keychain and are delivered idempotently, so nothing is stored twice.
Remote lock — lock your iPhone from the wrist if you set it down unlocked, then unlock it again with Face ID.
Circular圆形Streak ring + flame连续天数环 + 火焰
Rectangular矩形Streak, today, On This Day连续 · 今日 · 那年今日
Corner角落Streak as a single number一个数字看完连续天数
Inline行内Streak with today's tick连续天数 + 今日对勾
Apple Watch 与 iPhone

在手腕上抓住它,
别让它溜走。

大多数念头不会等你解锁手机。密匣笔记有一个真正的 Apple Watch 应用:说一句、涂一句、点一下心情,它就先在手表上排队 —— 等你的 iPhone 可达并已解锁,再落进同一个加密保险箱。

抬腕快记 —— 手表的输入框原生自带听写与涂写。因为它从不碰麦克风,所以不需要向你申请任何新权限。
四类表盘并发症 —— 圆形、矩形、角落与行内。连续天数、今日是否已写、「那年今日」篇数与待同步条数,全部留在表盘上。
离线暂存 —— iPhone 不在身边或还锁着时,照样能写。内容留在手表自己的钥匙串里,恢复连接后幂等投递,绝不会重复入库。
远程上锁 —— 随手把解锁状态下的 iPhone 锁掉,回来再用面容 ID 打开。
Circular圆形Streak ring + flame连续天数环 + 火焰
Rectangular矩形Streak, today, On This Day连续 · 今日 · 那年今日
Corner角落Streak as a single number一个数字看完连续天数
Inline行内Streak with today's tick连续天数 + 今日对勾
OffMemory home screen on iPhone, sharing one vault with the Apple Watch
密匣笔记 iPhone 首页,与 Apple Watch 共用同一个保险箱
Who it is for谁适合用

Some things should never sync

OffMemory is for anyone whose words are worth more than the convenience of a cloud account.

有些事,不该同步到任何地方

如果你的文字比「云端账号的便利」更值钱,这本日记就是给你写的。

Journaling for the long run People who intend to read their own diary in ten years — and don't want it locked behind a company that may not exist.
Work you are not allowed to share Counselling notes, therapy homework, pastoral or medical reflections. Legally or ethically sensitive, and never meant for a server.
Drafts nobody should read yet Half-formed writing, ideas you are not ready to defend, and the honest first version of anything.
Anyone done with subscriptions You paid for the app once. It should keep working next year, without a renewal you forgot to cancel.
打算长期写下去的人 想十年后还能读到自己的日记 —— 而不是被锁在某个可能已经不存在的公司的服务器里。
不能外传的记录 心理咨询记录、治疗作业、灵修或医疗反思。在伦理或法律上敏感,本来就不该放进任何服务器。
还不该被看到的草稿 未成形的文字、你还没准备好为之辩护的想法,以及任何东西最诚实的第一版。
受够了订阅的人 应用你只买过一次,它明年就该照常能用 —— 而不是靠一个你忘了取消的自动续费。
Straight answers直接回答

Frequently asked questions

Twenty-one straight answers about privacy, backups, pricing, the Apple Watch app and how it behaves — including the trade-offs we will not pretend away.

常见问题

21 个直接回答,涵盖隐私、备份、价格、Apple Watch 与实际使用 —— 也包括我们不会假装不存在的那些代价。

Does OffMemory keep my entries on a server?

No. OffMemory has no cloud and no servers, so there is no backend of ours that could hold your entries. Nothing is ever uploaded, and the app contains no analytics, crash-reporting, advertising or attribution SDKs.

The single exception is Apple's StoreKit, used solely to process the one-time purchase.

How strong is the encryption, and where is the key kept?

Titles, body text and images are encrypted with AES-256 before they are written to disk. The key is derived from your password with Argon2id and stored in the iOS Keychain.

Your password itself is never transmitted and never stored on a server.

What are the four layers of lock?

A password (at least 6 characters with letters and numbers), Face ID or Touch ID quick unlock, automatic re-locking when the app goes to the background, and screenshot blocking on note pages.

All four are on by default and none is optional.

Can you read what I write?

No — and not because we promise not to. There is no server to read it from, and no key on our side. The decryption key is derived from your password on your device and kept in the Keychain.

Do I need to sign up or give an email address?

No. There is no sign-up step: no email address, no phone number, no registration form. On first launch you set a local password, stored only in the iOS Keychain — it is a device unlock, not a login, and it never leaves your device.

How do I move my diary to a new iPhone?

Open Settings → Data → Encrypted Backup and export a .sdbackup file, then import it on the new device. If you set a backup passphrase, the very same file can be restored on a different iPhone, or right after reinstalling the app.

Notes, folders, tags and images all come back. Imported items are added to what is already there — nothing is overwritten. The archive stays encrypted throughout and is never uploaded anywhere.

Which export formats are available?

Three:

  • Encrypted archive (.sdbackup) — protected by your password, best for moving to a new device.
  • Plain archive (.zip) — readable Markdown plus images.
  • Plain text (.txt) — just the words.

The two plain formats are not protected by the app's encryption — anyone who gets the file can read it. The app warns you before exporting one.

Can I back up to iCloud or Google Drive?

You can save the encrypted backup file wherever you like — Files, iCloud Drive, an external drive, or via AirDrop — but that choice is entirely yours, and the file remains encrypted with your password. OffMemory itself uploads nothing and operates no server.

What happens if I forget my password?

Your password is never transmitted and is not stored on any server, so nobody — including us — can reset it. If you configured security questions, answering them correctly lets you set a new password while keeping every entry.

If both the password and the security answers are lost, the only remaining option is to erase the local data and start over. That is the deliberate cost of true privacy.

Is OffMemory a subscription? How much is it?

No. OffMemory is free to download, and a single one-time purchase permanently unlocks writing. There is no subscription, no auto-renewal, no trial period and no advertising.

The exact price is shown on the App Store listing for your region, and inside the app before you buy.

Can I try it before buying?

Yes. You can download and open the app for free, set your password, and write your first three entries at no cost. Everything you create — reading, browsing, exporting — is available without paying. Unlimited writing is unlocked by the one-time purchase, a deliberate product decision because every entry is encrypted locally and there is no free tier on a server to fall back on.

If it is not for you, the unlock is refundable through Apple like any other App Store purchase.

Do I have to pay again on a new phone?

No. The purchase is tied to your Apple ID, not to the device. Tap Restore Purchases on the unlock screen after reinstalling or moving to a new iPhone, and the unlock comes back at no extra cost.

Does OffMemory work on iPad, in landscape?

Yes. Version 1.1.0 rebuilt the layout for iPad in both portrait and landscape, with a cleaner home, editor, calendar and unlock screen. The same encrypted vault, in a bigger frame.

Is there an Apple Watch app?

Yes — OffMemory ships a native Apple Watch app. Its text field brings up dictation and Scribble, so you can capture a line on your wrist without granting any new permission: the watch never touches the microphone.

Captures are queued in the watch's own Keychain and delivered to the same encrypted vault on your iPhone, idempotently — nothing is stored twice, and a note you wrote out of range is not lost.

What do the Apple Watch complications show?

Four families are supported: circular, rectangular, corner and inline. They read your writing streak, whether you have already written today, how many entries On This Day would resurface, and how many captures are still waiting to sync.

The complication runs as its own process and reads a snapshot from the shared App Group container, so it stays correct even when the watch app is not running.

Can I lock my iPhone from my Apple Watch?

Yes. Remote lock reuses the same lock-now action as the home screen: if you set your iPhone down unlocked, you can lock it from your wrist and unlock it again with Face ID when you pick it up.

Which languages does the app support?

Fifteen: English, Chinese (Simplified and Traditional), Japanese, Korean, German, French, Spanish, Brazilian Portuguese, Italian, Dutch, Polish, Turkish, Vietnamese and Russian. The app follows your system language automatically.

This website is currently available in English and Chinese.

Does the daily reminder wake me up at night?

No. Reminders are delivered as local notifications only — nothing leaves your device. If the time you choose falls between 23:00 and 06:00, the reminder is still shown but arrives silently. At all other times it sounds normally.

Is there a limit on how many notes I can write?

No. There is no note limit — the only limit is your device's free storage. Images take up the most space, so the app shows exactly what is using it and offers a one-tap cleanup guide when you need room.

Can I recover a note I deleted by accident?

Yes. Deleted notes go to Trash instead of disappearing, and can be restored in one tap for a set number of days before they are permanently removed. Permanently emptying the Trash does ask for confirmation.

Does it support dark mode?

Yes — the app has a full dark theme, and it follows your system appearance by default. Writing at 2 a.m. should not light up the room.

密匣笔记会把内容存在服务器上吗?

不会。密匣笔记没有云端,也没有服务器,我们这边不存在任何能够存放你内容的服务端。数据永不外传,应用内不含任何统计分析、崩溃上报、广告或归因 SDK。

唯一的例外是 Apple 的 StoreKit,仅用于处理一次性购买。

加密到底有多强?密钥存在哪里?

标题、正文与图片在写入磁盘之前,就已用 AES-256 加密。密钥由你的密码经 Argon2id 派生,保存在 iOS 钥匙串中。

密码本身从不被传输,也不存放在任何服务器上。

四层锁具体指哪四层?

密码(至少 6 位,含字母与数字)、面容 ID / 触控 ID 快速解锁、切回后台自动上锁,以及笔记页的截图拦截。

四层默认全部开启,没有一层是可选的。

你们能看到我写的内容吗?

看不到 —— 而且不是因为我们承诺不看。根本没有服务器可以读,我们这边也没有密钥。解密密钥是在你设备上由你的密码派生出来的,只存在系统钥匙串里。

需要注册或填邮箱吗?

不需要。App 里没有「注册」这一步:不需要邮箱、不需要手机号、没有注册表单。首次启动时你设置的是一个本地密码,仅存放在 iOS 钥匙串中 —— 它是设备解锁,而不是登录,永远不会离开你的设备。

换新 iPhone 后,日记怎么迁移?

打开 设置 → 数据 → 加密备份,导出一个 .sdbackup 文件,再在新设备上导入即可。若你设置了备份口令,同一份文件可以恢复到另一台 iPhone,或重装应用后恢复。

笔记、文件夹、标签与图片都会完整带回。导入是「追加」到现有内容之上 —— 不会覆盖任何东西。整份归档全程保持加密,也不会被上传到任何地方。

导出的文件有哪几种格式?

三种:

  • 加密归档(.sdbackup) —— 由你的密码保护,适合换机迁移。
  • 明文归档(.zip) —— 内含可读的 Markdown 与图片。
  • 纯文本(.txt) —— 只有文字本身。

后两种明文格式不受本应用加密保护,任何人拿到文件都能读取。导出前应用会明确提醒你。

能备份到 iCloud 或网盘吗?

你可以把加密备份文件保存到任何你信任的位置 —— 「文件」App、iCloud 云盘、移动硬盘,或用隔空投送传走。选择权完全在你,且该文件始终以你的密码加密。密匣笔记本身不会上传任何内容,也没有服务器。

忘记密码会怎样?

你的密码从不被传输,也不存放在任何服务器上,因此任何人 —— 包括我们 —— 都无法重置它。如果你配置过密保问题,答对后即可在保留全部数据的前提下设置新密码。

若密码与密保答案双双遗失,唯一的选择是清空本地数据重新开始。这是真正隐私所必须付出的代价。

是订阅制吗?多少钱?

不是。密匣笔记免费下载,一次买断即永久解锁书写。没有订阅、没有自动续费、没有试用期,也没有任何广告。

具体价格以你所在地区的 App Store 页面为准,购买前在应用内也会显示。

下载后能先试用吗?

可以。你可以免费下载并打开应用、设置密码,并免费写下前三篇。你已创建的内容 —— 查看、浏览、导出 —— 全部无需付费即可使用。之后的无限书写由一次性购买解锁 —— 这是有意的产品决定:所有内容都在本地加密,而且没有服务器可以做「免费额度」。

如果它不适合你,这次购买可以通过 Apple 按常规流程退款。

换了手机还要再买一次吗?

不用。购买绑定的是你的 Apple ID,而不是设备。重装应用或换新 iPhone 后,在解锁页点一下「恢复购买」即可免费恢复解锁。

iPad 能用吗?横屏呢?

可以。1.1.0 版为 iPad 重新设计了横竖屏两种布局,首页、编辑器、日历与解锁页都更清爽。同一个加密保险箱,换一块更大的屏幕。

有 Apple Watch 版本吗?

有,密匣笔记有一个原生的 Apple Watch 应用。它的输入框自带听写与涂写,抬腕就能记一句,而且不需要申请任何新权限 —— 手表端从不碰麦克风。

内容会先排在手表自己的钥匙串里,再幂等地投递进 iPhone 上同一个加密保险箱 —— 不会重复入库,人不在旁边时写下的那一句也不会丢。

表盘并发症上显示什么?

支持四种形态:圆形、矩形、角落与行内。它们显示的是连续书写天数、今日是否已经写过、「那年今日」会浮现多少篇,以及还有多少条待同步。

并发症扩展是独立进程,只读共享容器里的快照,所以即使手表 App 没有运行,表盘上的数字依然是准的。

可以从手表远程锁 iPhone 吗?

可以。远程上锁复用首页的「立即锁定」同一个动作:随手把解锁状态下的 iPhone 放下的那一刻,从手腕上锁掉,回来再用面容 ID 打开。

支持哪些语言?

共 15 种:简体中文、繁体中文、英语、日语、韩语、德语、法语、西班牙语、巴西葡萄牙语、意大利语、荷兰语、波兰语、土耳其语、越南语与俄语。应用会自动跟随你的系统语言。

本网站目前提供英文与中文。

有提醒功能吗?深夜会响吗?

有。提醒只通过本地通知发送 —— 数据不出设备。若你设定的时间落在 23:00 至次日 06:00 之间,提醒依然会出现,但以静音方式送达。其他时段正常发声。

一共能写多少篇?有上限吗?

没有上限。唯一的限制是你设备的剩余空间。图片最占地方,因此应用会明确显示空间占用,并在你需要腾地方时提供一键清理向导。

误删的笔记能找回吗?

可以。删除的笔记会进入回收站而不是直接消失,在若干天内都能一键恢复,之后才会被永久移除。清空回收站属于不可撤销操作,应用会先请你确认。

支持深色模式吗?

支持。应用有完整的深色主题,默认跟随系统外观。凌晨两点写字,不该点亮整个房间。

Still unsure about something?还有疑惑? Download it free, look around, and decide with the app in your hand.免费下载,先看看,再决定要不要买断。

Download on the免费下载App Store

Your secrets deserve
a vault of their own.

OffMemory is free on the App Store. One purchase, and it is yours forever.

iPhone · iPad · Apple Watch · Mac (in review) · iOS 15 or later · macOS 12 or later · 15 languages · No cloud, no servers, no ads

你的秘密,值得拥有
一座专属保险箱。

密匣笔记在 App Store 免费下载,一次购买,永久属于你。

免费下载App Store

iPhone · iPad · Apple Watch · Mac · 需 iOS 15 或 macOS 12 以上 · 15 种语言 · 无云端、无服务器、无广告

Changelog

What's new

Every change users can feel, newest first. No release notes for internal fixes — only what you will notice while writing.

更新记录

版本更新记录

只列你真的能感觉到的变化,新的在前。内部修复不写进版本更新里 —— 这里只说写作时会碰到的东西。

2.4.0
  • Notes move between your own devices. Open Transfer on both, bring them close, type the 6-digit code the other device shows, tick what to send — straight over your own Wi-Fi, no server, and no internet connection needed. Locked notes stay greyed out and cannot be picked.
  • Received notes have a home. "Received from other devices" is a fixed view in the library, and everything you receive is also in All Notes — open, favourite or delete it like any other entry.
  • Every device has a name. The first time you open Transfer, an iPhone calls itself iPhone-1, an iPad iPad-1 and a Mac Mac-1, so two similar devices no longer both read "My device".
  • What uses the network, said plainly. Two things only: the App Store purchase, and a transfer you start yourself. There is no server of ours, and what you write is not handed to any service.
  • 笔记能在你自己的设备之间传了。 两台都打开「设备间传输」,靠近后另一端会显示一组 6 位配对码,输入后勾选要传的笔记就传过去。走你自己的 Wi-Fi,不经过服务器,没有外网也能传;锁着的笔记在列表里是灰的,选不了。
  • 收到的笔记有地方可找了。 笔记库新增「从其他设备接收」,传过来的都在这里,「全部笔记」里同样看得到,打开、收藏、删除跟平常一样。
  • 每台设备有了自己的名字。 第一次打开传输页,iPhone 叫 iPhone-1、iPad 叫 iPad-1、Mac 叫 Mac-1 —— 两台同类设备摆在一起,列表里不会再是两行「我的设备」。
  • 把用网这件事说清楚。 只有两处会用网:App Store 内购,以及你自己发起的设备间传输。没有服务端,你写的内容不会交给任何服务商。
2.3.0
  • The second vault says it out loud. The screen where you set a second password now states, before you type, that a forgotten password cannot be recovered — by us or by Apple.
  • Unused images can finally be cleared. Settings → Backup & Restore now has an image section beside the drawing one: scan, see how many and how much room they take, then delete. Notes in the recycle bin still count as in use.
  • GIFs keep moving; other animations saved as-is. Large GIFs used to be stored as a single frame — now they animate at any size; other animated formats are kept without recompression.
  • Long entries know where to stop. Past 30,000 characters a one-time note suggests splitting; past 100,000 nothing more can be added, but you can copy all text out in one tap.
  • Shortcuts speak your language. The "New blank entry" action now follows the system language in all fifteen languages instead of showing English.
  • A smaller download. The release build no longer carries our test harness, so the download is lighter and takes less room.
  • 第二保险箱,先把话说清。 设置第二个密码的页面现在会直接写明:这个密码一旦忘了,我们和苹果都找不回来。看完再决定要不要继续。
  • 用不到的图片,终于能清掉了。 设置 → 备份与还原里多了图片一项:先扫一遍,看有几张、占多少空间,确认了再删。回收站里的笔记仍然算「还在用」,不会被误删。
  • GIF 仍会动,其他动图原样保存。 以前大的 GIF 存进去只剩第一帧,现在无论大小都保留动效;其他动图格式原样保存、不重压缩。
  • 长文有了分寸。 超过 3 万个字符会提示一次「考虑拆成几篇」,不影响保存;超过 10 万个字符就不能再往里加,但可以一键复制全文。
  • 快捷指令里也看得懂中文。 「新建空白笔记」这个动作的标题和说明,现在跟着系统语言走,15 种语言都不再显示英文。
  • 安装包更小。 正式版不再打包测试用的代码,下载更快,占的地方也更少。
2.2.0
  • Find and replace, inside the editor. Matches light up as you type, step through them one by one, or replace all at once — a single undo takes the whole batch back. Titles are searched too.
  • Restores show their progress. An import tells you how many notes it has processed out of the total and which title it is working on, and you can cancel at any point without leaving a half-imported library.
  • Lists and the recycle bin, your way. Sort notes by last edited, date created or title; choose how long the recycle bin keeps deleted notes — 3, 7 or 30 days.
  • A steadier gallery and a smaller download. Decrypted images are kept at the size they are drawn, and the app takes less space than the last release.
  • A backup nudge that knows when to stop. Only when your last export is over 30 days old and you have at least five notes, once — then it stays quiet.
  • 编辑器里能查找替换了。 命中的地方随着输入高亮,可以一个个跳,也可以一次性全部替换;按一次撤销就能把整批替换退回去。标题也会一起搜。
  • 导入备份能看到进度。 恢复时显示「已处理多少篇 / 共多少篇」和正在处理的那篇标题,随时可以取消;取消之后一条都不会留下。
  • 列表和回收站更听话。 列表可以按更新、创建或标题排序;回收站的保留天数能选 3 天、7 天或 30 天。
  • 图库更稳,体积更小。 解密过的图片按显示尺寸缓存,同一张图再滑回屏幕时不重新解;安装包也比上一版更小。
  • 提醒你备份,但不唠叨。 距离上次导出超过 30 天、且笔记攒到 5 篇以上,才会出现一次提示;点「知道了」就静默一段时间。
2.1.0
  • A lighter gallery. Images decode at the size they are drawn, so a screen of thumbnails no longer pulls full-resolution originals into memory.
  • Imports cross-check image counts. If an archive declares a different number of images than actually landed on disk, the restore lists "declared N / actual M" instead of looking like a clean import.
  • Broken image references are cleaned up. No more permanent grey placeholder where a restore could not recover an image.
  • Clearing old backups asks first. "Keep only the most recent few" lists the files it is about to delete, then waits for your confirmation.
  • Restore purchase no longer spins forever. When the store or the network does not answer, you get a retry prompt within half a minute.
  • 图库更轻。 图片按实际显示的尺寸解码,一屏缩略图不再把原图整张读进内存,滚动更稳。
  • 导入会核对图片数量。 恢复结束时若归档声明的图片数与真正落盘的不一致,会逐条列出「声明 N / 实际 M」,不再看起来和顺利导入一模一样。
  • 没能恢复的图片引用会一并清掉。 正文里不再留下一个永远转圈的灰块。
  • 清理旧备份先给名单。 「只保留最近几份」会先列出将被删除的文件,确认之后才动手。
  • 恢复购买不再无限等待。 商店或网络没有回应时,半分钟内给出可重试的提示。
2.0.0
  • Apple Watch app. Capture a line in seconds; it is queued offline and synced when your iPhone is back in reach. You can also lock your phone from your wrist.
  • A second vault. A second password opens its own separate space — your real entries are not visible there.
  • A new look, and the old one kept. A refined home list and sidebar, switchable back to the classic design at any time.
  • Year in review and on-this-day. Look back at what you wrote on this date in past years, and at the year as a whole.
  • Event date, and a stronger key. Record the day something happened, apart from the day you wrote it; key derivation moved to Argon2id — your password is unchanged and existing notes stay readable.
  • Apple Watch 版。 几秒记下一句,离线也能写,条目在待同步匣里等你回到手机旁边;还能从腕上锁定手机。
  • 第二保险箱。 用第二个密码打开它自己的独立空间 —— 那里看不到你的真实日记。
  • 新视觉,旧视觉也留着。 首页列表与侧栏做了整体提档,任何时候都能切回经典样式。
  • 年度回顾与那年今日。 回看往年今天写下的内容,也可以把一整年翻一遍。
  • 事件日期,密钥更硬。 按事情真正发生的日子记录,和写下的日子分开;密钥派生升级到 Argon2id —— 密码不变,旧笔记照常可读。
1.5.0
  • Time capsules. Write a letter to a future date. Until that morning it stays sealed — not in search, not in statistics, not in the list — and opens with a small ritual when the day arrives.
  • Edit a drawing you made earlier. Open a sketch you inserted months ago and carry on working on it, vector source and all.
  • Mood and activity, side by side. See which kinds of days line up with which moods.
  • Three free entries. Everyone can now write three entries before the one-time purchase, while older accounts are topped up automatically.
  • 时光胶囊。 写一封给定开启日期的信。在那天之前它一直封存 —— 不进搜索、不进统计、列表里也读不到正文 —— 到期那天再以一段小仪式拆开。
  • 已插入的涂鸦能二次编辑。 几个月前画的那一笔,重新打开还能接着改,矢量源一起保留。
  • 情绪与活动放在一起看。 看看哪种日子更容易对应哪种心情。
  • 前三篇免费。 买断之前现在可以免费写三篇;早期用户的免费额度也自动补足到三篇。
1.4.0
  • Draw with your finger or Apple Pencil. Every note gets a canvas; strokes are encrypted like the rest of the entry and travel with it into PDF exports and backups.
  • Recovery code. Generate one and write it down. If you ever forget your password it is the key that brings your notes back — and the app stores nothing for you.
  • Lock a single entry. Put one important note behind its own Face ID or device-password check, independent of the app lock. Failed attempts are listed.
  • Optional Spotlight index. Search note titles from the system, off by default, titles only — locked notes and bodies are never indexed.
  • On-device summaries. On devices that support Apple Intelligence, summarise a long entry or get a title suggestion. Nothing leaves the device.
  • 手写,笔笔加密。 每篇笔记里都有一个画布,用 Apple Pencil 或手指随手画;笔迹与正文一同进入 PDF 与备份,全程加密。
  • 恢复码。 一次性生成、抄写或保存。万一忘了密码,恢复码就是把笔记找回来的那把钥匙 —— App 不替你保管任何东西。
  • 单篇锁。 重要的篇目值得多一面墙:单独再走一遍面容 ID 或设备密码,与 App 本身的解锁互不影响;失败的尝试会记进「尝试解锁记录」。
  • 可选的 Spotlight 索引。 可在系统 Spotlight 里搜到笔记标题,默认关闭、只索引标题;锁篇与正文绝不索引。
  • 端侧摘要。 在支持 Apple Intelligence 的设备上可以摘要长文、推荐标题;推理不出设备。
1.3.0
  • Writing prompts when the page is blank. A quiet suggestion to get past the first line, instead of an empty cursor.
  • A year of writing, as statistics. A heat map of the year plus streaks, active days and average length.
  • Home-screen widget. See your streak and whether you wrote today without opening the app.
  • Stronger encryption. Note and photo encryption now uses authenticated AES-256, and the key derived from your password takes far more work to brute-force. Existing notes stay readable.
  • 空白页里有写作提示。 与其对着一个空光标,不如先给你一句话引子,把第一句写下来。
  • 一年写作看统计。 一年的热力图,加上连续天数、活跃天数与篇均字数。
  • 主屏小组件。 不开 App 也能看到连续写作天数、今天写了没有。
  • 加密再升级。 笔记与图片改用带认证的 AES-256,由密码派生的密钥更难被暴力破解;旧笔记照常可读,无需重新加密。
1.2.0
  • Mood statistics. Tag an entry with how you felt and see the moods add up over time.
  • Read and write your way. Type scale, line spacing and text colours are all adjustable in the editor.
  • Export a single entry. Take one note out on its own, instead of exporting everything.
  • A fresh line every day. A daily writing prompt at the top of an empty entry.
  • Privacy, tightened. Locking now clears every screen behind the lock, and the app locks itself when it leaves the foreground.
  • 心情统计。 给每篇标一个当时的心情,写久了能看到情绪怎么积起来。
  • 按自己的习惯读写。 编辑器里的字号、行距与文字颜色都能调。
  • 单篇导出。 只把一篇笔记单独导出去,不必整库导出。
  • 每天换一句。 空白笔记顶部给一句当天的写作引子。
  • 隐私再收紧。 上锁时会清掉锁后的每一层页面;离开 App 即自动上锁。
1.1.0
  • Search finds what is inside. Search now looks through the body text, not just the title.
  • Sort, and act on many notes at once. Three sort orders are remembered; long-press to select many notes and move, tag or delete them together.
  • An encrypted backup you can carry. Export an encrypted archive, optionally protected by a backup passphrase, and bring every entry and photo back on another device.
  • Space that stays in hand. See what the app occupies, and get a warning before your phone runs out.
  • Quieter late-night reminders. A reminder that falls between 23:00 and 06:00 is still delivered, but silently.
  • 搜索能搜到里面的字。 匹配范围从标题扩到正文,结果直接给出命中的那一句。
  • 排序,以及一次处理很多篇。 三种排序会被记住;长按进入多选,批量移动、打标签或删除。
  • 能带走的加密备份。 导出加密归档,可另设备份口令,在新设备上把每一篇与每张图装回来。
  • 空间心里有数。 能看到 App 占了多少,也能在手机存满之前收到提醒。
  • 深夜提醒不吵人。 落在 23:00 至 06:00 的提醒照常送达,但只静音弹出。
1.0.0
  • Everything is encrypted on your device. Titles, bodies and photos are stored as AES-256 ciphertext. There is no account, and nothing to sign up for.
  • Your password is the only key. Optional Face ID or Touch ID, a lock delay you choose, and the app locks itself when it goes to the background.
  • Markdown editor. A full toolbar, inline formatting, photos, a live word count and a preview mode; autosave keeps writing as you go.
  • Organised and recoverable. Folders, tags, favourites, search and a recycle bin; daily reminders; 15 languages and light or dark themes.
  • One purchase, no subscription, no ads. Export an encrypted backup whenever you like and restore it on a new iPhone.
  • 所有内容在设备上加密。 标题、正文与图片都以 AES-256 密文存盘;没有账号,也不需要注册。
  • 密码是唯一的钥匙。 可选面容 ID / 触控 ID,锁屏延时自己定,切到后台即自动上锁。
  • Markdown 编辑器。 完整工具条、行内格式、插图、实时字数与预览模式;边写边自动保存。
  • 组织得清,也找得回。 文件夹、标签、收藏、搜索与回收站;每日写作提醒;15 种语言与明暗主题。
  • 一次买断,无订阅、无广告。 随时可导出加密备份,换新 iPhone 时恢复回来。
1.1.0 In review审核中
  • Transfer notes straight to iPhone and iPad. Open Transfer on both sides, type the 6-digit code shown on screen, tick the notes and send — over your own Wi-Fi, with no server and no internet connection needed. It travels as an AES-256 encrypted archive that only your password can open.
  • Received notes have a home. Anything you receive lands in "Received from other devices" and is also in All Notes; the marker survives reinstalls and device changes.
  • Every device has a name. The first time you open Transfer, a Mac introduces itself as Mac-1, an iPhone as iPhone-1 and an iPad as iPad-1.
  • Double-click to open a backup. Opening a .sdbackup file in Finder now goes straight into the import flow — no more Settings > Backup detour.
  • 和 iPhone、iPad 直接传笔记。 两端打开「设备间传输」,输入屏幕上显示的 6 位配对码,勾选要传的笔记即可;走你自己的 Wi-Fi,不经过服务器,没有外网也能传。路上是一份 AES-256 加密的归档,只有你的密码能打开。
  • 收到的笔记有归属。 传过来的笔记进「从其他设备接收」,「全部笔记」里同样看得到;这个标记不会因为换机或重装而消失。
  • 每台设备有自己的名字。 第一次打开传输页,Mac 叫 Mac-1、iPhone 叫 iPhone-1、iPad 叫 iPad-1,两台同类设备不会再都写成「我的设备」。
  • 双击就能打开备份。 在访达里双击 .sdbackup 文件,直接进入导入流程,不必再绕「设置 → 备份」。
1.0.0
  • The Mac version is here, built for the Mac. Three panes side by side — navigation, note list and editor — with a native menu bar (⌘N new, ⌘S save, ⌘F find, ⌘, settings), and the window reopens at the size and position you left it.
  • Draw with the mouse. Handwriting works with a mouse or trackpad; a drawing made on iPhone opens and exports here unchanged.
  • Open it with Touch ID. On a Mac with a fingerprint reader a touch opens it; without one you can always fall back to your master password.
  • Spotlight finds it. ⌘Space searches titles and opens the note itself — titles only, off by default, locked notes and bodies never indexed.
  • One purchase, three devices. Already bought on iPhone? The Mac unlocks too — your encrypted diary travels between them as a backup, never through a cloud.
  • Quit without losing the last line. ⌘Q, closing the window or logging out saves first; PDF export and encrypted backups export and import on the Mac.
  • Mac 原生版,正式上架。 不是把手机版放大:左侧导航、中间列表、右侧正文三栏并排,顶部原生菜单(⌘N 新建、⌘S 保存、⌘F 查找、⌘, 设置),窗口还会记住上次的大小和位置。
  • 鼠标也能画。 手写笔迹用鼠标或触控板就能写;iPhone 上画过的那张,这里照常看得到、也导得出。
  • Touch ID 开门。 有指纹的 Mac 一触即开;没有 Touch ID 的(比如 Mac mini 配普通键盘)随时可以回主密码。
  • ⌘ 空格搜得到。 Spotlight 索引标题,搜到直接打开正文;只索引标题,默认不开启,锁篇与正文绝不进索引。
  • 买一次,三端通用。 iPhone 上买过,Mac 直接解锁 —— 你的加密日记以备份的形式在它们之间流转,从不经过云端。
  • 写完退出也不丢。 ⌘Q、关窗口、注销前都会先落盘;PDF 与加密备份在 Mac 上正常导出、也能再导入还原。