Moonwave guide
How to keep a private period journal on iPhone
A practical way to record your cycle while staying intentional about accounts, storage, syncing, exports and the amount of data you keep.
By the Moonwave team · Updated July 15, 2026 · 6 min read
A private period journal is not only about choosing an app with a lock icon. Privacy depends on what you record, whether an account is required, where entries are stored, what leaves the device and what happens when you export or share them.
1. Decide what the journal is for
Start with a concrete purpose: remembering period dates, noticing mood changes, preparing for a healthcare conversation or creating a regular reflection habit. A clear purpose makes it easier to avoid collecting sensitive details you will never use.
2. Begin with the smallest useful check-in
Period start and end, flow, pain and two or three personal signals are often enough for a useful first journal. Add more only when you know why you want it. More fields do not automatically produce more insight; they can make the habit harder to maintain.
3. Check whether an account is required
An account can be useful for cross-platform access, but it also creates another identity and recovery system around the journal. Ask whether the service needs your email, phone number, name or profile-and whether those identifiers are connected to cycle entries.
4. Understand local storage and sync
“Stored on your phone” and “synced privately” are different promises. Look for a plain explanation of what remains local, what is backed up, which provider operates the sync service and whether the app company can access the journal database.
Moonwave uses local storage and can sync through the private CloudKit database attached to your Apple account. The full explanation is in the plain-language privacy guide.
5. Protect the device and Apple account
A local journal still depends on device security. Use a strong device passcode, keep iOS updated, protect your Apple account with two-factor authentication and be thoughtful about who can see notification previews or unlocked devices.
6. Treat exports as sensitive copies
A PDF or data export leaves the app's protected environment. Before sending one, check whether it contains dates, notes or other details the recipient does not need. Delete unneeded copies from Files, email, messaging apps and shared cloud folders.
7. Review and delete
Every few months, ask whether the journal is still useful, whether your settings reflect what you want to record and whether old exports should be removed. A privacy-respecting tool should tell you how deletion works rather than making you contact support for ordinary journal deletion.
A small routine is easier to protect
The most private journal is not necessarily the one with the most settings. It is the one whose purpose, storage and sharing boundaries you understand-and whose contents are limited to what genuinely helps you reflect.