The thought usually arrives mid-sentence. You are three lines into an honest paragraph about your marriage, your work, the fear you have not said out loud, and you notice the little sync icon in the corner of the journaling app. The paragraph is leaving. It will be encrypted, probably. Stored responsibly, probably. Read by no one, probably. And "probably" is exactly the word that changes what you write next.
A diary on a server is, structurally, a letter. Not to anyone in particular; to whoever ends up holding the server. That set includes the company as it exists today, the company after the acquisition, the engineer debugging the database, whoever walks in through the next breach, and whoever a court order compels. None of this requires bad intent from anyone, and none of it is an accusation aimed at any particular app. It is a description of architecture. Once your words are transmitted, their privacy is a policy. Policies are promises, and your most honest writing cannot be asked to rely on a promise.
So you hedge. You soften the paragraph about your brother. You describe the fear in terms vague enough to survive an imagined reader. The diary keeps working as a record and quietly stops working as a mirror.
The whole value of writing to yourself was that the reader was you.
Apple requires every app on the App Store to publish an App Privacy label, a declaration of what data the app collects. The strictest label reads Data Not Collected: the developer declares that the app collects no data from you at all.
Lila, our reflective board game, carries that label, and it can carry it because there is nothing behind it to collect with. No account and no sign-in, so there is no identity to attach anything to. No server, so there is nowhere to send what you write. No analytics SDK, no telemetry. The Intentions you bring to the board and the answers you write stay in your iPhone's storage, full stop.
The readings themselves are composed on your iPhone: Apple Intelligence where the device supports it, a hand-authored library of square readings everywhere else. Either way, composition happens on the device in your hand, not in a data center.
One caveat, stated because unstated caveats are how trust dies: the App Store itself handles the subscription, so Apple's ordinary purchase traffic exists. That is the only network traffic the app produces, and you do not have to take our word for it. Put any network proxy in front of Lila and watch.
Privacy settles who can read your reflection. It says nothing about whether the reflection is any good. This is where the shape of the tool matters, and why Lila is a board game rather than a journal.
A blank page asks you to interrogate yourself with no structure, and most of us respond by writing the same three complaints in rotation. A feed-shaped app has the opposite problem: it never ends, so it converts reflection into a habit to be maintained, with streaks and badges to prove you maintained it.
A board game is a third shape, and an old one. The 72-square Leela board has been used for self-examination for a very long time (we wrote about its real history separately). A game has a beginning: you name an Intention, a real question in your own words, and you enter the board only when the die shows six. It has a middle you do not control: the die decides which squares you face, and that randomness is the useful part, because it puts questions in front of you that you would never have asked yourself. And it has an end. The journey completes, the Journal keeps it, and you stop. Being finished is the feature. Honest self-review is effortful, and effort needs edges.
Lila keeps those edges sharp on purpose. No streaks, no badges, no notifications; the app never asks you to come back. You come back when a question presses, the way the board's original players did.
A game structure is good at prompting honesty. It is not care, and the app says so itself, not just this page. Lila is not therapy and makes no health or medical claims. If a journey touches something heavier than a game should hold, the app does not lean in; it shows a plain card saying that a game is the wrong container for this, and points you toward real people instead. We would rather interrupt a session than pretend software can hold what it cannot.
The same posture extends to what is arriving in v1.1. The Journal gains Mirror's Thread, a continuity digest that reads across your journeys, composed on the device like everything else. Finished journeys gain a Synthesis, a deeper closing reflection. And there is a shareable Journey Keepsake image, designed privacy-first: by default it contains none of your written text, so the only thing that ever leaves your phone is an image you deliberately chose to share, with contents you can see before you send it.
If you have been looking for a private journaling alternative, something with a diary's honesty and no server underneath it, Lila: Crystal Mirror is our attempt: the 72-square board, a Mirror that will not flatter you, and an App Privacy label that reads Data Not Collected. There is more on the app page, or you can find Lila on the App Store
Notes. Lila is a contemplative board game, not therapy, medical, or health advice, and nothing here is a claim about treating any condition. If what you are carrying feels heavier than a game can hold, the right next step is a real person: someone you trust, or professional support where you live.