Most journal leaks on a shared phone are ordinary. Someone borrows it for a recipe, a child opens the last app, or a lock-screen preview shows a line you wrote at midnight.
This is the workflow companion to the secure journal app checklist. The longer list covers storage, sync, and AI processing. This page is the ten minutes you spend when other people hold the same device.
Quick Answer
Set a device passcode, turn on the journal’s Face ID or Touch ID lock, close the app before you hand the phone over, and limit notification previews. If the Apple ID is shared, leave iCloud sync off or keep sensitive notes out of the app. An app lock on your phone does not protect a copy on someone else’s device.
Who Counts as Sharing
You are in this routine if any of these are true:
- A partner, child, or roommate uses your unlocked phone.
- You leave the phone on a table while you are in another room.
- The Apple ID is signed in on a device you do not control.
- You sometimes hand the phone over “just for a second.”
A phone that only you touch can skip the hand-off steps. It still needs the passcode and the app lock. The full eight checks live in the checklist.
The 10 Minutes
| Minutes | Do this | Stop when |
|---|---|---|
| 0–2 | Device passcode and auto-lock | The phone locks in under a minute |
| 2–4 | Journal app lock | Reopening the app asks for Face ID or Touch ID |
| 4–6 | Notification previews | The lock screen does not show entry text |
| 6–8 | Apple ID and iCloud sync | You know whether sync is on, and whose account it uses |
| 8–10 | Hand-off rehearsal | You can close the journal and pass the phone without an open entry |
Minute 0–2: The Phone Locks Itself
Set a passcode the other people in the house do not already know. Shorten auto-lock so a phone left on the couch does not stay open. Apple documents passcode and Face ID behavior in the iPhone user guide. Face ID unlocks the device. It does not decide what an individual app shows after that. Source: Apple Face ID guide
Minute 2–4: The Journal Asks Again
In Glimmo, turn on app lock with Face ID or Touch ID. The privacy policy says biometric authentication is handled by the operating system, and that Glimmo does not receive or store biometric data.
Then do the only test that matters. Leave the app, lock the phone, unlock the phone, and tap the journal. It should ask again. If it opens straight onto yesterday’s entry, the lock is off or the session never ended. Close the entry before you trust the setting.
Face ID on a journal does not help while the entry is already on screen. The hand-off rule is simple: leave the journal, then pass the phone.
Minute 4–6: Quiet the Lock Screen
iPhone can show notification previews always, only when unlocked, or never. Change that setting, then send yourself a test or look at a real banner. Source: Apple notification settings
Glimmo’s public pages do not document a separate control for hiding journal text inside system notifications. Treat the phone setting as the control you can actually see. If a banner still shows words from an entry, keep that kind of entry off the device until you understand which alert produced it.
Minute 6–8: Ask Whose Apple ID This Is
App lock is local. iCloud sync is an account. Glimmo’s optional sync uses your personal iCloud account and does not store that copy on Glimmo’s servers. If another person uses the same Apple ID, they can reach what that account syncs, on a device where they are signed in. Source: Glimmo privacy policy
If the Apple ID is shared, turn journal sync off, or do not put private entries in the app. A lock on your handset will not close the copy on theirs.
If the Apple ID is yours alone, sync can still be the right choice for a second phone that only you use. Confirm a test entry arrives there, and confirm you can remove it. The terms of use put backups on you. Sync you have never checked is not a backup.
Minute 8–10: Rehearse the Hand-Off
Practice once, while nobody is waiting:
- Finish the sentence.
- Leave the journal so the entry is not on screen.
- Lock the phone, or at least land on the home screen.
- Hand it over.
When you get the phone back, open the journal and see that it asks for Face ID or Touch ID. That last look is the routine. The rest is setup.
What the Lock Does Not Cover
An app lock does not decide these:
- AI processing. Companion replies, the Emoji Life Jar, and automatic mood tracking process relevant entry text when those features are used. The site does not describe a switch that disables automatic mood tracking. Details are in the AI journal privacy checklist.
- Someone reading over your shoulder while you write.
- A photo of the screen taken by someone else.
- Paper. If the household cannot share a phone safely, a notebook kept in a place you control is the honest alternative. See private diary app vs. paper diary.
Scanning a paper page into Glimmo captures the page. It is not native OCR, and it does not remove the paper original from the house.
Sensitive Entries on a Shared Phone
Some notes are a poor match for a device other people hold, even with a lock. Passwords, another person’s confidential story, and workplace material you are not supposed to copy belong elsewhere.
A personal choice can still be written here if you strip other people’s identifiers. Use the decision journal template for the choice, the options, and the review date. When the outcome arrives, add it underneath with the outcome review. Do not put a coworker’s private remark in the prediction just to make the note feel complete.
If You Already Wrote the Entry
Turn the app lock on now. That protects the next hand-off. It does not rewrite the past.
If the entry should not remain, delete it in the app. If iCloud sync was on, check the other device signed into that Apple ID, or remove the app data from iCloud through device settings, as the privacy policy describes. Then decide whether the next entry of that kind belongs in the app at all.
FAQs About Locking a Journal on a Shared Phone
Is Face ID enough if I hand someone my unlocked phone?
Face ID on the journal helps only if the app asks again after you leave it. Close the journal before you hand the phone over, and confirm the app lock is on. An entry left open on screen is already visible.
What if the phone uses a shared Apple ID?
Turn iCloud sync off for the journal, or keep sensitive entries out of the app. A shared Apple ID can put synced app data where the other person can reach it. An app lock on one phone does not lock the other person’s signed-in device.
Should I avoid AI features on a shared phone?
Use them only for entries you are willing to have processed. Glimmo processes relevant entry text for companion replies, the Emoji Life Jar, and automatic mood tracking. The public pages do not describe an off switch for automatic mood tracking.
Do notification previews show journal text?
They can, depending on the phone’s preview setting and what the app notifies. Set previews to appear only when the device is unlocked, or turn previews off, then look at the lock screen yourself.
What if I already wrote something sensitive before locking the app?
Turn the lock on now, delete the entry if it should not remain, and check whether iCloud sync copied it to another device. Future locks do not hide a note that is already on a shared account.
Conclusion: Close the App, Then Pass the Phone
Ten minutes covers the passcode, the journal lock, the lock screen, the Apple ID, and one rehearsal. After that, the habit is small: leave the entry, then hand the phone over.
If the Apple ID is shared, the lock on this phone is not the whole story. Keep the private sentence off the synced account, or keep it on paper.
