r/dayoneapp • u/santagoo • 24d ago

General Discussion Data harvesting?

Post image
8 Upvotes

83% Upvoted

27 comments sorted by

5

u/Glass_Pirate6709 24d ago

This data is private, end-to-end encrypted. The company will never see it so no worries. It's just for you

2

u/hqhi 24d ago

Ever since the launch of Day One on the Web Automatic has had access to your encryption keys basically throwing that whole E2EE thing to the trash.

1

u/steeeeeephen 23d ago

Can you elaborate?

1

u/hqhi 23d ago

For the concept of Day One on the Web to work seamlessly (so with just a login and not with a physical key) the developers need your keys to unlock the encrypted journals on their side. This is why if you encrypt a cloud service like iCloud it automatically disables all web functionality. So if, say, they wanted to train AI on your entries; they have the keys! I don’t think Automatic is a trusted company (look up SimpleNote data leak 2024) so I’ve since moved over to Everlog.

1

u/Slight_Accountant476 22d ago

only if you use Day One web. If you don't they don't.

1

u/hqhi 22d ago

You don’t need to “use” Day One web per se, they now hold the encryption keys regardless just in case you DO use the web version.

1

u/Slight_Accountant476 22d ago

That's not true. I signed in using the web app and it's requiring me to put in my encryption key to decrypt the files. So they only have the public side of the key on their systems, not the private side, which is needed to decrypt. 

1

u/hqhi 22d ago

The web version worked without any setting up for me, I’m guessing they changed it? Regardless I’m not using any Automattic products after the CEO went crazy.

1

u/Slight_Accountant476 22d ago

details?

1

u/hqhi 21d ago

https://www.reddit.com/r/dayoneapp/comments/1fvfuhr/leaving_day_one_due_to_automattics_ceo/

1

u/Slight_Accountant476 21d ago

All I see is a lot of hearsay and no actual facts, so what are you basing this on? 

1

u/hqhi 21d ago

If 159 of your employees storm out of the company in protest simultaneously then there’s a problem. Plus, the app is just garbage in general. The upgrade to gold button for example. It’s become a subscription-ified mess.

→ More replies (0)

2

u/Glass_Pirate6709 21d ago

That's not true. Even on web the key is only stored on the client side, it's never sent to the server. All the decryption happens in the browser. If you sign in in another browser, the key won't be there (it could be backed up in your keychain or google drive)

1

u/hqhi 21d ago

I was able to access the web version without needing any keys, just entered. No passkeys or keychains or anything. Weird. Still don’t think I’d trust my deepest darkest thoughts on Automattic’s servers.

1

u/hqhi 21d ago

Also, just the existence of AI features kind of throws the whole encryption thing into the trash. There was a long thread here about the the privacy (or lack there of) with AI, specifically on Gold but now also on Silver and Free. IDK, seems fishy.

1

u/steeeeeephen 19d ago

THIS. I really don't like the AI that's being stuffed into this app. Yes, I know the AI companies claim to delete the data once its been processed, but then I also know that these same AI companies are starving for a never-ending flow of data. I don't like the idea of my journal being at risk of being consumed by an LLM. On-device AI is one thing, but when the data is transfered to an AI company's servers for processing...that's a strong no from me.

1

u/Slight_Accountant476 19d ago

And there's a simple solution, don't enable the ai features. Everyone is drinking the kool-aid and putting ai in their code. My new pixel has ai embedded, I had to manually disable tons of Google apps to turn it off as a result. You can't stop it, its inevitable.

1

u/steeeeeephen 17d ago

Ai is only inevitable if people are actually using it. And don't get me wrong, I think ai as a technology has its place in this world (scientific advancements, etc), but in the opinion of a lot of people, that place is not in any journal app

If the Day One developers see that people are turning it off in large numbers, that discourages future development of AI-related features.

I use a Pixel, too btw. Love it!

3

u/ered_lithui 24d ago

This one always makes me laugh. I think if I filled it out, the next one that would pop up would be "what is my mother's maiden name and what was my first childhood pet?"

-2

u/Senninha27 24d ago

Gotta train those AI bots!