Private, Offline Mood Tracker: InnerPulse With No Account or Cloud

On-device means on-device

Many apps advertise "privacy" and mean that their servers are well encrypted. That is a different promise. It still means: your data leaves your device, ends up with a provider, and you trust that provider's security.

InnerPulse stores your entries in a local database (SwiftData) on your iPhone. There is no step where this data is sent to a server, because there is no server it could go to. Concretely:

• No account. You create no email, no password, no login. You open the app and track. There is no user identifier that could tie your data to anything anywhere.
• No cloud, no backend. InnerPulse runs no server infrastructure of its own. Your mood data is never uploaded, synced, or stored off your device.
• No analytics or tracking SDKs. No built-in components that send usage behavior, crash profiles tied to advertising IDs, or behavioral data to third parties. The app does not measure you.
• Analysis computes locally. The correlation engine, the interaction insights, and the statistics are computed on your device. There is no "insights server" that needs your data to do its work.

That is the difference between "we protect your data" and "we don't have your data." InnerPulse is in the second category.

The promise lives in the architecture, not in a marketing line

Privacy promises are cheap. Every app writes one in its store listing. The difference with InnerPulse is that you don't have to believe the promise, you can check it, because it is a property of the architecture rather than a claim.

Here is how to do it yourself in a few minutes:

• With a network monitor. Install a tool like Little Snitch (on a Mac, tethered during a sync) or route your iPhone traffic through an HTTP proxy like Proxyman or Charles. Use InnerPulse normally: create entries, take tests, look at insights. You will see that the app sends no mood data outward.
• In airplane mode. Take the device offline and use the app. Everything keeps working: tracking, analysis, export. An app that had to send your data to the cloud to function would stall in airplane mode. InnerPulse does not.

That is the point of on-device: you don't have to trust anyone, because there is nothing to trust. We trace the technical picture in more detail on the privacy page too.

GDPR-native and made in Europe

Because no personal data leaves the device, InnerPulse involves no data processing in the GDPR sense that you would have to permit. No processor, no transfer to third countries, no consent banners for tracking, because there is no tracking. Privacy here is not a compliance add-on, it falls out of the design automatically.

InnerPulse is developed in Europe. For many people, especially with sensitive health data, that is an additional trust signal: no transfer to jurisdictions with weaker data protection, because no transfer happens at all. If you want to know who is behind it, see about the app.

Optional: Apple Health and WeatherKit, and only with Apple

Two features can optionally exchange data, and it is important to be honest about what happens.

• Apple Health can be connected opt-in, for example to import sleep as a factor automatically or to write selected values back. This exchange happens between InnerPulse and Apple's Health database, both on your device. It does not go to InnerPulse servers, which do not exist.
• WeatherKit can be enabled opt-in to capture weather as a factor. This makes a one-time location lookup that runs through Apple's service. Here too, Apple is the counterpart, not InnerPulse.

Both features are explicitly optional. If you leave them off, InnerPulse exchanges nothing with anyone. If you turn them on, the only partner is Apple, whom you already deal with as an iPhone user. No additional third party enters the picture.

Face ID lock as the second line of defense

On-device protects your data from leaving the device. It does not automatically protect against someone picking up your unlocked phone. For that there is an optional app lock via Face ID or Touch ID. Even if someone uses your device, they only see your entries after a biometric confirmation. For a diary that may contain medication-related or clinically relevant entries, this second layer makes sense.

Backup honesty: the price of privacy

Here is the honest part most apps do not spell out. Consistent privacy has a price, and it is called backup responsibility.

Because InnerPulse has no cloud of its own, there is no automatic provider sync that restores your data when you switch devices. As a result:

• If you have iOS iCloud Backup enabled, the InnerPulse database is included as part of that device-wide backup. You can also exclude the app from the backup in iOS Settings.
• If you have neither iCloud Backup nor an export and you lose or break the device, the data is gone. There is no provider keeping a copy, because that is exactly the point.

That is why you should export regularly. InnerPulse offers CSV (including per-question), JSON, and a PDF report. An occasional export is not only a backup, it is also the document you can bring to a doctor or therapy appointment. That is the trade-off: maximum privacy in exchange for a little personal responsibility. For sensitive health data, many people consider it the right one.

How this differs from the usual alternatives

Most popular mood trackers make a different choice here. A gamified casual app, as described in InnerPulse vs Daylio, offers cloud backup via an account, which is convenient but means your data sits on a server. Apple's own solution, compared in InnerPulse vs Apple Health, is pre-installed and trusted, but couples your State of Mind data to iCloud Health sync.

Closest to InnerPulse's stance is a lean offline diary app, as described in InnerPulse vs Moodistory: also a one-time buy and offline. The difference is that InnerPulse additionally brings clinical screenings, the correlation engine, sub-dimensions, and Apple Watch, without giving up privacy. Being private and being feature-rich are not mutually exclusive.

Who a private, offline mood tracker is right for

InnerPulse fits if:

• You track sensitive topics, such as medication, substance use, or clinically relevant symptoms, and "nothing leaves my phone" is non-negotiable for you.
• You simply do not want another account and another cloud.
• You would rather verify the privacy promise yourself than believe it.
• You are willing to export your own backup occasionally in exchange for that privacy.

A cloud app may be the better choice if:

• Automatic cross-device sync with no effort matters more to you than pure on-device storage, and you are willing to entrust your data to a provider for it.

A short, important note

InnerPulse is a tool for self-observation and self-assessment, explicitly not a diagnosis. The included screenings are validated questionnaires and do not replace a medical evaluation. During acute distress, the app shows crisis contacts for the DACH region (AT 142, CH 143, DE 0800 numbers). These resources work offline too, because they are stored in the app and need no server.

The bottom line

A truly private mood tracker is one whose privacy you do not have to believe, because you can check it. InnerPulse runs 100 percent on your device, with no account, no cloud, no tracking, an optional Face ID lock, and an honest note about backup. Apple Health and WeatherKit stay optional and go only to Apple. The promise lives in the architecture, and with a network monitor or airplane mode you can see in minutes that it holds. Read more about the app on InnerPulse.