If you are deciding whether this is worth mentioning to a client, this page is the short factual version. No claims about outcomes, because the app cannot support them.
A single-purpose thought record on iPhone. The client works through one automatic thought at a time, in this order:
The second rating is optional and is only recorded if the client confirms it. It is not assumed to go down, and it may go up.
Nowhere. Entries are stored in a database on the device and the free-text fields — the thought, the evidence, the reframe, the takeaway — are encrypted with AES-GCM, with the key held in the device keychain. There is no account, no sign-up, no cloud sync and no server to hold anything. The app works offline.
The app can be locked behind a passcode or Face ID, which matters if a client shares a device.
“Delete all data” removes the entries, the edit history, the attached photos and voice notes, and the diagnostics log. It also rewrites the database file itself, so the deleted text is not merely unlinked and left recoverable in freed pages.
This matters more for some clients than for others. A shared or handed-on device, or a situation where someone else may go looking, is the case it was built for.
The client can export their full history as JSON at any time, on any plan, and show or send it however they choose. Since nothing syncs anywhere, an export is the only way records leave the phone — which means the client decides, every time, what you see.
Five complete reframes every three months are free, with no account and no payment card. A subscription removes that limit and unlocks summaries of recurring distortions.
The personal safety plan, the crisis resources, the app lock and the full data export are free on every plan and are never placed behind the subscription.
If something on this page is wrong, or the framing of a distortion does not match how you teach it, please say so — farid.jafarlee@gmail.com. Corrections from clinicians are the most useful mail this project gets.