This comparison looks at jurn.ee, ProgressLens, Inner Sight, Lugelo, and Penzu through the questions that matter when photos, reflections, measurements, or voice notes are personal: does it need an account, where does the working copy live, what visual record can it hold, and how can you leave?
jurn.ee publishes this page and appears in the matrix. That conflict is visible.
We selected products whose first-party pages describe local-first progress photos, offline visual reflection, private visual journaling, or image-rich online journaling. Lugelo and Penzu are included as cloud contrasts; they are not local/offline equivalents. This is a documentation comparison, not a hands-on security audit, price ranking, or affiliate buying guide.
Claims on this page were checked against the linked primary sources on . Where a publisher shows a last-updated date, it is recorded in the source ledger. Where no revision date is shown, that absence stays explicit.
Read across one row. A feature count hides the tradeoffs.
| Product / documented focus | Account and first copy | Offline or sync | Visual record | Export and recovery | Constraint to check |
|---|---|---|---|---|---|
| jurn.ee local-first transformation journal |
The privacy page says moments, photos, notes, corrections, templates, and BodyTrail setup live in app or browser storage on the device unless a chosen feature sends data out. | Plus offers an optional encrypted backup after the user chooses it. The recovery key stays with the user; the reviewed privacy page does not promise a separate offline mode. | Camera-first entries for meals, workouts, body check-ins, and progress moments, with lightweight corrections and visual receipts. | Plus documents portable backup/import and encrypted sync. The public pages do not name an open interchange format. | Fits a repeated visual-proof routine; device/browser access and user-held key recovery remain part of the responsibility. |
| ProgressLens photo check-ins and measurements |
The official page calls the product private, on-device, and local-first for photos and measurements. Whether an account is required is not stated on the reviewed page. | A local backup of photos and measurements is documented. Offline behavior, cloud sync, and backup encryption are not stated on the reviewed page. | Consistent photo check-ins, bodyweight/waist/optional measurements, matching comparisons, and optional sharing. | A backup is documented, but its file format, restore steps, and whether every piece of metadata survives are not stated. | The reviewed scope is centered on progress check-ins; a broader journal for meals, workouts, or long-form notes is not described. |
| Inner Sight offline visual reflection |
No account is required. The official FAQ says text reflections, voice notes, and feeling tags are stored on the device and are not uploaded to an Inner Sight server. | Core journaling, voice notes, timeline viewing, and PDF export work offline. There is no Inner Sight cloud journal or automatic server backup; purchase/restore needs a network connection. | Each entry is paired with a bundled painting fragment. The reviewed sources describe reflection, feeling tags, and voice notes; user-photo capture is not described. | PDF export/share is documented. Deleting the app removes journal content unless a device-level backup exists, so export is the stated recovery path. | A fit for an offline reflection ritual; it gives up cross-device sync and is not documented as a progress-photo tracker. |
| Lugelo cloud memory stories and collaboration |
Lugelo’s privacy policy says an account is required for core features and that entries/pages/messages are retained on the service. Journals are private by default but can be shared. | The product page documents automatic sync across devices. The detailed FAQ says data is encrypted in transit; the homepage also displays an end-to-end-encryption badge, so the scope of that claim is unclear in the reviewed sources. | Photos, video, audio, written Moments, invited contributors, and a visual chronological Memory Lane across iOS, Android, and web. | The product page mentions eBook export. The reviewed pages do not specify whether a complete archive includes original media, nor the exact recovery format. | Fits shared, cross-device storytelling; it does not match a no-account or device-only requirement. AI features may process content when a user asks for them. |
| Penzu online private writing journal |
Penzu describes itself as an online journal with web, iOS, and Android access. Its about page describes storing thoughts in the cloud. | The reviewed sources document account/cloud use and optional encrypted journal locking, not an offline-first mode. Encryption locking is a Pro feature and uses a journal password that Penzu cannot recover. | Photo uploads, custom covers/backgrounds, tagging, search, and long-form entries are documented; the official photo help page describes uploading or embedding an image. | PDF export is documented for Pro. Encrypted entries are not searchable, and the reviewed sources do not specify a complete photo-inclusive archive format. | Fits online writing with account continuity and entry controls; offline behavior and a local-first visual trail are not established by the reviewed sources. |
Unknown is a useful result when the source is silent.
The official page documents a local backup, but not its encryption, file structure, restore workflow, account model, or offline behavior. Ask for those details before treating “local backup” as a complete continuity plan.
The FAQ documents PDF export and warns that deleting the app removes content unless a device-level backup exists. The reviewed sources do not describe cross-device sync or a structured journal export.
The homepage shows an end-to-end-encryption badge, while the detailed FAQ and privacy policy establish encryption in transit and account-held journal content. The reviewed sources do not let this page conclude that all journal content is end-to-end encrypted.
Penzu documents cloud storage, account access, entry locks, and PDF export. The reviewed sources do not establish offline writing, a local-only first copy, or a complete export that preserves every photo and structured field.
jurn.ee’s privacy page says the journal stays in device storage unless a chosen feature sends data out, and that the Plus recovery key stays with the user. The device, browser profile, chosen meal-scan action, and key are still part of the threat model.
Before committing sensitive photos, add a few representative entries, test a photo-inclusive export, remove and restore a copy, check access on an unlocked device, and read the current privacy documentation again.
Start with the job and the recovery tradeoff, not a star rating.
ProgressLens documents consistent photo check-ins, measurements, matching comparisons, and local backup. jurn.ee adds meals, workouts, receipts, and a broader transformation journal model.
Inner Sight documents no-account journaling that works offline, with voice notes and PDF export. The trade is that a lost or deleted device is not automatically restored by the maker’s cloud.
Lugelo documents invited contributors, rich media, web access, automatic sync, and eBook output. The trade is an account/cloud model that needs a more careful encryption and sharing review.
Penzu documents browser/mobile access, photo uploads, entry locks, and PDF export. The trade is that its reviewed materials describe an online account journal, not a local/offline visual trail.
jurn.ee is shaped around meals, workouts, body check-ins, and progress moments stored locally first, with optional encrypted Plus backup. The trade is that recovery depends on the device, export, and user-held sync key.
For a wider look at Day One, Apple Journal, Journey, Diarium, and jurn.ee, read the general private journal app comparison alongside this narrower visual-journal page.
These are the pages used for the matrix, not review aggregators.
If a product page changes, send the exact claim and a current first-party source to the resource editor. The next review should update the date or mark the claim unknown; it should not silently fill gaps with assumptions.