I totally understand. I'm the kind of person who keeps a diary inside an encrypted true-crypt folder, so security and privacy have been my primary concern from day one. The main reason I'm deploying this as a web-service rather than a downloadable app is so that you can track things from anywhere (without having to be technical enough to manage your own servers). It's much harder to do that with excel or true-crypt, even if you use it with things like google-docs or dropbox.