yeah I think plugging your diary app into an encrypted storage location is the best bet. you could use Veracrypt or similar to make an encrypted volume, mount it before writing in your diary, and unmount after you're done. encrypted /home is probably already good enough, just make sure not to leave your computer running while you're not at it