Privacy Policy

Last updated: September 27, 2026

Local-first privacy

Your records and attachments are stored on this device. Exporting, sharing, or explicitly requesting a PCC analysis sends only the content selected for that action.

Information stored on your device

The app stores the information you choose to enter, including records, dates, descriptions, categories, people, witnesses, locations, notes, linked evidence metadata, and app settings.

Attachment files that you add are copied into the app's private local storage. ZIP data packages and PDF reports are generated locally from data already saved on your device.

Onboarding, disclaimer acceptance, app-lock preferences, retry cooldowns, and premium entitlement state may be stored in device settings. New passcode verifiers are stored in this device’s Keychain. Existing verifiers are migrated after a successful unlock. The passcode itself is not stored. Face ID authentication is handled by iOS.

Information not collected by us

The app does not collect your workplace records, attachments, contacts, location, photos, analytics, advertising identifiers, or diagnostics for developer-operated analytics, advertising, remote storage, or tracking.

We do not sell personal information, use third-party advertising SDKs, or track you across apps and websites.

Purchases

Premium purchases and subscription status are processed by Apple through StoreKit and the App Store. We do not receive your payment card details.

The app may store a local premium-active flag so it can unlock paid features after App Store verification.

On-device and optional private cloud AI

The app may use on-device AI to help identify factual details already present in the record description you entered.

The bundled Qwen3.5 model analyzes notes entirely on your device. It does not download model files or send your notes to Qwen or Hugging Face.

On-device suggestions run locally. On iOS 27 and supported devices, you can also request an analysis with Apple Private Cloud Compute.

When you confirm a single-note PCC analysis, the current note is sent to Apple for processing. In guided capture, after you choose PCC and agree to continue, the current conversation, source excerpts, draft and review states are sent for each requested step. With Qwen, that processing stays on your device. Attachments and other records are not included. We do not operate an AI server. Model comparisons use fictional test notes. PCC requires network access and is subject to Apple account usage limits.

Direct Quick Table entry does not require a model. Saved tables retain complete editable field values, including long text, on this device. Full data exports include these values; PDF reports use the complete confirmed event description. Choosing guidance for an existing record provides that record's current text to the selected model after consent; other records and attachments are not included. Direct table edits do not automatically rewrite an existing conversation.

PDF reports label times and wording that you marked as approximate in Quick Table. Returning to a saved record checks for a newer locally autosaved conversation before showing the continuation notice; this does not send data to a model.

Guided capture separates original fragments, model proposals and user-confirmed items. Only confirmed items are transferred to Quick Table. Health details are excluded from that transfer and reports unless you enable their inclusion. Full data exports of saved records include private guided-session data, including source fragments and health information. PDF reports do not include the private conversation transcript.

After you continue from the processing notice, conversation state is saved automatically on this device. Unsent text is stored separately and is not included in model requests until you submit it. Text edits are saved after a short pause in typing; leaving the conversation or moving away from the app triggers an immediate save attempt. Model replies, submitted messages and review changes also trigger saves. Storage failures are shown with a retry action. Reopening a conversation does not automatically start model inference.

Standalone conversations use iOS file protection and are excluded from device backups and the full data export. Applying confirmed items and saving a record stores the source/draft/review session and continuation metadata with that record; full data exports include this private data, including unsent text. Saving does not share it.

Storage management provides separate controls for deleting saved conversations and clearing disposable export copies. Automatic/manual temporary-file cleanup is restricted to app-generated PDF/ZIP export copies older than 24 hours; it does not remove conversations, records, evidence attachments or bundled Qwen resources. Copies saved outside the app are not affected.

Editing a source invalidates linked model items; deleting it removes its retained revisions and linked items in that draft. Direct edits in Quick Table are independent user copies; exported copies and separately saved drafts are not removed by deleting a source elsewhere. Delete those copies separately if needed. The guide offers bounded steps and a review break; continuing is your choice. It does not determine whether bullying occurred or provide diagnoses or legal conclusions.

Exporting and sharing

When you export or share a ZIP data package, PDF report, or attachment, you choose the destination. The selected destination, such as Files, Mail, Messages, cloud storage, or another app, handles the copy you share under its own privacy practices.

Data export packages may include records, evidence metadata, people, witnesses, collection metadata, and app-stored attachment files.

Exported files remain wherever you save or share them until you delete them there.

Country-specific resources

The app may use your device region setting to choose a default country or region for external resource lists.

This does not use GPS, precise location, or Location Services. You can change the selected country or region in the resource list, and the app may remember that preference on this device.

Deletion and control

You can delete individual records, attachments, and all local evidence data in the app. Deleting all local evidence data removes saved records, related-record groups, people, witnesses, attachment records, app-stored attachment files, and app-created export caches, and standalone guided drafts from this device.

Deleting local evidence data does not delete files you already exported or shared outside the app. Removing the app from your device removes app-local data according to iOS behavior.

EU/EEA and UK privacy rights

If privacy laws such as the GDPR or UK GDPR apply to you, you may have rights to request access, correction, deletion, restriction, objection, or portability for personal data that we actually receive or control.

Because workplace records, attachments, AI suggestions, and reports are stored locally on your device and are not sent to us, we cannot access, export, correct, or delete those local records for you remotely.

For personal data you choose to send through support channels, you can contact us through the support link to make a privacy request.

Children

This app is not directed to children under 13, and we do not knowingly collect children's personal information.

Changes and contact

We may update this policy when app features or data practices change. The latest version should describe the current behavior of the app.

For privacy questions, use the App Store support link or visit the support page.