Privacy

Location and motion samples are interpreted on your device to distinguish grounded exploration from uncertain or airborne movement. The durable atlas stores spatial cells, regions and summaries in the app's protected local storage. Atlas has no account and no app-owned location server.

Apple Maps supplies map imagery and place search, so those features make requests to Apple's services and are governed by Apple's privacy terms. Atlas does not upload your private world database to us. Its App Store privacy answers are verified against the release implementation.

Job records — including customer details, timestamps, materials, expenses, notes, receipts and evidence photos you choose — are stored in Job Note's protected local app storage. Job Note has no account and does not upload this work to a developer-operated server. Depending on your iPhone backup settings, local app data may be included in an encrypted Apple device or iCloud backup governed by Apple's privacy terms.

Documents and structured exports leave Job Note only when you choose a system share or email action, and then pass to the destination you select under that service's privacy terms. Camera photos are re-encoded into Job Note's own storage; the app uses Apple's system photo picker for optional existing images and does not request broad photo-library access. Job Note Pro purchases are processed by Apple through StoreKit. The app contains no advertising, analytics or tracking SDKs.

Draw names, relationships, rules, assignments and delivery status are stored in protected local app storage on your device. They are excluded from device and iCloud backups and are never uploaded to Kildal Smthng. Deleting the app deletes them.

When an organizer chooses to send a secret, the app creates a private link containing that one assignment in its URL fragment. The smthng.fun reveal page decodes the fragment locally; browsers do not send the fragment to our web server, and the page makes no further requests. The complete link still travels through the messaging or email service chosen by the organizer. Anyone who receives the link can reveal it, so it should be sent privately. Purchases are processed by Apple.

No sensors, no data at all. The app uses your speaker and your haptics, and that's the complete list. It works in airplane mode because there is nothing it could possibly send anywhere.

Face tracking runs on-device via Apple's ARKit. The camera feed and the facial expression values derived from it are processed live and thrown away frame by frame; no video is ever recorded and no face data is retained after processing. The single freeze-frame captured when someone smiles exists only in the app's memory — it is never saved to disk and never leaves your phone unless you tap share yourself. Close the app and it's gone.

Face data is never used for identification, never used for any purpose other than the game's smile detection, and never shared with or disclosed to any third party — including us. It cannot be shared, because it never leaves the device.

Static content, nothing measured, nothing stored. The app doesn't record which numbers you read, how often you open it, or anything else. There is no data — just the writing.

The microphone is used to measure loudness in decibels, live. No audio is ever recorded, stored or transmitted — the app computes a level and immediately forgets the sound. Session statistics (numbers only) stay on your phone.

Motion sensors are read live to score how still you hold the phone, then the readings are thrown away. Scores and the session table live in memory and on your phone only. Not a medical measurement of anything.

Everything you type — including wifi passwords and contact details — is encoded into the code on your phone and stored only in your on-device library. Nothing is uploaded, because there is nowhere to upload it to.

Water stores one number per day: how many glasses you logged. No HealthKit, no body data, no account. Optional reminders are scheduled locally on your phone.

Your plants, rooms and care history stay on this phone, shared with the widget through a private app group on the same device. Photos you choose stay in the app's own storage and are never uploaded. The daily digest notification is scheduled locally by iOS. The purchase is processed entirely by Apple. The app makes no network requests at all.

Your moments — a name and a date — live on your phone and in no other place, shared with the widget through a private app group on the same device. Optional approach notifications are scheduled locally by iOS. Purchases are processed entirely by Apple. The app makes no network requests at all.

Tip Split computes splits and never moves money. The app makes no network requests at all. Bill history, if you unlock it, is stored on your phone only.

Whatever you paste is counted (emoji, punctuation, the word "fine"), joked about on screen, and then it is gone — nothing is stored, nothing is sent, and the app never reads your clipboard on its own. There is no history because there is no memory. The verdicts are openly, loudly fake.

The score, the wins, and the two names you typed live on one phone and nowhere else — the app has no networking at all. Share cards are images you send yourself; nothing is uploaded by the app. Delete the app and the record is gone (we know, that's the stakes).

Birthdays (and names, if you type them) stay on your phone — the app has no networking at all. The astronomy runs against ephemeris data bundled inside the download. Saved matches are stored locally and delete with the app.

This is the one app that can ask for your location, so it gets the longest note. It asks only if you tap "Moonrise & moonset", and only for "while using the app". Everything else — the phase, the tilt, the calendar, the widgets, the whole free tier — works with location denied, because the Moon's phase is the same for everyone on Earth. Say no and nothing is nagged or degraded except that one line.

If you say yes, your coordinates are used on the phone to work out the angle the Moon rises at from where you stand, and then they are done. They are not stored beyond the calculation, not written to a file, not attached to anything, and not sent anywhere — the app makes no network requests at all, so there is nowhere for them to go. We never see them, and neither does anyone else.

The Moon itself is computed, not downloaded: the astronomy and the surface map ride inside the app. That is why it looks the same in airplane mode, on a plane, or at the bottom of a valley.

The documents, photos and scans you bring in are copied into the app's own storage on this phone and deleted when the workspace empties after a send. The finished PDF is handed to iOS' share sheet and goes only where you send it; the app keeps no copy of it. There is no library, no history and no account. The purchase is processed entirely by Apple. The app makes no network requests at all.

The camera runs on this phone and every frame it analyses stays here. The app looks at where a face is, whether the eyes are open, how sharp the picture is and how the light falls — enough to decide when to take the photo — and none of that leaves the device, is stored, or is used to work out who you are. There is no face database, no account and no upload. The finished photograph is saved to your photo library and shared only through actions you choose, and the app keeps no copy of it. The purchase is processed entirely by Apple. Links to official government guidance open in your browser, where those sites' own privacy practices apply. The app itself makes no network requests at all.

Your schedule is computed on your phone. Calendar access is optional; events from calendars you include are read locally to work out when you're free, and their titles are never stored by the app and never shown to anyone else. Connecting a person uses your own iCloud (Apple's CloudKit sharing) — not a server of ours — and the only thing that crosses is interpreted availability: busy, working, free. Never event names, never details. Disconnecting stops sharing in both directions. No account, no analytics; the App Store privacy label is "Data Not Collected."

Location and motion are read on your phone to notice when a drive starts and ends. Every trip, rule, place and report is stored locally and is never sent to us — there is no server of ours, no fleet dashboard and no account. Deleting the app deletes the logbook (export first if you need it for your records).

Mile Inbox uses Apple's mapping services to draw route maps and Apple's geocoder to turn endpoint coordinates into place names. Those features require a network connection and are governed by Apple's services and privacy terms. The app does not upload your logbook to us, and the App Store privacy label remains "Data Not Collected."

Photos are processed entirely on your phone and the app makes no network calls at all. Nothing is uploaded, nothing is analyzed by anyone, and your originals are never modified — resized copies are new files. Works identically in airplane mode.

Your birth date, time, chosen place, computed chart, preferences and saved moments stay in the app's private storage on this device. The widget reads a small local summary through an Apple app group on the same device. Notifications are computed and scheduled locally. Purchases are processed entirely by Apple. There is no account, analytics, advertising, tracking or server of ours.

Place search during setup sends the words you type to Apple Maps and receives matching places from Apple. Birth Wheel does not send your birth date, birth time, chart or saved moments with that search, does not retain the search query, and does not receive it on any server. Once a place is selected, the astronomy is computed from ephemeris data bundled with the app and works in airplane mode.

Your session, participant names and choices are stored locally on your device. If you use one phone together, they stay there. If you choose separate phones, Name Match uses your own private iCloud and Apple's CloudKit sharing — never a server of ours — to connect the session with the person you invite.

During discovery, only names you positively like cross devices so the app can find a mutual match. No, Maybe and your private reaction history remain on your phone. Decision Room submissions are coordinated inside the private iCloud share and shown to the other participant only according to the round's reveal rules. The share is available only to its owner and invited participant; Kildal Smthng does not receive its contents.

You can remove a local session in the app. The share owner can also stop sharing through Apple's iCloud controls. Deleting the app removes its local copy; copies already held in iCloud remain governed by the share owner's iCloud account until that share is removed.