Privacy Policy

• Session start and end timestamps (UTC).

• A per-install device identifier (random UUID generated on first launch; not your hardware serial), plus your Mac's name so you can tell devices apart.

• Pauses away from the computer, and whether you said you were working or on a break.

• Optional notes you type yourself.

• Whether you've confirmed each session as work-related.

• Bills or receipts you choose to attach on the Year screen (the file and its name), and which bills you've ticked as kept.

• Application names, window titles, or URLs.

• Screen content, screenshots, or recordings.

• Keystrokes or mouse coordinates.

• File names, paths, or contents, except a bill you choose to attach.

• Location, IP address, or network identifiers.

• Your name, email address, or Apple ID (the app uses iCloud implicitly via the system; it never reads your account details).

• Locally on each Mac in a SwiftData/SQLite database inside the app's sandbox container.

• In your private iCloud database (CloudKit .private scope), encrypted at rest by Apple. The developer cannot read any user's iCloud data — Apple's CloudKit dashboard only exposes aggregate, anonymised metrics.

WFH Diary Pro is sold through the Mac App Store. Apple handles payment. The app only asks Apple whether your Apple Account owns Pro. We never see your payment details.

The MVP ships with no third-party SDKs, no analytics, no crash-reporting services. If that ever changes, this policy will be updated and the change called out in release notes.

The app never deletes your records on its own and has no automatic clean-up. The ATO asks you to keep records for 5 years from the date you lodge your return, and you might lodge or be reviewed years after you recorded the hours, so every year stays on file. You can export any year as CSV or PDF with Pro, and you can delete all of your data at any time in Settings.

You can view all of your data in the app at any time, and export it as CSV or PDF with Pro. You can delete the app, which removes the local database; iCloud-synced records remain in your private iCloud database until you delete them via system settings or via the in-app delete function.

For questions about this policy, email support@wfhdiary.com.