WorkplaceLog Privacy Policy

Effective date: 2026-04-25 · Last updated: 2026-04-25

1. Who we are

WorkplaceLog is published by an independent iOS developer (Apple Developer Team ID ZM8LF8494F). For any privacy-related question, write to captainlongevity@gmail.com.

2. Information we do not collect

We do not collect, transmit, store on a server, sell, share, or use to train any model:

• Your incidents, descriptions, exact quotes, involved-person names, witness names, locations, severities, or pattern notes
• Your HR complaint records, outcomes, investigator names, or acknowledgment dates
• Your retaliation entries, days-since-complaint calculations, or associated witness lists
• Your before-vs-after comparison entries across any category
• Your witness directory, contact info, willingness levels, or which incidents each witness saw
• Your communication log entries (emails, meetings, phone calls with HR, management, or legal contacts)
• Your emotional-impact daily journal (anxiety, sleep, physical symptoms, therapy notes)
• Your employer name, position, supervisor name, HR contact name, or state of employment
• Screenshots, photos, or any other media you attach to any record
• Your name, email, phone, or any account identifier
• Device identifiers (IDFA, IDFV) for advertising or tracking purposes
• Location data
• Crash reports or analytics events sent to any third party

3. Information stored on your device

All journal data you enter is stored locally on your iOS device using Apple's SwiftData framework. This data is included in your iCloud or iTunes device backup if you have device backup enabled. We do not have access to your device backups; only Apple does, under their published privacy terms.

4. On-device processing

Features process data locally on your device only:

• EEOC deadline calculation uses your last incident date and your selected US state to compute the 180-day or 300-day filing window. The computation is a plain Swift calendar operation, not AI, and runs entirely on-device.
• Retaliation days-since-complaint is computed by subtracting the filing date from the retaliation date on-device. No remote service is involved.
• Evidence PDF and Timeline PDF generation (Pro) runs on-device via PDFKit. The resulting file is saved only to your chosen destination (Files, Mail, AirDrop, etc.); WorkplaceLog does not send it anywhere.
• CSV export (Pro) generates a file on-device. No content is transmitted.
• Deadline reminders and EEOC deadline alerts (Pro) are scheduled via Apple's UserNotifications framework and fire locally on your device. Notification text is intentionally neutral ("Reminder") and never contains "EEOC", "harassment", "workplace", or any other domain vocabulary so that a lock-screen glance by a coworker or manager cannot disclose the app's purpose.
• Home screen widget (Pro) reads local data via an App Group container and renders only numeric values (days since last incident, days to deadline). It never displays domain vocabulary for the same reason.
• App Lock (Pro) uses Apple's LocalAuthentication framework with a 0-second timeout. Your Face ID or Touch ID biometric data never leaves Apple's Secure Enclave; the app only receives a success or failure signal.

5. Subscriptions and StoreKit

WorkplaceLog offers an optional Pro subscription via Apple's StoreKit 2. When you subscribe, restore a purchase, or when the app verifies your entitlement, your device communicates directly with Apple's servers. WorkplaceLog receives only the entitlement status (active or inactive) and a purchase identifier. We do not see your Apple ID, payment method, billing address, or transaction history. Apple's handling of subscription information is governed by Apple's Privacy Policy.

6. Permissions the app requests

• Photo Library — only when you tap "Import photo" on an incident, HR complaint, or retaliation entry (Pro).
• Face ID — only after you enable App Lock in Settings (Pro).
• Notifications — only after you enable deadline reminders or EEOC deadline alerts.

WorkplaceLog does not request Camera, Microphone, Location, Contacts, Calendar, Health, or Bluetooth permissions. It has no reason to. You can revoke any granted permission at any time in iOS Settings > WorkplaceLog.

7. Children's privacy

WorkplaceLog is not directed to children under 13. We do not knowingly collect any information from anyone, including children. The app's age rating reflects this.

8. Data retention and deletion

Because all data is stored only on your device, you control retention completely. To delete all journal data, use Settings > Delete All Data inside the app, or delete the app from your device. There is no remote copy for us to delete. The app has no "close my account" flow because there is no account.

9. Sensitivity of workplace documentation

We recognize that documentation of workplace harassment, discrimination, or retaliation is among the most sensitive personal data imaginable — a user being identified by their employer as "building a case" can trigger immediate retaliation or termination. The design of this app reflects that: no account, no cloud, no AI, no analytics, Face ID lock with 0-second timeout (Pro), neutral notification text, numbers-only widget, and a neutral app icon. If the app ever introduces a feature that would change how data is handled — for example, an opt-in cloud backup — we will update this policy and surface the change in the app before you can use that feature.

10. Not legal advice

WorkplaceLog is a personal documentation tool, not a legal service. The employee-rights reference content in the app is general information sourced from EEOC.gov and public legal-education materials and does not constitute legal advice. For advice about your specific situation, consult a licensed employment attorney in your jurisdiction.

11. International users

The app does not transfer your data internationally because it does not transfer your data anywhere. The app is published in English and is primarily marketed in North America. US federal employment law (Title VII, ADA, ADEA, EPA) and state employment law are the frames of reference for the in-app rights guide and EEOC deadline calculator.

12. Changes to this policy

If we ever change how the app handles data, we will update this policy and surface the change in the app before you can use that feature. The "Last updated" date at the top of this page reflects the most recent revision.

13. Contact

Privacy questions: captainlongevity@gmail.com