Who is responsible
WorkNotes is provided by Mpen Apps (“we”, “us”). For privacy questions or requests, contact mpenapps@protonmail.com. For users in the EEA, we act as the data controller for the limited service data described below. Apple remains responsible for data processed independently under your Apple and iCloud relationship.
Data WorkNotes handles
- Note content and templates: stored on your device. If you enable Pro iCloud sync, Apple stores encrypted-in-transit copies in your private iCloud container so they can sync between your devices.
- Purchase data: Apple processes payment information. RevenueCat receives a pseudonymous app user identifier, product and entitlement status, transaction identifiers, country/store information, and limited technical diagnostics needed to validate and restore purchases. We do not receive your full payment-card details.
- Settings: work hours, privacy preferences, and app configuration are stored on device.
- Anonymous usage summary: Aptabase receives one app-open event and one app-suspended event for each foreground session. The suspended event contains only the session duration and aggregate feature counts (for example, whether a note was edited or a template was applied). It never includes note text, titles, dates, template text, note identifiers, account identifiers, or an advertising identifier.
- Live Activity delivery data: if you enable the automatic Live Activity, an opaque ActivityKit push token, an activity identifier, the scheduled end time, and content-free final display settings are temporarily sent to our Cloudflare service so the Live Activity can end on time. Note text and note identifiers are never sent. The record is deleted when the activity ends or is cancelled.
- Support: if you email us, we receive your email address and the information you choose to provide.
WorkNotes does not require an account and does not include third-party advertising or cross-app tracking.
Why we process data
We process limited data to provide requested app features and purchases (performance of a contract), protect and improve the reliability of the service (legitimate interests), comply with legal duties, and respond to support requests. You can stop future analytics collection by uninstalling WorkNotes and may contact us about applicable privacy rights.
Processors and international transfers
Apple provides App Store, StoreKit, iCloud, and device services. RevenueCat provides subscription validation and entitlement management. Aptabase provides privacy-oriented, aggregate product analytics. Cloudflare hosts this public policy website and may process standard web request data such as IP address and browser headers for security and delivery. These providers process data under their own terms and applicable safeguards, including contractual protections for international transfers where required.
Retention and deletion
On-device notes remain until you delete them or uninstall the app. iCloud copies follow your iCloud settings and Apple’s retention practices. Live Activity delivery records are deleted when the activity ends or is cancelled. RevenueCat purchase records are retained as needed to validate entitlements, prevent fraud, and meet accounting or legal obligations. Support correspondence is normally deleted within 24 months after the matter is closed unless longer retention is legally required.
You can delete notes in WorkNotes, remove synced app data through iCloud settings, and remove the app from your devices. Because WorkNotes has no proprietary account, there is no separate WorkNotes account to delete.
Your GDPR and privacy rights
Depending on your location, you may request access, correction, deletion, restriction, portability, or objection; withdraw consent; and lodge a complaint with your local data protection authority. Email mpenapps@protonmail.com. We may need limited information to verify and fulfil a request. EU and EEA users may also contact the supervisory authority in their country.
Children
WorkNotes is a general productivity app and is not directed to children under 13. We do not knowingly collect children’s personal data outside the platform services described above.
Security and changes
We use platform security controls, data minimisation, and private iCloud containers. No system can guarantee absolute security. Material policy changes will be posted here with a new effective date and, where required, communicated in the app.