Privacy Policy
Effective date: 13 October 2026
WorkProof is built local-first. Your jobs, photos, client details, signatures and reports never leave your device unless you share them, and we do not sell your data or use it to track you. There are no accounts and no usage analytics. The only information that leaves the app is an anonymous subscription record and Apple Ads attribution, described below.
What the app stores
Everything you create in WorkProof — jobs, photos, client details, materials, prices, signatures, and PDF reports — is stored only on your device, in the app's private storage. None of it is ever uploaded to us or to any third party.
Permissions and when they are used
- Camera — only when you tap to take a before/after photo. Photos stay on your device.
- Photo library — only when you choose to import existing photos into a job or pick a logo for your reports.
- Location (While Using) — a single location fix may be recorded when you start a job, take a photo, or complete a job, so reports can note where work was documented. WorkProof never tracks location in the background. Precise coordinates appear in a report only if you enable that option in Settings.
- Face ID / Touch ID — only if you enable App Lock, to unlock the app. Biometric data never leaves the system's secure enclave and is not accessible to WorkProof.
Purchases
The optional WorkProof Pro subscription is billed entirely by Apple through your Apple Account. We do not receive or store your payment details. Subscription status is verified on-device using App Store receipts.
To manage and analyse subscriptions (for example trials, renewals, cancellations and refunds), the app includes the RevenueCat SDK, and RevenueCat, Inc. processes an anonymous subscription record on our behalf. The SDK connects to RevenueCat when the app starts, whether or not you subscribe, and sends a random app user ID created on your device, the device's vendor identifier (IDFV), your subscription's App Store transactions if you have any (product, price, currency, dates and App Store country), and technical details such as the app and iOS version, device model and language. As with any internet request, RevenueCat also receives your device's IP address, and its SDK may send technical diagnostics about its own operation. The record contains no job content, is not linked to your identity, and is not used for tracking. RevenueCat only records purchases; it does not decide whether Pro is unlocked, so Pro keeps working offline. RevenueCat is based in the United States; see RevenueCat's privacy policy.
Apple Ads attribution
Once per installation, the RevenueCat SDK obtains an attribution token from Apple's AdServices framework and sends it to RevenueCat, which uses it to ask Apple whether WorkProof was installed from an Apple Ads campaign and, if so, which campaign, ad group and keyword. This uses no advertising identifier (IDFA), does not track you across other companies' apps or websites, and WorkProof never asks for tracking permission.
Third-party services
- Apple — App Store purchases and the AdServices attribution token, under Apple's privacy policy.
- RevenueCat, Inc. — the anonymous subscription record and Apple Ads attribution described above, under RevenueCat's privacy policy.
WorkProof includes no other third-party SDKs or analytics tools.
Sharing reports
When you share a PDF report, Proof Pack, or data export, it is sent through the app or service you choose (Mail, Messages, Files, etc.). That transfer is under your control and subject to the chosen service's terms.
Your data, your control
Settings → Privacy & Data lets you export everything as a ZIP archive or permanently delete all data at any time. Deleting the app also deletes all of its data from the device. The only exception to both is two counters kept in the device's Keychain — how many jobs you have completed and the number of the last report issued — so that the free allowance and report numbering stay correct after a reinstall. They contain no job content, never leave your device, and are not synced to iCloud. The anonymous subscription record described under Purchases is not part of the export; deleting all data in the app leaves the RevenueCat SDK's local copy of it in place (deleting the app removes it), and neither action deletes what RevenueCat has already received.
Children
WorkProof is a professional tool and is not directed at children under 13.
Changes
If this policy changes, the updated version will be published at this address with a new effective date.