Privacy
WordKept makes a diary app that unlocks apps you've chosen to shield once you complete a daily journal entry. This policy explains what data WordKept collects, why, and, just as importantly, what it never does with it.
The short version
WordKept is built local-first, on purpose. Your journal entries, voice recordings, and the list of apps you've chosen to shield are stored only on your device. There is no account, no cloud sync, and no server we operate. We have no backend and no analytics or advertising SDKs. Your entries never leave your phone.
Data we collect and why
Journal content (text and voice recordings)
What: The text you type and/or the audio you record for each day's entry, plus a best-effort on-device transcript generated from your recording.
Where it lives: Locally on your device, in an app-group storage container shared only between WordKept and its Screen Time extensions. Nothing is uploaded to any server we control.
Why: This is the core of the app: it's what determines whether your day's entry is complete.
Speech-to-text transcription
What: WordKept uses Apple's Speech framework to generate a searchable transcript of your voice recordings. This is a convenience feature only; it never affects whether your entry counts as complete.
Where it goes: Depending on your device, language, and settings, Apple's Speech framework may process audio on-device or send it to Apple's servers for recognition. That processing is governed by Apple's own privacy policy, not ours: we never see or store the audio anywhere but your device, and we don't operate any transcription service ourselves.
Screen Time selections (apps/categories you shield)
What: The list of apps and categories you choose to shield, via Apple's Family Controls framework. WordKept only ever sees Apple's opaque, non-identifying tokens for your selection, never app names, icons, or usage data.
Where it lives: Locally on your device only.
Streaks, preferences, and settings
What: Your current streak, entry-completion history (dates only, not content), and your app preferences (entry mode, unlock window length, appearance, etc.).
Where it lives: Locally on your device only.
Subscription status
What: Whether you have an active WordKept subscription.
Where it comes from: Apple's StoreKit, via
Transaction.currentEntitlements. We do not collect, see,
or store your payment card details, billing address, or other checkout
information; that transaction happens entirely between you and Apple.
We only ever read a yes/no entitlement status from Apple's own APIs.
Data we do not collect
We do not collect, and have not built any capability to collect:
Analytics or usage tracking of any kind. Advertising identifiers or ad-targeting data. Crash reports sent to a third party. Your location. Your contacts. Any data via a third-party SDK. WordKept uses zero third-party SDKs. Every framework it uses (SwiftData, Speech, StoreKit, Family Controls/Screen Time) is Apple's own, built into iOS.
We do not sell or share your data
WordKept has never sold, rented, or shared your personal information with any third party, and has no mechanism to do so. This applies regardless of where you live, including under the California Consumer Privacy Act (CCPA/CPRA). Because we do not sell or share personal information, there is no "opt out of sale" action to take, there is nothing to opt out of.
This website
Separately from the app, this page itself asks for an email address to join the waitlist. That address, the time you submitted it, and a short tag identifying which link brought you here are stored with Supabase, our database provider, so we can email you once, when the app ships. It is not sold, shared, or used for anything else. The site sets no cookies and runs no analytics or tracking scripts; fonts are served from this domain rather than a third party. Our host, Vercel, processes standard server request logs in order to serve the page. To be removed from the waitlist, or to ask what we hold about you, email the address below and we will delete the record.
Children's privacy
WordKept is not directed at children under 13, and we do not knowingly collect personal information from children under 13. Because WordKept stores journal content locally on-device rather than on any server we operate, we have no ability to identify a user's age from data we hold.
Your choices and rights
Because your journal content lives on your device, and not on any server we control, you are always in direct control of it:
Access and export: You can access and export your entries directly within the app.
Deletion: Deleting the app, or deleting individual entries within it, removes that data from your device permanently.
Screen Time access: You can revoke WordKept's Family Controls/Screen Time authorization at any time in iOS Settings.
Because we do not operate a server holding your personal data, there is no separate "request my data" process to run: the data is already on your device, under your control.
For California residents (CCPA/CPRA)
You have the right to know what personal information we hold, to delete it, and to correct it. As described above, your data lives entirely on your device, so you can exercise all of these rights directly through the app or by deleting it. We do not sell or share personal information, so there is no right to opt out of sale/sharing to exercise. We do not discriminate against you for exercising any privacy right.
For EU, UK, and EEA residents (GDPR / UK GDPR)
You have the right to access, rectify, erase, restrict, or port your personal data, and to object to its processing. Because WordKept processes your journal data solely on your own device and we never receive a copy of it, most of these rights are already satisfied by design, deleting an entry or the app achieves erasure directly. To ask a question about any of these rights, contact us using the details below. You also have the right to lodge a complaint with your local data protection supervisory authority.
Data retention
We do not retain your data on any server, because we do not operate one. Data persists on your device until you delete it or delete the app.
International data transfers
We do not transfer your data internationally, because we do not operate servers that receive it, and no data leaves your device.
Security
Journal content is stored using standard iOS app-group container protections. Because there is no WordKept-operated server, there is no WordKept-operated database to breach.
Changes to this policy
If we change what data WordKept collects or how it's used, we'll update this policy and change the effective date above. Material changes will also be reflected in the app's release notes. Features described here as not yet built (like iCloud sync, entry sharing, or Sign in with Apple) will be added to this policy before they ship, not after.
Contact us
Questions about this policy or WordKept's data practices can be sent to: wordkeptofficial@gmail.com
This policy describes WordKept's actual, current data practices as implemented in the app.