Privacy policy

Effective October 10, 2026.

No account and no server

There is no account and no server. The app connects to only two places: the App Store, for the purchase, and Sentry, for anonymous reports of crashes, freezes and unexpected errors. Both are described below. Whendoo collects no analytics and does no tracking. It has no advertising identifiers, and Sentry's crash reporting is the only third-party code in it that sends anything.

Where your data lives

Every activity, category, completion, pause and setting you create is stored on your iPhone. It lives in the app's own storage and in a container the app shares with its Home Screen widget, so the widget can show and complete activities. None of it is sent anywhere, and there is no sync between devices.

When you use Export data, the app hands your data to the iOS share sheet as JSON. Where it goes next, whether to another app or a message, is your choice, and this policy doesn't cover it.

Apple Health

If you turn on Sync Apple Health workouts and grant access, Whendoo reads workout records from Apple Health. It uses them for one purpose only, which is to match a workout to an activity you've linked to that workout type and complete the activity for you. Health data is only read, and it never leaves your iPhone. It is never shared with anyone, and never used for anything else, including advertising or marketing.

You can revoke Health access at any time in Settings → Privacy & Security → Health → Whendoo on your iPhone. Whendoo keeps working without it, and you complete those activities yourself.

Purchases

The one-time Whendoo Unlimited purchase is handled entirely by Apple. I never see your name, your payment details or your Apple Account. The app stores one record of it, a flag on your iPhone saying whether the unlock is owned.

Crash reports

The app sends anonymous reports of crashes, freezes and unexpected errors to Sentry, a crash reporting service, so I can find and fix the problem. Each report describes the device and the app: the model, its memory and storage, the iOS and app versions, the error message and the point in the code where it happened. It carries no user or device identifier and no IP address, so it can't be linked to you, and the app strips quoted text, such as an activity or category name, out of error messages before sending them. These reports are on by default, and you can turn them off under Settings → Send crash reports.

Retention and deletion

Your data stays on your iPhone until you delete the activity or delete the app. Deleting an activity also deletes its completion history. Your iPhone's own backup, whether iCloud or a computer, includes Whendoo's data the same way it includes every other app's, so a new phone restored from that backup has it too. None of it is held on a server, because there isn't one, so there is nothing for me to delete on your behalf and no request you need to make. Sentry keeps the anonymous reports above for a limited time and then deletes them; since they carry nothing that identifies you, there is no way to pick out yours.

Children

Whendoo collects no personal information from anyone, whatever their age. The anonymous reports above describe the app and the device, not the person using them.

Changes to this policy

If this policy changes, the new version will be posted on this page with a new effective date.

Contact

If you have a question about privacy, email support@whendoo.app.