WorkSealed Privacy Policy

Effective and last updated: September 25, 2026

This policy explains what information WorkSealed processes, why it is processed, when it can leave your Mac, and how you can control or delete it. “We” and “us” refer to the developer of WorkSealed.

Information processed on your Mac

WorkSealed stores information you enter or create, including clients, projects, tasks, rates, budgets, business contact details, work logs, comments, billable status, invoices, invoice templates, evidence packages, application settings, timestamp receipts, deletion history, backup configuration, and backup copies you create in locations you select.

While you actively track work, WorkSealed can also process tracking start, stop, activity, and idle timestamps; frontmost application names, process identifiers, bundle identifiers, and executable metadata; samples of the frontmost window title when the relevant optional macOS permission is granted; and counts of keyboard and mouse events used to distinguish active time from idle time.

Information WorkSealed does not capture

WorkSealed does not record the content of keys you press, screen pixels or screenshots, audio, clipboard contents, or the contents of files. It contains no advertising, behavioral analytics, crash-reporting upload, or developer telemetry service.

How information is used

Information is processed locally to track and classify time, detect idle periods, calculate billing, generate invoices and evidence, maintain the tamper-evident audit history, apply your retention choices, and perform backup or restore operations. It is not sold or used for advertising or cross-app tracking.

Permissions and consent

Tracking begins only when you start a task. Optional macOS permissions can add window-title detail or notifications, but the core tracking workflow remains available without them. You can revoke these permissions at any time in macOS System Settings. Raw Data Filters let you prevent matching applications or window titles from being captured or mined.

When information can leave your Mac

WorkSealed has no cloud account and does not upload your working database to us.

• External timestamping: If you enable it, WorkSealed sends a one-way cryptographic fingerprint of a sealed audit block to a configured timestamp authority such as FreeTSA, DigiCert, or Sectigo. Client names, task names, rates, window titles, and work-log contents are not included. The authority can observe ordinary network metadata such as your IP address and request time. You can select Offline only or disable providers in Settings.
• Exports and backups: Invoice, evidence, and backup files are written only when you request them, to a location you choose. You control whether those files are shared.
• Support: If you contact support, your mail provider and ours process the email address, message, and attachments you choose to send. Support correspondence is used only to answer and troubleshoot your request.
• App Store trial and purchases: Apple handles activation of the free trial, purchases, and purchase restoration through your Apple Account. WorkSealed reads verified transaction information on your Mac to determine trial dates and purchase access. WorkSealed does not operate an activation server or send your clients, work logs, invoices, or evidence to Apple as part of purchase verification. Apple processes App Store transactions under its own privacy policy; we do not receive your payment-card details. Starting a trial does not authorize an automatic paid purchase.

We do not give stored user data to advertising networks, data brokers, or analytics providers. Any service provider we engage to process personal data on our behalf must protect it to a standard at least equal to this policy and may use it only for the stated service.

Retention and deletion

Local records remain until you delete them or an enabled retention rule removes them. Deleted items can remain in the Recycle Bin until you purge them or the configured purge period expires. Permanent purge removes the corresponding records from the active database, subject to the integrity records required to explain that deletion. Backup files are independent copies and must be deleted separately from every location where you stored them.

Removing the application may not remove its data container automatically. Before uninstalling, purge data you no longer want and delete any remaining WorkSealed application-support data and backups. Because we do not possess your local database, we cannot delete it remotely. You may ask us to delete support correspondence by emailing the address below, subject to records we must retain for security or legal obligations.

Your choices

You can stop tracking, revoke macOS permissions, choose Offline only for anchoring, disable timestamp providers, add Raw Data Filters, delete or purge records, and delete backup files. These controls are available without creating an account or contacting us.

Security

WorkSealed uses the macOS application sandbox for its App Store edition, authenticated local communication between its processes, and macOS Keychain storage for protected secrets. No method of storage is risk-free; protect your Mac account and backup destinations with appropriate access controls.

Children and policy changes

WorkSealed is a professional productivity tool and is not directed to children. If this policy changes, the updated text, effective date, and hosted copy will be updated with an application release when required.

Contact

Questions, privacy requests, and support-message deletion requests can be sent to support@worksealed.app.

The public copy of this policy will be available at https://worksealed.app/privacy. This is a placeholder that must be published before App Store submission.