Your data

WorkSealed keeps your work data on your Mac. It never syncs your data or copies it to anyone’s cloud. You choose which invoice packages, backups, or support messages to share. Optional external timestamping sends only a digital fingerprint of a sealed audit block to a timestamp service.

What WorkSealed records

WorkSealed saves the details you enter, such as clients, projects, tasks, rates, and invoices. When you start tracking a task, it also records:

When tracking starts and stops, and periods of activity and idle time.
Which app you are using.
The window title, if you grant the optional macOS permission.
Counts of key presses and mouse events, used to distinguish active time from idle time.

It never records what you type, screenshots, audio, clipboard contents, or file contents. There are no ads, behavioral analytics, automatic crash-report uploads, or telemetry sent to the developer.

Tracking begins only when you start a task. You can stop it at any time, exclude apps or window titles using Raw Data Filters, and revoke permissions in macOS System Settings. Tracking still works without window-title permission.

What stays on your Mac

Your clients, tasks, work logs, invoices, and settings are stored locally. WorkSealed uses them on your Mac to track time, calculate charges, seal records, and create invoice packages. No WorkSealed account is needed, and we do not hold a copy of your database.

This also means we cannot look up your work records, recover them for you, or delete them remotely. You manage your data and backups yourself.

What external timestamping sends

If you enable external timestamping, WorkSealed sends only the digital fingerprint (hash) of each sealed audit block to an independent Time Stamping Authority (TSA). The TSA returns a signed timestamp receipt, providing evidence that the block existed by that time.

Client names, task names, rates, window titles, and work-log contents are not sent to the TSA. The service can see your IP address and the time of your request.

You can choose Offline only or disable timestamp providers in Settings. Tracking, sealing, and invoicing still work without external timestamps. Learn how independent timestamps work.

An invoice package contains the invoice, its supporting work records, signatures, any timestamp receipts, and a verification page. It contains information about the billed work, so review the package before sending it to a client.

WorkSealed saves the export to a location you choose. You decide who receives it and how to send it. Your client can unzip the package and open the verification page in a browser. The checks run on their computer, without an account or an upload, and work offline.

If you contact support, we receive the message and attachments you choose to send. Your email provider and ours process that email. See what to include in a support request.

How backups work

Use Settings › Backup to save a backup to a location you choose. Keep track of where you store these copies and who can access them. If you put a backup in a folder synced by another service, that service controls the syncing.

A backup is a separate copy. Deleting records in WorkSealed does not remove them from existing backups. Delete any backup copies you no longer want from each location where you stored them.

How to delete your data

Records remain until you delete them or an enabled retention rule removes them. Deleted items may stay in the Recycle Bin until you purge them or their configured retention period expires. Purging removes the records from the active database, while keeping the audit information needed to explain the deletion.

Uninstalling the app may leave its stored data behind. To remove your data, purge the records you no longer want, remove any remaining WorkSealed application data, and delete your backup copies. Exported invoice packages are separate copies too; deleting records in the app does not delete packages you have already saved or sent.