Legal

Privacy Policy

Effective date: June 11, 2026 · Applies to Workflo for iPhone

The short version: Your goals, habits, and journal entries live on your device and are never uploaded to any server. The only data that leaves your iPhone is anonymous usage analytics — no personal information, no tracking, and you can turn it off in Settings.

1. Who We Are

Workflo is developed and published by Jamieson Rothwell, operating as Lymegrove.

If you have any questions about this policy, see the contact section at the bottom of this page.

2. Data Stored on Your Device

All content you create in Workflo is stored locally on your iPhone using Apple's SwiftData framework. This includes:

Your goals and their descriptions
Your focus habits, daily counts, and streak data
Your journal entries and sentiment flags
Your app preferences and settings

On-device None of this content is transmitted to Lymegrove or any third party. It is never uploaded, backed up to our servers, or used for any purpose outside your device.

3. Anonymous Usage Analytics

To understand how people use Workflo and improve the app, we collect anonymous, non-personal usage data. This is powered by Umami, a privacy-focused analytics tool that we self-host on our own server. Umami does not use cookies, does not fingerprint your device, and does not track users across apps or websites.

What is collected

Data point	Example	Purpose
Screen viewed	/views/dashboard	Understand which features are used
Event name	habit_logged, goal_created	Understand feature adoption
App version	1.2.0.14	Track impact of updates
Platform	iOS	Platform-specific improvements
Device screen resolution	1290x2796	Optimise layouts for screen sizes
System language	en_CA	Localisation prioritisation
Environment	App Store / TestFlight	Separate test traffic from real usage

Anonymous No personal information is ever collected. We do not collect your name, email, Apple ID, location, or any content from your goals, habits, or journal. Analytics payloads contain no data that can identify you as an individual. Apple's NSPrivacyTracking key is set to false in our privacy manifest.

Opting out

You can disable analytics at any time in Workflo → Settings → Analytics. When disabled, no data is sent. The setting takes effect immediately.

Opt-out Analytics are on by default to help improve the app, but you are always in control. Disabling analytics has no effect on the features or functionality of Workflo.

Analytics server

Analytics data is sent to a self-hosted Umami instance operated by Lymegrove. The server is not shared with any third party. Event data is retained for as long as reasonably necessary for product development purposes, and is never sold or shared.

4. iCloud and Data Storage

Workflo does not use iCloud or any external cloud services for data synchronization. All application data remains sandboxed locally on your physical device.

5. Children's Privacy

Workflo is not directed at children under the age of 13 (or the applicable age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has submitted personal information through the app, please contact us so we can take appropriate action.

6. Your Rights

Because your personal content (goals, habits, journal entries) never leaves your device, you have complete control over it at all times. You can delete any or all of it directly within the app, or by uninstalling Workflo.

For the anonymous analytics data we hold, you may request access to or deletion of data associated with a session identifier by contacting us. Because analytics data is anonymous, we cannot link it to you without additional identifying information you provide.

If you are in the European Economic Area, United Kingdom, or California, you have additional rights under GDPR, UK GDPR, or CCPA respectively. We honour these rights and will respond to verified requests within 30 days.

7. Security

Your on-device data is protected by iOS's built-in app sandboxing and, where applicable, device encryption. Analytics data in transit is sent over HTTPS. We take reasonable technical measures to protect data on our analytics server, but no method of transmission or storage is 100% secure.

8. Changes to This Policy

We may update this privacy policy from time to time. When we do, we will update the effective date at the top of this page. If we make material changes, we will notify users through the app or the App Store update notes. Continued use of Workflo after changes are posted constitutes acceptance of the updated policy.

Questions?

We're happy to answer any questions about how Workflo handles your data.

privacy@lymegrove.com