Last updated: September 4, 2026
What we collect
We do not collect personal information for our own use. workinOn has no analytics, no advertising SDKs, and no third-party trackers. The only server workinOn talks to is the workinOn sync service, and only when you add a GitHub tab.
What stays on your device
- Your list — stored in a local database in the app's sandbox.
- Photo references — workinOn stores Photo Library asset identifiers only, not photo content. Photos remain in your Photo Library.
- Chat with the assistant — your text input is processed by Apple Foundation Models on-device. It is never sent to any external service by workinOn.
- App Group data — the home-screen widget reads a small JSON snapshot of your list from a shared container on your device.
Voice dictation
When you use the mic button to dictate, workinOn sends audio to Apple's speech recognition service (SFSpeechRecognizer). Apple may process this audio on its servers according to Apple's privacy policy. workinOn itself never receives, stores, or transmits your audio — it only receives the resulting text transcript. You can decline microphone or speech recognition permission in Settings → Privacy & Security and still use the app by typing.
Optional integrations
If you choose to use them, certain features may transmit data:
- GitHub tabs (optional) — when you add a GitHub tab, workinOn sends the GitHub access token you enter, the repository or user you chose, and this device's push token to the workinOn sync service (operated by 1041Soft on Fly.io). The service polls GitHub on your behalf every few minutes and pushes pull request, review, and issue summaries to your device. Tokens are stored encrypted at rest, used only to call the GitHub API for your tab, and never shared. Deleting the tab in the app removes the registration from the service; you can also revoke the token at any time in GitHub settings.
- Push notifications (optional) — if you opt in to push sync from a server you control (e.g. your own nagzerver instance), that server delivers list updates via Apple Push Notification Service. workinOn registers a device token with the server you specify; we do not operate any such server.
- URL scheme & Share Extension — when other apps on your device post items via
workinon://or the share sheet, the data they pass enters your local list and stays on your device. - Apple Intelligence — the on-device Foundation Models framework processes your text locally. No data leaves the device for AI processing.
Photo Library access
workinOn requests permission to read your Photo Library so you can attach photos to list items. We use Apple's PHAsset identifiers and never copy or transmit photo data. You can revoke access at any time in Settings → Privacy & Security → Photos.
Notifications
Notification permission is optional. We use it only to deliver list updates triggered by your own integrations.
Children
workinOn is not directed at children under 13. We do not knowingly collect data from any user.
Data retention & deletion
Your list and photos live on your device. To delete them, uninstall the app — iOS removes the app's local data automatically. If you used a GitHub tab, delete the tab before uninstalling, or email us and we will remove the registration from the sync service.
Changes to this policy
If this policy changes, the updated version will appear at this URL with a revised "Last updated" date.
Who we are
This app is published by 1041Soft LLC, an Illinois limited liability company (Wilmette, Illinois). 1041Soft LLC is the developer of record on the App Store and the party responsible for this policy.
Contact
Questions about privacy? Email midnightrambler@gmail.com or open an issue at github.com/billdonner/workinon.