Stempel Privacy Policy

This policy applies to the Stempel app for iPhone and iPad. Stempel is a personal work-time tracker developed by Loadchange. This policy describes data handling inside the app; services you choose outside the app are governed by their own policies.

Loadchange does not collect, receive, sell, or share personal data or usage data from Stempel. There is no Stempel account and no developer-operated backend.

Stempel stores the records needed to provide its features. A record can include its start and end time, active timing segments, duration, an optional note of up to 140 characters, modification time, and deletion state. Apple’s SwiftData framework stores these records in the app’s private container.

Preferences such as daily and weekly goals, selected workdays, language, iCloud choice, current timer state, and dashboard summaries are stored locally with UserDefaults. An Apple App Group makes the minimum required timer and summary state available only to the Stempel app and its bundled widgets, Live Activities, Shortcuts, and App Intents extension.

iCloud synchronization is enabled by default and can be turned off in Stempel Settings. When it is enabled and iCloud is available, SwiftData uses Apple CloudKit to synchronize work records through the private database associated with your Apple ID. This requires network access.

Synchronized records are handled by Apple’s iCloud service and are not copied to a server operated by Loadchange. Apple’s terms and privacy policy apply to its processing. If iCloud is unavailable or you turn synchronization off, Stempel remains usable with local storage.

Turning synchronization off or uninstalling Stempel does not necessarily delete records that were previously synchronized to iCloud. Those records are controlled through your Apple ID and Apple’s iCloud data-management facilities and may become available again if you reinstall the app and enable sync.

CSV access occurs only after you choose an import or export action. On import, Apple’s system file picker gives Stempel temporary access to the one file you select. On export, Stempel creates a CSV containing record dates, start and end times, durations, and notes.

When you use Apple’s share sheet, the file is passed to the app or service you choose. Apple and the selected destination process it under their own privacy policies. Loadchange does not receive the file or learn where you sent it.

Stempel’s timing, editing, goals, widgets, Live Activities, and CSV features work locally. The app’s only data-sync network activity is the optional iCloud/CloudKit synchronization described above. App purchase, Family Sharing, download, and updates are provided by Apple through the App Store and are handled under Apple’s terms and privacy policy.

You can delete individual work records in Stempel, with a brief undo period. When iCloud sync is active, those deletions are synchronized through CloudKit. Stempel may temporarily retain a local record identifier and deletion time to stop an older synchronized copy from reappearing; this marker stays on your device and is not sent to Loadchange.

Deleting Stempel removes its local app container from that device, subject to Apple’s device-backup behavior. As explained above, uninstalling the app does not guarantee deletion of data already synchronized to your private iCloud storage.

Stempel includes an Apple privacy manifest. It declares UserDefaults access under required-reason category CA92.1, no tracking, no tracking domains, and no collected data types. UserDefaults is used only for app and shared-extension preferences and state that are accessible to Stempel.

Local data is protected by the iOS app sandbox and the security mechanisms of your device. Synced data is protected through your Apple ID and Apple’s iCloud infrastructure. You control whether iCloud sync is enabled and when records are imported, exported, edited, or deleted.

Because Loadchange does not hold a Stempel account or a developer-side copy of your records, we cannot retrieve, correct, export, or delete those records for you. The controls remain on your device and in your Apple account.

Stempel is not designed to collect personal data from children or anyone else. Loadchange does not knowingly collect personal information from children through the app.

If Stempel’s data practices change, this page will be updated and the date above will be revised. Material changes will be reflected in the app and its App Store privacy information where required.