Draftlight Privacy Policy

Local-first writing app | Private drafts | Optional analytics

Effective date: September 5, 2026 | Company: Myworkingmemory LLC, a Tennessee limited liability company

1. Who We Are

Myworkingmemory LLC ("Company," "we," "us," or "our") operates Draftlight (the "App") and related support materials (collectively, the "Services"). This Privacy Policy explains what information the Services process, how it is handled, and what choices you have.

2. Short Version

Draftlight is a focused writing app for stories, essays, poems, outlines, fragments, and other text drafts. The App stores draft records—including title, manuscript text, writing category, pin state, color, and creation and update timestamps—inside the App's local storage container on your device.

The App does not require a Company account, does not send your draft titles or manuscript text to Company or a Company content server, does not include advertising, does not sell personal information, does not share personal information for cross-context behavioral advertising, and does not track you across apps or websites. Optional product analytics is OFF by default. After a successful save, the App asks once whether you want to share pseudonymous, non-content product use. Only if you choose yes does it send the allowlisted events in Section 8 to PostHog. Paid functionality does not depend on that choice.

Company may receive information when you enable optional analytics, contact Company, visit a Company website, interact with the App Store, or deliberately share content to a destination you select. PostHog, Apple, website providers, and any destination you choose process information under their own terms and policies as described below.

3. Product and Privacy Posture

The Services are designed as follows:

Different App features or data practices may require different disclosures, controls, or consents as required by applicable law or platform rules. This policy will be updated before a materially different practice is introduced.

4. Information You Create and Store

When you use the App, it may process on your device:

The device also stores your settings, successful-draft count, rating-request history, and Pro-reminder display count and dates. These local records limit repeated prompts. A reminder is a dismissible in-App card, not a push notification; its display history is not sent to PostHog. If you accept supplemental Terms, the App stores the document version and digests, acceptance time, locale, App version and build, presentation surface, and acceptance action locally. Neither a reminder nor a Terms choice enables analytics.

The App stores draft records and their attributes—including title, manuscript text, writing category, pin state, color, timestamps, attachments, sketches, links, tags, tasks, and tool settings—in its local application container. Search and filter selections are processed on-device.

If you buy Pro and turn on iCloud sync, Draftlight stores synchronized records in your private Apple CloudKit database so your devices using the same Apple Account can receive them. Company does not operate a manuscript account or possess a general interface for reading a user's private CloudKit database.

A draft you protect with a writer-known password is encrypted before local storage or iCloud sync. Apple device authentication may protect the whole App; Draftlight receives only the operating system's success or failure result, not your face, fingerprint, or biometric template.

Draftlight processes content on your device to provide writing, ordinary search, links, backlinks, word counts, exports, and Pro OCR attachment search. If you have Pro and App Lock is off, Draftlight also supplies each eligible, unlocked draft's title, first 4,000 body characters, category, and tags to Apple's on-device Spotlight index so you can find the draft from system search. Private CloudKit sync you choose, Apple system dictation you initiate, and destinations you select for sharing or export may process content under their own terms. Company does not receive, host, read, sell, or use your drafts through ordinary App use.

Draftlight is designed for private writing. Company does not monitor, moderate, scan, or judge your local drafts. Subject to applicable law and third-party rights, the App does not restrict local writing by viewpoint, subject, genre, or idea.

You are responsible for having the rights, permissions, and consents needed for content you create, store, or share.

5. Local Storage, Backups, and Deletion

The App writes draft records and their attributes to its local application container on your device. Other apps ordinarily cannot access that container, subject to Apple platform security, backups, device compromise, and actions you take.

Depending on your Apple and device settings, an Apple device backup may include App data. Optional Pro sync is separate and uses your private CloudKit database. Company does not operate, inspect, control, or guarantee Apple backups, CloudKit availability, device migrations, or restores.

You can delete individual drafts inside the App and use its iCloud control to delete Draftlight's private CloudKit copy. Deleting the App ordinarily removes its active local container from that device, but copies may remain in Apple backups, another synchronized device, exported files, screenshots, messages, or third-party services you selected.

Company cannot recover, restore, export, correct, or delete local drafts for you because Company does not possess them.

6. Sharing and Export

The App uses Apple's system share sheet only after you choose to share a draft. The content and destination you select may then be processed by Apple and the chosen destination under their own terms and privacy policies.

The App does not automatically publish drafts, create public links, or upload drafts to Company. Copying, screenshotting, printing, messaging, posting, or exporting TXT, Markdown, TextBundle, rich text, Draftlight, HTML, DOCX, PDF, JPG, or ePub files is controlled by you and by the services you choose.

7. User Drafts and Other Content

Draftlight may contain unpublished or confidential writing. Company cannot access or recover that local writing, and you are responsible for maintaining copies that matter to you.

Search results, counts, word counts, reading-time estimates, writing categories, and formatted share text are calculated on your device from your local content.

The current App does not use generative AI, Company-operated speech recognition, remote content moderation, or a third-party manuscript-processing provider. Apple system dictation may turn speech you initiate on Apple Watch into text under Apple's terms; Draftlight receives the resulting text for the draft you chose.

Optional analytics, if enabled, never includes draft titles, manuscript text, search words, filenames, paths, URLs, contact information, transaction identifiers, advertising identifiers, or a specific draft's identity.

8. Optional Analytics, Website, App Store, and Technical Data

PostHog provides Draftlight's optional pseudonymous, non-content product-use analytics. Analytics is OFF until you choose to share product use after a successful save or in Privacy & Analytics settings. Only after you choose yes, the App creates a random session identifier in memory. It is not stored across launches, is discarded when analytics is turned off or that App process ends, and is not a Company account or advertising identifier. Draftlight does not intentionally associate it with an account, advertising identifier, or manuscript. Company uses this optional analytics to understand successful saves, Pro interest, and purchase or restore failures.

The complete event list is limited to nine names: value_workflow_started, value_workflow_completed, value_workflow_failed, pro_screen_viewed, purchase_started, purchase_completed, purchase_failed, purchase_restored, and rating_prompt_requested. The value-workflow events describe only the write_draft workflow. The rating event means Draftlight asked Apple's system to consider showing a rating prompt; Apple may suppress the prompt.

The request identifies the event, uses Draftlight's PostHog project token and the random in-memory session identifier, and sends only the following product properties: App version, build number, bundle ID, production environment, Apple platform, event-schema version, a non-identifying constant in the IP field, and flags disabling GeoIP enrichment and person-profile processing. When applicable, it may also include only a controlled workflow, result, Pro-screen source, and a word-count bucket of 0, 1–49, 50–249, 250–999, or 1,000-plus. It never includes an exact word count.

Controlled Pro-screen sources are store button, tools, export, sync, protect, attachment search, Spotlight search, typography, tags, tasks, restore, or an App Store purchase intent. Controlled results are success, save failed, cancelled, pending, network, Store unavailable, verification failed, nothing to restore, or unknown.

A strict property firewall blocks draft titles, manuscript bodies, other content, queries, search words, tags, filenames, paths, URLs, links, email addresses, phone numbers, contacts, transaction or receipt data, specific-draft identifiers, user-entered dates, and every unknown event or property.

The App supplies a non-identifying constant in PostHog's IP field so the connection address is not substituted into the stored event, and it disables PostHog person-profile creation and GeoIP enrichment. It uses an ephemeral network session with no analytics cookies or response cache and does not use autocapture, session replay, automatic screen recording, or advertising tracking.

Debug builds and App Store screenshot automation send zero analytics requests. While analytics is OFF, the production App also sends zero analytics requests and creates no analytics identifier. You may turn analytics on or off in Privacy & Analytics settings at any time. Turning it off cancels future requests, discards the in-memory session identifier, and does not limit App functionality.

Turning analytics off does not delete pseudonymous events already sent. Because Draftlight does not retain or display the short-lived session identifier and does not link it to a Company account, Company generally cannot associate earlier analytics events with a particular person for event-specific access or deletion. Company will still evaluate a verifiable privacy request as required by applicable law.

PostHog and network providers used to deliver an analytics request necessarily process technical routing data such as the source IP address in real time. Draftlight supplies a non-identifying constant in PostHog's event IP field, disables GeoIP enrichment and person-profile processing, and does not add precise-location data. PostHog's handling, retention, security, and subprocessors are governed by its terms, privacy materials, the applicable service arrangement, and Company settings.

Separately, when you visit a Company website or support page, Company and its hosting, security, and infrastructure providers may process routine web information, such as:

The public myworkingmemory.ai pages are delivered through Vercel from Company-controlled website source. Vercel and supporting network infrastructure may process routine request and security logs under their own terms and Company settings.

Company may also receive aggregated App Store sales and download information, and crash, diagnostic, refund, or transaction-level information Apple makes available to developers.

Website and aggregate App Store information may be used to operate, secure, troubleshoot, maintain, and improve Company services; comply with law and platform rules; and make product, pricing, marketing, reliability, and App Store decisions.

Company does not receive draft titles or manuscript text through PostHog analytics, website analytics, or App Store analytics.

9. Support Communications

If you contact Company for support, Company may receive:

Do not send draft content, confidential information, personal information, or third-party private information unless you want Company to review it for support purposes.

Company uses support communications to respond to you, troubleshoot, maintain business records, enforce Terms, protect Company Parties, and comply with law.

10. Apple and App Store Data

Apple processes App Store downloads, purchases, refunds, taxes, chargebacks, Family Sharing, ratings, reviews, crash information, diagnostics, and App Store analytics under Apple's own terms and privacy policies.

Company may receive aggregated sales and download information, and crash, diagnostic, refund, or transaction-level information Apple makes available. Company does not receive your full payment-card number from Apple.

The App offers one optional, non-consumable Draftlight Pro in-app purchase and no subscription, consumable credit, or recurring charge. StoreKit verifies the purchase on the device and can restore it through the buyer's Apple Account. Draftlight does not send Apple transaction identifiers or receipts to Company or PostHog.

11. Information We Do Not Collect Through Ordinary App Use

Even when optional analytics is enabled, Company does not collect through the App:

Your local content can leave the device through optional private iCloud sync, Apple backups or migration, device compromise, or actions you choose, such as exporting, sharing, copying, or screenshotting.

Optional analytics includes only the bounded event and property allowlist in Section 8. A coarse word-count bucket can describe the size of a successful save without transmitting the words or an exact count.

12. How We Use Information

Company uses information it actually receives to:

Company does not use local drafts for advertising, analytics, AI training, personalization, or product research because Company does not receive them. If you enable optional analytics, Company uses only the allowlisted non-content events and properties in Section 8 for product, reliability, App Store, and business decisions.

13. How We Share Information

Company may disclose information it actually receives to:

Company does not disclose local drafts because Company does not receive them. Company does not sell personal information and does not share personal information for cross-context behavioral advertising.

Company requires service providers that receive personal information for Company to provide the same or equivalent protection described in this Policy and applicable law, and does not authorize them to use Draftlight analytics for their own advertising or unrelated purposes. Service providers also operate under their own terms, privacy materials, the applicable service arrangement, and Company settings. A third party that you independently choose for an export, share, Apple service, or other user-directed action remains governed by its own terms and privacy practices.

Company may use or disclose aggregated or de-identified information only while maintaining it so that it cannot reasonably be linked to a person. Company will not attempt to re-identify it except to test or validate de-identification where law permits.

14. Advertising and Tracking

The App does not include third-party advertising SDKs, cross-app tracking, or behavioral advertising. PostHog receives optional pseudonymous, non-content product-use analytics only after you enable it. The short-lived session identifier is not stored across launches, is not an advertising identifier, and is not used to track you across other companies' apps or websites. Draftlight does not intentionally associate it with an account, advertising identifier, or manuscript.

The current App does not request Apple's App Tracking Transparency permission because it is not designed to track you across apps and websites owned by other companies.

Different advertising, tracking, sale, share, or behavioral-advertising practices would require updated disclosures, controls, or consents as required by applicable law or platform rules.

15. Retention

Local App content remains on a device until you delete individual content, delete the App, erase or replace the device, or another device or backup event changes it. Private CloudKit records remain subject to your sync and iCloud-deletion choices and Apple's systems. Company does not set a retention period for your local or private-CloudKit content because Company does not possess it.

Support messages, website logs, App Store reports, legal records, and business records may be retained for as long as reasonably necessary for support, security, tax, accounting, legal compliance, dispute resolution, App Store compliance, and business operations. Optional pseudonymous product-use analytics is retained according to the provider settings Company selects and for the stated product, reliability, security, App Store, legal, and business purposes, subject to applicable law. Company may retain deidentified, aggregated, or non-personal information.

16. Security

The App relies on Apple platform sandboxes, on-device encryption for protected drafts, and operating-system protections. Optional Pro sync depends on Apple CloudKit. Company uses reasonable measures for information Company actually receives. No device, backup, cloud, email, website, or storage system is perfectly secure.

Company investigates suspected security incidents affecting information it controls and gives legally required notices to affected people, regulators, or others. The timing, content, and method depend on the facts, legal requirements, law-enforcement needs, and remediation; this is not a promise of notice where law does not require one.

You are responsible for your device, passcode, Apple account, backups, cloud settings, exported files, screenshots, messages, and destinations to which you share content.

17. Children

The Services are not directed to children under 13. Company does not knowingly collect personal information from children under 13 through the App.

If you believe a child under 13 provided personal information to Company through support or a Company website, contact Company at dean@myworkingmemory.ai so the request can be reviewed under applicable law.

18. State Privacy Rights

Depending on where you live and which laws apply, you may have rights to access, correct, delete, port, restrict, appeal, or opt out of certain processing.

Some U.S. state privacy laws apply only above certain revenue, volume, or data-sale thresholds. Company may not be covered by every state privacy law at all times. Company handles privacy requests as required by applicable law.

Send a privacy request to dean@myworkingmemory.ai and identify Draftlight and the right you want to exercise. Company may verify your identity and authority proportionately, request information needed to locate a record, or decline a request where law permits or requires. An authorized agent must provide proof of authority, and Company may confirm the request directly with you where allowed.

Because your App content is stored locally or in your private CloudKit database, Company cannot access, correct, export, port, or delete it for you. Use Draftlight's local and iCloud controls and your Apple device settings to manage it.

Turning analytics off stops future requests and discards the current in-memory session identifier. Draftlight does not retain or display that identifier after the session, and it is not linked to a Company account. As a result, Company generally cannot identify which earlier pseudonymous events came from a particular person.

Company responds within the period required by applicable law and does not unlawfully discriminate because you exercised a privacy right. If applicable law gives you an appeal, email dean@myworkingmemory.ai with “Privacy Appeal” in the subject line. Company will explain when a local, private-CloudKit, or short-lived pseudonymous record cannot reasonably be located or associated with you.

19. California Privacy Notes

The current App does not sell personal information, share personal information for cross-context behavioral advertising, or use third-party ad tracking.

Because the App is not a browser-based service, browser Do Not Track signals do not change App behavior. Different web tracking, advertising, sale, or share practices would require updated disclosures, controls, or consents as required by applicable law or platform rules.

20. Consumer Health, Biometric, and Sensitive Data

Draftlight may contain unpublished or confidential writing. Company cannot access or recover that local writing, and you are responsible for maintaining copies that matter to you.

The App does not request health, financial-account, government-identifier, or precise-location data through dedicated fields or device permissions. Optional Pro app lock may ask Apple's operating system to authenticate you; Draftlight receives only success or failure, and Company receives no biometric identifier or template. You may enter sensitive information in free-form content; it remains in local storage or your private iCloud sync unless you export or share it.

Do not use the Services as a medical, mental-health, therapeutic, biometric, emergency, legal, financial, employment, housing, education, insurance, criminal-justice, or safety-critical tool.

If a future version adds health, wellness, Company-processed biometrics, precise location, generative AI, SMS, a public gallery, a Company account, Company-hosted content, or other regulated features, Company will provide updated notices, consents, retention schedules, or deletion rights as required by applicable law or platform rules.

21. International Use

The App processes content on your device and, if you enable Pro sync, in your private Apple CloudKit database. Company is operated from the United States, and Company websites, support communications, Apple information, optional analytics, or service-provider records may be processed in the United States or other locations where providers operate.

For personal information Company actually receives, Company is the controller unless another notice states otherwise. Depending on the activity and applicable law, Company may process it with your consent; to perform these Terms or respond to your request; for legitimate interests in operating, securing, improving, supporting, and understanding the Services, balanced against your rights; to comply with law; or to protect vital interests. You may withdraw consent for future processing at any time, including by turning optional analytics off, without affecting earlier lawful processing.

Information may be processed in the United States and other countries that may have different data-protection laws. Where applicable law requires a transfer mechanism, Company will rely on an available lawful mechanism and required supplementary measures.

Depending on applicable law, you may object to or restrict processing, request access, correction, deletion, or portability, and complain to the data-protection authority where you live or work. Contact dean@myworkingmemory.ai first if you want Company to address a concern. Nothing in this Policy limits a nonwaivable privacy right.

22. Legal Requests and Protection of Rights

Company may preserve or disclose information it actually possesses when reasonably necessary to comply with applicable law, enforceable legal process, or a lawful request; protect a person's vital interests; detect or prevent fraud, abuse, or security threats; enforce agreements; or establish, exercise, or defend legal claims. Company may narrow, challenge, or reject a request when appropriate and lawful. Company cannot disclose draft content it does not possess.

23. Changes

Company may update this Privacy Policy to reflect product, legal, vendor, security, or operational changes. Company will post the updated version with a new effective date.

If a change materially expands how Company uses personal information, Company will provide additional notice or obtain consent where required. Company will not rely on a silent policy change to authorize a materially different use when law requires more.

24. Contact

Myworkingmemory LLC

1515 Demonbreun St. 1121, Nashville, TN 37203, United States

Email: dean@myworkingmemory.ai

Support: https://www.myworkingmemory.ai/draftlight-support.html

Draftlight Support · Myworkingmemory