Privacy Policy

Applies to the Endpaper iOS app and endpaper.space

The short version

We never receive your writing. Not “we store it carefully” — it does not leave your device except to your own iCloud. Endpaper has no accounts, no tracking, no advertising, and no server of ours holding a word you wrote. What we do count, anonymously, is described below in one paragraph: taps, never words.

Your writing

Everything you write in Endpaper is stored on your device. If you turn on Back up with iCloud, your writing syncs to your private iCloud database — storage that belongs to your Apple account, governed by your Apple ID and Apple’s terms. We have no access to it: no admin panel, no database, no copy. There is nothing on our side to breach, subpoena, or sell.

If you leave iCloud backup off, your writing exists only on your device.

Reflections

Endpaper’s reflections (weekly, monthly, yearly) are computed on your device. Your writing is not sent anywhere to produce them.

If a future version offers cloud-assisted reflections, that feature will be strictly opt-in, clearly explained at the moment you enable it, and this policy will be updated first. It will never be on by default.

What we don’t do

• No account, profile, or sign-up — we don’t know your name or email.
• No tracking across apps or sites, no advertising identifiers, no fingerprinting.
• One third-party SDK, for the anonymous counts below (PostHog). Nothing else beyond our code and Apple’s frameworks.
• No advertising, no data sharing, no data sale — there is no data.

What we count (anonymous usage)

Since version 1.0.4 the app sends a small set of anonymous product events so we can tell whether Endpaper works as a product — for example a page was written today, a reflection was opened, the membership offer was shown. Each event carries only coarse state: app version, how many days since install (bucketed), whether reflections are on, whether you are a member. That is all.

• Never your writing, words, names, the words a reflection found, or exact counts of anything you wrote.
• No profile: there is no user record, no email, no advertising ID, and events are not linked to you. A reinstall is a new anonymous device.
• Processed by PostHog on servers in the United States.
• Off at any time in Settings → Share anonymous usage. Off is remembered.

Notifications

The optional daily reminder is a local notification, scheduled and delivered entirely on your device. No push servers are involved.

Purchases

Subscriptions are processed by Apple through your Apple ID. We never see your payment details. Apple’s handling of that transaction is covered by Apple’s own privacy policy.

Export and deletion

Your writing is yours. You can export your entire notebook as plain text at any time (Settings → Export). Deleting the app removes the local copy; your iCloud copy is under your control in iOS Settings → iCloud. We hold nothing, so there is nothing for us to delete.

Children

Endpaper is not directed at children under 13, and we do not knowingly collect information from anyone — child or adult.

This website

endpaper.space is a static page. It sets no cookies and runs no analytics.

Changes

If this policy ever changes, the change will be visible here with a new date, and any change that touches your writing will be announced in the app before it takes effect.

Contact

A human reads this inbox: hello@endpaper.space