Proof Privacy Policy

Effective date: August 26, 2026

Overview

Proof is a local-first iPhone and iPad app. There is no Proof account. Proof has no advertising or third-party analytics SDK and no developer-operated content server.

Content and storage

Your journey choices, schedules, written proof, saved links, selected images, and reflections are stored on your device. When iCloud is available and enabled for Proof through your Apple Account and system settings, Apple can also store this content in your private CloudKit scope.

Apple operates iCloud and CloudKit. “iCloud available” confirms account availability, not that every change has synced. Sync timing and private CloudKit propagation are system-managed.

The developer does not run a separate server that receives your proof content and does not use that content for advertising or analytics.

Network requests for saved links

When you view proof containing a syntactically valid saved web link, Proof automatically performs a HEAD request to that link’s destination host for a basic health warning. It does not upload your proof text or image to a developer server. The destination host and network providers may observe ordinary request metadata, including your IP address, request time, requested address, and standard HTTP headers. Their own privacy practices apply.

Photos and local notifications

PhotosPicker is user initiated: Proof imports an image only after you choose one through Apple’s system picker. Proof does not scan your photo library in the background.

Local notification reminders are optional. Scheduling is handled on your device. You can turn reminders off in Proof or manage permission in system notification settings.

Apple analytics and diagnostics

Proof does not bundle a third-party analytics SDK. Apple may provide the developer with aggregated App Store analytics or diagnostics when users enable sharing in Apple settings. This is platform-provided information, not a copy of your proof text, private links, or selected images sent to a Proof analytics service.

Your controls

Export is user directed. Markdown contains proof text, links, dates, journey metadata, and reflections but excludes image bytes. JSON includes image bytes and can be large. Proof cannot currently import or restore either format.
For a completed journey you explicitly select, the system share interface shares Markdown only. Proof never shares automatically.
You can delete an individual proof. If it was the last valid proof for a step, the step may reopen and progress may decrease.
Delete All removes Proof journeys, proof, images, and reflections from the local store. Private CloudKit propagation is system-managed and eventual, not an instant all-device guarantee.

After an exported or shared file leaves Proof, you and the destination or service you choose control that copy.

Contact

For privacy questions, email luofubin@live.com. Do not include proof text, private links, images, exports, or other sensitive proof content in support email.