Stempel Privacy Policy

This policy covers Stempel for iPhone and iPad and its Apple Watch app, widgets, Live Activities, and Shortcuts. Stempel is developed by Loadchange. Services you choose outside the app have their own policies.

This page is a website. Visiting it sends ordinary web requests to our hosting provider, which may process technical request data such as IP addresses, request headers, and access logs to deliver and protect the site. That website processing is separate from the Stempel app’s handling of work records described here.

As of October 9, 2026, version 1.0 is publicly available and version 1.1 is awaiting App Store review. Activities, templates, PDF reports, enhanced CSV import and export, local recovery backups, and the Watch workflows described here apply after installing version 1.1 when available.

Stempel does not automatically send your work records or app usage to Loadchange. It has no developer-operated account service or backend, and we do not sell work records or use them for advertising.

If you choose to contact support by email, we receive the message, your email address, and any attachments you send. We use that information to respond to your request. Share only what is needed, and hide unrelated personal information in screenshots.

A saved work record can contain an identifier, start and end times, work segments, net duration, an optional note of up to 140 characters, activity name and color, modification time, and deletion state. Records are stored in protected app storage using Apple’s SwiftData framework.

Goals, workdays, language, sync preferences, activity favorites, and templates stay on the device. Templates can contain work segments, notes, and activity details copied from a saved record. Current timer state, completion and undo information, pending records, and dashboard summaries are also stored locally.

An Apple App Group lets Stempel and its bundled widgets and Shortcuts share the timer, preferences, and summaries needed for their features. These are Stempel components, not a public data-sharing service.

In version 1.1, the Watch can keep its own timer and finished records locally while disconnected. A finished record remains in its transfer queue until the paired iPhone has saved it and acknowledged receipt. Local queues and receipt identifiers let a later connection retry delivery without adding the same record again.

Transfer uses Apple’s WatchConnectivity service between the paired devices. The iPhone and Watch have independent timers. When connected, the Watch can show phone timer status and send an explicit command to the phone session shown. These transfers do not pass through a Loadchange server.

After a Watch record is saved as a work record on the iPhone, it follows the same local-storage and optional iCloud rules as other work records. The Watch queue and current timer are not themselves synchronized through Stempel’s CloudKit database.

iCloud synchronization is enabled by default and can be turned off in Settings. When enabled and available, Apple’s CloudKit service synchronizes saved work records through the private database associated with your Apple ID. This requires network access and is subject to Apple’s terms and privacy policy.

Only work records are included in this CloudKit sync, including any activity name and color stored on each record. Your favorite-activity library, templates, local recovery backups, settings, active timer, and Watch transfer queues do not use it.

An enabled setting or an available cloud store does not prove that every record has finished uploading or downloading. Availability and timing depend on Apple’s service, account, network, and device conditions. You can continue working locally when iCloud is unavailable.

Turning sync off or uninstalling Stempel does not necessarily remove records previously synchronized to iCloud. Apple’s account and iCloud data-management controls govern those copies, and they may return if you later enable sync. Before changing storage settings, preserve important records with an export and, on version 1.1, a local backup.

Import begins only when you select a file in Apple’s system file picker. Stempel reads and checks that selected CSV on your device, then shows which new rows can be added, along with duplicates, conflicts, and errors. You confirm before accepted records are inserted. Older five-column Stempel CSV files remain supported.

Version 1.1 can create a PDF report or CSV for the date range and activity you choose. You can exclude notes. CSV v2 includes record identifiers, precise times, work segments, activity names and colors, and modification times so those details can be preserved on import. A PDF may include dates, work totals, activity names, and any notes or break details you choose to include.

Export files are created locally. The system share sheet sends them only to the app, person, or service you select, under that destination’s privacy policy. Stempel does not report your destination to Loadchange. Copies you save or share outside Stempel are not removed when you later edit or delete the original record.

Version 1.1 keeps up to 20 local historical backups containing saved records, activity libraries, and templates. Backups can be created manually, automatically after data changes, and before CSV imports or restoration that write records. Older recovery points are removed as newer ones exceed that limit. These recovery files stay on this device and are excluded from Apple device backups; keep a separate export for records you cannot afford to lose.

Restore shows a preview. By default, it adds missing data while preserving existing edits; replacing changed records or libraries requires your explicit choice. A safety backup is saved before restoration. An older backup can contain records you have since deleted, and restoring them creates new copies.

You can delete records in the app with a brief undo period. If iCloud sync is active, saved deletions are eligible to propagate through CloudKit when synchronization succeeds. Local deletion markers and transfer receipts help prevent old copies or repeated deliveries from reappearing. They are not sent to Loadchange.

Deleting a record does not automatically erase its contents from older local backups, saved templates, or files you already exported or shared. Removing the app can remove local data according to Apple’s app and device-backup behavior, but does not guarantee deletion of iCloud or external copies. Do not remove the app as a troubleshooting step before protecting your records.

Timing, editing, activities, templates, reports, and local backups run on the device. Optional iCloud sync and paired Watch transfers use Apple services. App Store purchases, Family Sharing, downloads, updates, and any system diagnostics you choose to share with Apple are handled under Apple’s policies.

Stempel includes Apple privacy manifests declaring no tracking, no tracking domains, and no collected data types. The declared system access supports app preferences and state shared with Stempel extensions, metadata for the app’s own backup files, and metadata for the import file you select. This access is not used to identify you or build a usage profile.

Local data relies on Apple’s app sandbox, device data protection, and your device security settings. Synced data relies on your Apple ID and Apple’s iCloud infrastructure. You control whether to enable sync, which files to import or share, and which records to edit, delete, or restore.

Loadchange has no Stempel account or developer-side archive of your work records, so we cannot retrieve, correct, export, or erase those records on your behalf. The relevant controls remain on your device, in destinations you chose for exports, and in your Apple account.

Stempel is not designed to collect personal information from children or anyone else. Loadchange does not knowingly collect children’s personal information through the app.

If Stempel’s data practices change, we will update this page and its date. Material changes will also be reflected in the app and App Store privacy information where required.