Privacy Policy

MarkSave: saved content, purchases and optional Assist

MarkSave does not require a separate MarkSave account. Saved links, extracted articles, notes, folders and lists are stored on your device; supported content can synchronize through your private iCloud storage. Shared shelves make the selected links and titles available to the people you invite. Private-folder controls hide content within the app and can require authentication; they do not add a separate layer of file encryption. The general categories below do not mean every Wystone app collects every listed type of information.

Websites and media: Saving, refreshing or opening a link can contact the original website and its media providers to retrieve article text, previews or playback. Those providers receive normal network information such as your IP address and browser request details and apply their own privacy policies. Opening a YouTube player contacts YouTube. MarkSave does not ask for or collect your Google password; sign-in links open the original service outside the embedded player. Content you choose to share or export is sent to the destination you select.

Purchases: Apple and RevenueCat process purchase history and entitlement information to unlock and restore Premium, prevent purchase fraud and provide purchase analytics. RevenueCat creates an anonymous app customer identifier. MarkSave does not send your name, email address, saved article text, notes or Assist requests as RevenueCat customer attributes. MarkSave does not collect payment-card details or use an advertising tracking identifier. See RevenueCat's privacy policy and Apple's privacy policy.

MarkSave Assist, introduced in iOS/iPadOS 2.7 and Mac 1.7: Assist is optional and processes selected saved content and your request to prepare summaries, answers and suggestions. On-device processing is the default. If you enable Private Cloud Compute, selected extracted content, your question and relevant folder choices are sent to Apple's Private Cloud Compute service for processing. MarkSave does not automatically send your entire library or use a third-party model provider for Assist. Ordinary saving and organization do not require AI.

To share the weekly Assist allowance across devices, MarkSave stores usage counts, request reservations and completion metadata in your private iCloud database. These allowance records do not contain article text, questions, titles or generated answers. An iCloud account and connection are needed to check the allowance, including for on-device requests. Apple's separate availability and usage limits also apply.

MarkSave can keep generated results from non-private saves locally for reuse and interrupted-request recovery. The reusable cache is limited to 100 results and excluded from device backup. Changing the iCloud account or hiding or deleting a source invalidates affected cached results. Private-item requests bypass this reusable cache; pending recovery records for private requests retain only reservation metadata. Suggestions are applied only after you review them.

Your choices: You can remove saved items using the app's controls, manage permissions and iCloud storage in system settings, and choose whether to enable Private Cloud Compute. Removing the app does not cancel a subscription or automatically delete iCloud, purchase or exported records. Apple and RevenueCat retain transaction records for purchase, restoration and legal purposes. Contact support@wystoneapps.com with questions or a data request. Support messages contain the information you choose to send.

Cality: calendars, purchases and optional analytics

Cality does not require a Cality account. Calendar and reminder access is granted through your device. Your chosen calendar and reminders providers handle their own synchronization. Supported Cality settings, routine templates and Review decisions can synchronize through your private iCloud storage when enabled. We do not receive your calendar or reminder contents through usage analytics.

Habits: Habit definitions and manual completion records are stored locally and can synchronize through your private iCloud storage. Cality does not send habit names or completion history to RevenueCat as usage analytics. Archiving a habit preserves its history; turning off sync stops synchronization but does not delete existing records.

Optional Apple Health access: On supported iPhone and iPad devices, you can authorize Cality to read selected Health measurements for habits you connect, such as steps, sleep or exercise. Cality uses those readings to display progress toward your chosen goals. This integration is read-only. Raw Health readings and Health-derived completion progress remain on the device, are not sent through Cality's iCloud sync, and are not used for advertising or usage analytics. Mac does not read Apple Health or receive this Health-derived progress. If you manually mark a Health-connected habit complete in Cality, that user-entered completion can synchronize like other manual habit records; it contains no measured Health reading and does not write to Apple Health. You can manage or revoke Cality's Health access in Apple's Health or system settings.

Cality Assist (when available): Assist is optional. Simple capture can use an on-device Apple model; cloud requests send your prompt and a limited selection of visible calendar or reminder details to Apple's Private Cloud Compute. Including event and reminder notes is optional and off by default. Cality does not include habit records or raw Health readings in model context. Availability requests may include occupied time intervals without habit titles. Images selected for capture are processed into text on the device; the extracted text may be included in your request. System dictation follows your device's speech-recognition permissions and settings.

Cality does not retain an Assist conversation history or send prompts to Wystone or RevenueCat. Successful-use timestamps and a random installation identifier are stored locally and can synchronize through your private iCloud key-value storage to maintain the weekly allowance. Watch Assist uses Private Cloud Compute when supported; its calendar context is a limited snapshot from the paired iPhone. A requested Watch handoff sends the proposed draft to the paired iPhone for review. Proposed changes are saved only after confirmation, using the calendar or reminders provider you select. You can disable Assist in Cality's Privacy screen; this does not delete records you previously chose to save. Apple's availability and service limits are separate from Cality's product allowance.

Purchases: Apple and RevenueCat process purchase and entitlement information so Cality can unlock and restore Pro. RevenueCat uses an app customer identifier. Cality does not send your calendar account email addresses, event titles, notes or reminder text to RevenueCat. Purchase verification works independently of the optional analytics setting.

Optional usage analytics, introduced in Cality 1.5: Sharing is off by default. If you enable it during onboarding or in Settings > About Cality > Usage analytics, Cality sends RevenueCat limited feature milestone counts, such as completing onboarding, creating an item or scheduling a routine, together with Pro-screen impressions and purchase-flow outcomes. These measurements are associated with RevenueCat's app customer identifier. They are not recordings of your screen or complete activity histories, and are not used for cross-app advertising tracking.

Optional analytics excludes event and reminder text, their dates, calendar account email addresses, city names, audio and dictated text. Turning sharing off stops new optional measurements, clears the local counters and requests removal of Cality's custom analytics attributes from RevenueCat. Previously aggregated paywall impressions are not removed by that switch. For a further data request, contact support@wystoneapps.com. We retain information only for the purposes described in this policy.

Optional permissions: Weather uses Apple Weather for the location you authorize or choose. Dictation uses Apple's speech recognition on device where supported and presents editable text before saving. These contents are not sent to RevenueCat as analytics. You can manage calendar, reminder, location, microphone and speech permissions in system settings.

Kept: private reflection, purchases and optional permissions

Kept does not require a Kept account. This section describes Kept on iPhone, its iPad compatibility experience, the companion Apple Watch app, widgets and Live Activities. The general information below applies where relevant; it does not mean every Wystone app collects every listed category.

Writing and saved content: Journal text, including dictated transcripts, practice events and bookmarked verse references are stored on your device and can synchronize through your private Apple iCloud database when available. They may contain personal or religious information. Other content, including saved readings, fasting schedules, habit settings and reading preferences, is stored locally. Kept does not send this content to Wystone servers or RevenueCat. Apple manages iCloud under your Apple account and its privacy terms.

Voice journal: Kept requests microphone and speech-recognition permission when you choose dictation. Its journal dictation requires on-device recognition and is unavailable when that capability is unsupported. Kept saves the resulting text, not an audio recording, and does not upload the audio to a transcription service.

Apple Health and fasting: If you enable a walking offering and grant permission, Kept reads your step count to display progress and mark that offering complete. Step readings are processed on your device and are not sent to Wystone or RevenueCat. Walking completion dates are stored locally and may be included in a Memories file you choose to export. Some existing releases also request permission to write completed fasts as Mindful Minutes. This fasting export is being removed; until you install the corrected release, you can disable Kept's Mindful Minutes write permission in Apple Health. Existing Health entries remain under your control. Fasting timers and schedules do not require Apple Health access.

Purchases: Apple and RevenueCat process purchase history, subscription status and entitlement information to unlock and restore Premium, prevent purchase fraud and provide purchase analytics. RevenueCat creates an anonymous app customer identifier; Kept does not supply your name, email address, journal, prayers or fasting records as customer attributes. Kept does not collect payment-card details or use advertising tracking identifiers. See RevenueCat's privacy policy and Apple's privacy policy.

Widgets, Watch and reminders: Kept shares the selected language, verse content, bookmarked references, relevant progress, fasting timer information and Premium availability with its own extensions through local app storage. The paired Watch receives Premium availability and its verification dates through Apple's WatchConnectivity service. Reminders are scheduled as local notifications when you enable them. Widget and notification content can be visible on a locked device according to your system settings.

Your choices and retention: You can manage permissions in system settings, remove saved items using the available in-app controls, and manage private app storage through Apple's iCloud settings. Exporting a Memories file or sharing a verse or image sends that content only to the destination you select; that destination controls its own storage and retention. Removing the app does not cancel a subscription, remove exported copies or automatically delete iCloud or purchase records. Apple and RevenueCat retain transaction information for purchase, restoration and legal purposes. Contact support@wystoneapps.com for questions or a data request. Support messages contain the information you choose to send; please do not include private journal or Health data unless needed for your request.