Local, private job site data

"We take privacy seriously" is easy to say. Harder is a product architecture where, in Phase 1, your job content never touches our servers because there is no sync and no analytics SDK. Capture, browse, and export stay on the phone.

What stays on device

Jobs, timeline items, photos, audio, captions, tags, and text notes live in the app sandbox (SQLite plus media files on disk). Sharing happens only when you invoke the OS share sheet on an export you generated.

What we still learn (without spying)

Store-provided metrics like installs, retention, and ratings help us improve the product without breaking the privacy story. Optional email waitlists and feedback mailto links are explicit opt-in. That trade keeps the trust line clean while we validate demand.

Future optional cloud (Phase 2)

A later paid team subscription may add encrypted sync, a browser dashboard, and shared workspaces. Marketing language will evolve to "does not leave your device unless you turn on sync" for users who opt in. Local-only use remains free so the field workflow is never held hostage.