Worth It
Privacy Policy
Effective 31 July 2026 · Last updated 31 July 2026
The short version
- Everything you track — the things you own, their prices, your hourly rate — is stored on your device. It is never uploaded to us.
- There is no account. We never ask for your name, email or phone number.
- Purchases run through Apple. We never see your payment details.
- We collect anonymous usage statistics — which screens you open and which buttons you tap — hosted in the EU. Never the names, prices or your hourly rate.
- We do not sell or share your data, and there are no ads or advertising trackers in the app.
This policy explains what the Worth It iOS app (“the app”, “Worth It”) does with data. It applies to the app itself, its home-screen widgets, and its Siri and Shortcuts actions.
The data controller is Maksims Pelna, an individual developer. For any question or request about this policy, write to maksims.pelna@gmail.com.
1. What stays on your device
Worth It is a local-first app. The following is written to the app’s private storage area on your iPhone or iPad and is not transmitted to us at any point:
- The things you track — name, icon, colour, price, currency, purchase date, the comparison price you set, and the date and time of every use you log.
- Your work profile — your hourly rate, hours in your working day, and whether you count only working days.
- App preferences — theme, language, whether haptics are on, your chosen currency, sort order, whether you have finished onboarding, and whether you have dismissed the converter hint.
- An installation marker — a single flag in the iOS Keychain that records that Worth It has been installed on this device before, so a reinstall can be told apart from a first launch. It contains no personal information and never leaves the device.
This storage is shared with the Worth It widgets and Shortcuts actions, because they are part of the same app. No other app can read it.
You can review and change all of it at any time inside the app, and wipe it completely with Settings → Erase all data. Deleting the app removes it as well.
2. iCloud backup
Worth It includes an optional backup that only runs when you tap it. When you choose Back up now, a copy of your tracked things is written to your personal iCloud key-value storage, under your own Apple Account. Restore backup reads that copy back.
This is Apple’s infrastructure, not ours. The backup is not sent to any server we control and we cannot read it. Apple’s handling of it is covered by the Apple Privacy Policy.
To remove a backup, go to iOS Settings → your name → iCloud → Manage Account Storage, or delete the app’s iCloud data from that screen.
3. Purchases
Worth It offers a paid upgrade. Payment is handled entirely by Apple through the App Store using StoreKit. We never see and never receive your card number, billing address, Apple Account email, or any other payment detail.
The app only asks Apple whether a valid purchase exists for this device, and stores the yes-or-no answer locally so it knows whether to unlock the paid features. Restore purchases simply asks Apple to re-check that answer.
Apple provides us with aggregated, anonymous sales and download reports in App Store Connect. These do not identify individual customers to us.
4. Usage analytics and crash reports
To understand which parts of the app people actually use, Worth It sends anonymous product analytics to PostHog. We use PostHog’s EU Cloud, so this data is stored on servers in the European Union.
What is sent
- Screen views — for example that the paywall, settings or item detail screen was opened.
- Actions — that a thing was added, edited or deleted; that a use was logged or undone; that the converter was used; that a break-even celebration fired; that a sort order or theme or currency was changed; that a backup or restore was run; that a purchase or restore was attempted and whether it succeeded, was cancelled or failed; that a free-tier limit was reached; and that a widget, Siri or Shortcuts action was used.
- Coarse context attached to those events — whether the paid version is active, how many things you track expressed as a range rather than a number (0, 1–2, 3–4, 5, or 6+), your currency code, whether an hourly rate is set (never the rate itself), and whether you count working days.
- Technical information added automatically by the analytics SDK — a randomly generated identifier for the app installation, the app version and build number, your iOS version and device model, and your device language and time zone.
- Errors and crashes — the error type, message and stack trace, together with the app and iOS version, so faults can be found and fixed.
What is never sent
Analytics never include your hourly rate, the names or prices of the things you track, the amounts you type into the converter, or the contents of any text field. The analytics SDK’s automatic text-capture and automatic screen-tracking features are deliberately switched off in Worth It, precisely so that this information cannot leak into a report.
The random installation identifier is not your Apple Account, not your device’s advertising identifier (IDFA), and not linked to your name or email — we hold none of those. It lets us tell one anonymous session apart from another and nothing more.
Events triggered from a widget, from Siri or from a Shortcut are queued on your device and sent the next time you open the app, with their original timestamp.
Legal basis and retention
Where the GDPR applies, we rely on our legitimate interest (Article 6(1)(f)) in understanding how the app is used so that we can improve it. We have weighed this against your privacy by keeping the data anonymous, coarse and free of anything financial. Analytics events are deleted after 30 days — long enough to see whether a change to the app helped, and not a day longer.
Uninstalling the app stops all analytics collection immediately. Because the data is anonymous, we generally cannot connect it back to a specific person — but if you would like your events removed and can tell us roughly when you used the app, write to maksims.pelna@gmail.com and we will do what we can.
5. What Worth It does not do
- No tracking across apps or websites. The app does not use the advertising identifier and shows no App Tracking Transparency prompt, because there is nothing to track.
- No advertising. There are no ads and no ad networks or SDKs in the app.
- No selling or sharing. We do not sell, rent or share personal information with data brokers or anyone else for their own purposes.
- No accounts. No sign-up, no login, no email address, no phone number, no social sign-in.
- No sensitive device access. The app does not request your location, contacts, photos, microphone, camera, calendar, or health data.
6. Who else is involved
| Service | Why | What it receives | Policy |
|---|---|---|---|
| Apple — App Store & StoreKit | App distribution and payments | Your purchase, handled by Apple. We receive only aggregated sales reports. | apple.com |
| Apple — iCloud | Optional backup you trigger yourself | A copy of your tracked things, stored in your own iCloud account. | apple.com |
| PostHog (EU Cloud) | Anonymous usage analytics and crash reports | The events and technical information listed in section 4. | posthog.com |
There are no other third-party SDKs in the app.
7. Security
Your data lives inside the app’s sandbox, protected by iOS file protection and, for the installation marker, by the Keychain with a device-only accessibility setting — it is never copied to another device or into an unencrypted backup. Analytics and crash reports travel over encrypted HTTPS connections.
No system is perfectly secure, but because the app holds no account and uploads nothing personal, there is very little about you for anyone to obtain from us.
8. Children
Worth It is not directed at children and we do not knowingly collect personal data from children under 13 (or under the minimum age in your country, where that is higher). If you believe a child has provided us with personal data, contact us and we will delete it.
9. Your rights
If you are in the European Economic Area, the United Kingdom or Switzerland, the GDPR (or its UK equivalent) gives you the right to access, correct, erase, restrict or object to the processing of your personal data, and the right to data portability.
In practice, most of these you can exercise yourself and instantly, because your data never leaves your device:
- Access and portability — everything the app knows is visible inside the app.
- Correction — edit any thing or your work profile at any time.
- Erasure — Settings → Erase all data, or delete the app.
- Objection to analytics — deleting the app stops it; or write to us and we will help as described in section 4.
You also have the right to lodge a complaint with the data protection supervisory authority in your country of residence.
California residents
We do not sell personal information and do not share it for cross-context behavioural advertising, as those terms are defined by the CCPA/CPRA. We do not use your data to build a profile about you for advertising, and we do not discriminate against anyone who exercises their privacy rights.
10. Changes to this policy
If this policy changes, the updated version will be published on this page with a new “last updated” date. If a change materially affects how your data is handled, we will make it clear in the app or in the App Store release notes.
11. Contact
Questions, requests or concerns about privacy in Worth It:
Maksims Pelna
maksims.pelna@gmail.com
We aim to answer every privacy request within 30 days.