Privacy Policy

Deep Work is a small, independent logbook for deep work sessions. The short version of this policy is that there is nothing to collect. There is no sign-up and no password. I run no servers, so there is nowhere for your work to be gathered. No analytics, no advertising identifiers, no location, no contacts, no crash reporting. Nothing is sold or shared, because nothing is held.

Who is responsible

Deep Work is made and sold by one person, and that person is the controller of any personal data this policy describes. That is me:

Joshua Vennetti
United States
joshua.vennetti@gmail.com

There is no company here and no office to publish. I trade as an individual, and I give a postal address in writing to anyone who needs one — a customer, or a supervisory authority acting on a complaint — on request to that email address.

Polar, Dropbox and Anthropic each decide what happens to what reaches them, under their own policies and your own agreement with them. What sits in your Dropbox or your Anthropic account is between you and them.

Where your work lives

Your projects, sessions, hours and notes are kept by the browser on the device you wrote them on. They stay there. You can export all of it to CSV whenever you want, and that file is yours to keep, read, and move anywhere.

What leaves the device, and when

Four things can leave, and all four are listed here in full. Three of them leave only when you choose to. The fourth is one question the Windows app asks at launch: whether a newer version exists.

Activating your license

When you activate a device, two pieces of information go to Polar, the company that sold you the license: the license key, and a short label for the device, such as "Windows · Chrome". Polar uses them to count how many devices the key is active on. Nothing you have written is included, and nothing else is sent.

After that the app works offline. When the device happens to be online it rechecks the key quietly, sending the same two pieces of information and nothing more.

Checking for updates (the Windows app)

At launch, the Windows app asks GitHub, where its releases are published, whether a newer version exists. The request carries no account, no key, and not even the version you are on. GitHub sees what any web request shows it, such as your network address, and answers with the latest release. Nothing downloads or installs until you press the button in Settings, and a failed or offline check does nothing at all.

Syncing, if you turn it on

Sync stays off until you connect it, and it connects to your own Dropbox — a folder Dropbox scopes to this app alone.

One file goes there. It is encrypted on your device before it is sent, using AES-GCM under a key derived from your license key. Dropbox cannot read it. I cannot read it either, and I have no way to, because nothing of mine sits between your device and your Dropbox. The file is in storage you control, under your own agreement with Dropbox, and you can delete it yourself.

Scanning a page, if you use it

Scanning stays off until you turn it on. When you photograph a notebook page, the photo goes from your device through Deep Work's scanning server to Anthropic's Claude API, and its text is read back to you as draft entries. The server checks your license key, passes the photo to Anthropic and passes the answer back. It keeps no copy of either and logs neither.

If you enter an Anthropic API key of your own in Settings, scans go from your device straight to Anthropic under your key and skip the scanning server.

Your project names travel with each scan, so the reading can be matched to them. So do the short words a project has remembered from your own answers — names like "Ahren" or "screenplay" — which stay on your device, show on the project's card, and can be removed there one by one.

Anthropic does not use API content to train its models by default. If you use your own API key, it is stored on your device and sent only to Anthropic.

Payment

Polar (polar.sh) sells the license as merchant of record. Your name, email, card details and any tax information are given to Polar at checkout and handled under Polar's privacy policy. The app never sees them, and card details never reach me. What I receive from Polar is what any seller receives: a record that a sale happened, and the email address it was sent to.

Why each of those is allowed

European and UK data protection law asks a controller to name the lawful basis for every use of personal data. They follow the sections above.

The update check rests on legitimate interest: a program that can never hear about a fix stays broken, and the check carries nothing about you beyond the request itself.

Activating your license, and rechecking it later, is performing the contract you entered when you bought it. A license that cannot be checked cannot work.

Syncing and scanning both run on your consent, given by connecting Dropbox or by entering an Anthropic key. You can withdraw either at any time by disconnecting Dropbox or removing the key, and nothing further is sent from that moment.

The sale is the same contract, and keeping a record of it is a legal obligation that tax law puts on Polar and on me.

Where in the world it goes

I am in the United States. If you are in the EU, the EEA or the UK, two small things cross the Atlantic: the license key and device label sent when you activate, and the email address Polar passes to me with the sale.

What you write does not, unless you turn on syncing or scanning. Then it goes to your own Dropbox or your own Anthropic account, under the agreement you already have with that company, and each of them publishes the transfer terms it works under in its own privacy policy. I add no transfer of my own, because I run no servers and keep no copy.

Deleting your data

Deleting is local, because the storage is local. Clear the app's site data, or remove the app, and the entries are gone from that device. If you sync, delete the file from your Dropbox as well: it is your file, in your storage, and you can remove it without asking anyone.

One thing to do first: open the ⇅ panel and press "Disconnect this device". The license activation is stored with everything else, so clearing without disconnecting leaves one of your three device slots held by a copy that is no longer there. Disconnecting frees it.

There is no request to send me about the entries themselves, because I never had them. What is connected to me is the sale record described above, and the two sections below say how long that lasts and what you can ask me to do with it.

How long anything is kept

On your device: until you delete it. Nothing expires on its own and nothing is gathered on a schedule.

In your Dropbox, if you sync: until you delete the file. A deleted entry leaves a marker in that file for 180 days, so your other devices learn that it is gone, and the marker is then removed.

At Polar: the license and the devices activated on it for as long as the license exists, and the sale record for as long as tax law requires Polar to keep it. Disconnecting a device removes it from that record.

With me: what Polar shows me about the sale, and anything you have emailed me, which stays in my mail until I delete it. Ask, and I will delete it.

Your rights

If you are in the EU, the EEA or the UK, you have the right to ask a controller for a copy of your personal data, to have it corrected or erased, to receive it in a portable form, to restrict or object to how it is used, and to withdraw consent you have given. California and several other US states give similar rights. Using them costs nothing and needs no account.

Most of them you can use here, without writing to anyone. Your entries are already portable: the Logbook exports every one of them to CSV. Erasing them is clearing the app's storage, and deleting the file from your Dropbox if you sync. Withdrawing consent is disconnecting Dropbox, or removing the Anthropic key.

For the part that is not on your device, write to me at the email address above. The license record at Polar and the sale it belongs to are the only personal data connected to me, and I will answer within one month. If part of a request would break a tax record Polar has to keep, I will say so rather than quietly do half of it.

You can also complain to a data protection authority. In the EU and the EEA that is the supervisory authority of the country you live in. In the UK it is the Information Commissioner's Office.

What the app never collects

No location, no contacts, no advertising identifiers, no behavioral analytics, no crash telemetry, no address book, no device fingerprint beyond the short label described above. There is no profile of you anywhere, and no third party in the app besides the three named on this page — and two of those only if you ask for them.

This page makes no requests to any other server: no fonts, no scripts, no images loaded from anywhere else.

Changes to this policy

This policy may change as the app changes. The "Last updated" date at the top is how you know it did.

Children

Deep Work is not directed at children under 13. It does not knowingly collect information from them.

Contact

Questions about this policy or your data: joshua.vennetti@gmail.com