Privacy policy

Last updated 24 October 2026

In short: Proofstay has no accounts, no servers that hold your data, no analytics and no ads. Your days, photos and proof stay on your iPhone, and in your own iCloud if you turn on backup. We can't see any of it.

Who we are

Proofstay is made by Hoang Chu, an independent developer. Contact: support@proofstay.app.

What stays on your iPhone

Where you were each day: an approximate location (about 1 km) when you open the app, and one precise location when you take a photo in the app.
Photo history: the date and place of your library photos, used to fill in past days, plus a small copy (about 400 px) of one photo per day for your report.
Proof you add: selfie checks, check-in photos, and tickets, tolls or receipts you attach.
Face ID checks: only whether the check passed and a fingerprint of the enrolled-faces setting. Face data never reaches the app; Apple keeps it in the Secure Enclave.
Your name and signature for reports, if you enter them.
The proofed log: a record of the above, each entry chained to the one before so changes show.

Location, photos and Face ID are processed on the device. Proofstay never sends them to us or to anyone else.

iCloud backup (optional, Plus)

If you turn on backup, Proofstay stores a copy of your data in your own iCloud account, in a private database only you can access. Apple's servers add a timestamp to each day's proof. We don't have access to your iCloud data. You can delete it in iPhone Settings → [your name] → iCloud → Manage Account Storage → Proofstay.

Purchases

Subscriptions are sold and managed by Apple. Apple tells the app whether you have Plus; we don't receive your name, Apple ID or payment details.

Network requests the app makes

Apple's App Store, to see if a newer version exists, and Apple's StoreKit and iCloud services.
app.proofstay.app/config.json, at most once a day, to learn whether an update is required. The app sends no data with this request. Our server keeps no access logs; our hosting provider may keep short technical logs (such as IP addresses) for security, which we don't use to identify anyone.

Reports you share

A report, CSV or log file contains your data. It leaves your iPhone only when you share it, and goes only where you send it.

Deleting your data

Deleting the app deletes everything stored on the iPhone. Delete the iCloud backup as described above. Exports you've sent are held by whoever received them.

Children

Proofstay is not directed at children under 13.

Changes

If this policy changes, the date above changes, and important changes are shown in the app.