Privacy Policy

Account Information: When you sign up, we collect your email address and name from your authentication provider (Google).

Service and quota data: When you use an authenticated Mac app, it reports recording-minute totals needed to enforce plan limits. This report does not contain the captured frames. Optional web analytics, such as pages visited and features used, runs only after analytics consent.

Recording Data: The Realwork Mac app records selected work sessions locally on your device. This data is only uploaded when you explicitly choose to publish a record. Published records can include video, session timing, app names, thumbnails, and any manifest metadata present at upload; cryptographic verification is shown only when the record explicitly reports it.

We use the information we collect to:

• Provide, maintain, and improve our services
• Authenticate your account and secure your data
• Host and serve your published proofs
• Send you important updates about the service
• Respond to your questions and support requests

Local-first media: Recordings are stored locally on your Mac by default and are uploaded only when you publish. Auth, quota, and other service metadata may still be exchanged as described above. Unpublished files remain subject to the security of your device and local account.

Transport and storage: Data is sent over TLS. Published media and metadata are stored with our configured object-storage provider and are exposed according to the selected privacy setting. Do not include sensitive windows in a public record.

Verification limits: New native records can carry a durable device-key identity plus signed session and media hashes. The server reports an integrity status only after it checks the supplied key, signatures, hashes, and chain; legacy or incomplete records remain unverified. These checks do not hash every video frame, prove continuous capture, establish authorship, or show that a record was never edited outside the declared scope.

We do not sell your personal information. We may share data with:

• Service providers: Supabase for authentication and database services, Cloudflare R2 for private evidence objects, Dodo Payments for checkout and subscription processing, Google when you choose Google sign-in, and PostHog only after analytics consent.
• Legal Requirements: If required by law or to protect our rights
• Your Published Records: Public records appear on your profile; unlisted records are intended for people with the link; private records are intended for your account. Access still depends on the service and configured storage controls.

You have the right to:

• Request access to or a copy of your data
• Request deletion of your account and associated service data, subject to required legal or security retention
• Unpublish proofs you've previously shared
• Opt out of non-essential communications

To exercise these rights, contact us at privacy@realwork.app.

We use essential cookies for authentication and session management. PostHog analytics is disabled until you opt in through the consent control. We do not use third-party advertising trackers.

We may update this policy from time to time. We will notify you of significant changes by email or through the service.

If you have questions about this Privacy Policy, please contact us at privacy@realwork.app.