Skip to content
header

Privacy Policy

Your private workspace belongs to you. Here is how we keep it that way.

Last updated: August 19, 2026

Privacy should not feel like fine print. People Work is made for the notes and reflections you would not put in a company system, so we designed it around a simple promise: your private workspace is yours.

Here is the short version:

  • Your workspace is encrypted on your approved devices.
  • Synced workspace data reaches our servers only after it has been encrypted.
  • We do not have the private keys needed to decrypt it. Even if someone legally required us to hand over what we store, we could provide only encrypted workspace data, not readable contacts, journal entries, or reflections.
  • We do not sell your information, show advertising, or track how you use the app.
  • We keep a limited amount of account, security, billing, and support information so People Work can function.

The rest of this page explains those points in detail. Hedge-Ops Software, LLC ("Hedge-Ops," "we," or "us") operates People Work.

1. Your private workspace

Your workspace can contain contacts, groups, events, commitments, journal entries, and related information. People Work stores the durable workspace document in encrypted form on each approved device and decrypts it when an approved, unlocked device needs to show or update it for you.

To keep your approved devices in sync, People Work sends encrypted workspace versions and assets to our service. Our servers store ciphertext, not readable workspace content. The private keys needed to decrypt that content remain with your approved devices. We do not have those keys, so we cannot read or disclose your private workspace content.

That protection has an important boundary: information that is readable on an unlocked device can also be read by a person or software with access to that device. Keep your device and recovery material secure.

If you choose to connect an AI provider or another tool, that tool may read the workspace information you authorize it to access on your device. Its handling of that information is governed by its settings and privacy policy. Our privacy guide explains what to check first.

2. The limited information we can see

Your account and approved devices

To create and secure an account, People Work may process:

  • your name, email address, account status, and account timestamps;
  • email-verification and account-recovery records;
  • public encryption keys and encryption-ring metadata;
  • device name, app or shell type, operating-system or browser information, client public keys, token hashes, session status, and relevant timestamps;
  • security and abuse-prevention information, including request identifiers and hashed source-IP or user-agent values associated with verification attempts.

Private recovery material and private encryption keys are intended to remain on your authorized devices. Do not send recovery keys, passwords, or authentication tokens to support.

Email and support information

We use Resend to deliver authentication and invitation emails and to report delivery events such as delivered, bounced, complained, opened, clicked, or failed. People Work stores limited records needed to associate and troubleshoot those messages.

If you contact support, we process your email address and whatever information you choose to include so we can respond. Please do not send passwords, recovery keys, authentication tokens, or private workspace files.

Your subscription

Subscription handling depends on where you subscribed:

  • Apple App Store: Apple handles payment details and subscription management. People Work processes StoreKit transaction and entitlement information needed to validate and maintain access, such as product, transaction, status, renewal, environment, and subscription-period information.
  • Google Play: Google handles payment details and subscription management for subscriptions started through Google Play. People Work processes purchase tokens, product and subscription identifiers, status, renewal, environment, and subscription-period information needed to validate and maintain access.
  • Stripe: Customers who subscribe from a Stripe-enabled People Work client complete checkout and manage billing through Stripe-hosted pages. People Work processes Stripe customer, subscription, price, invoice, charge, refund, dispute, checkout, and status information needed to maintain the subscription. People Work does not store full payment-card numbers in its application database.

Subscription cancellation and account deletion are separate actions. Canceling a subscription does not automatically delete encrypted workspace data on your devices or all account and operational records.

If you visit people-work.io

This paragraph is about visits to our public website, not activity inside the People Work app. The website uses Plausible Analytics to show us aggregate traffic such as page visits, referral sources, browser or device category, and approximate region. It does not receive workspace content. Plausible does not use cookies or persistent identifiers and does not store raw IP addresses.

The website may also remember a theme preference in your browser. Authenticated People Work services use necessary session storage, cookies, or tokens to keep you signed in and protect your account. We do not use them for advertising.

3. How we use information

We process information to:

  • create, authenticate, recover, and secure People Work accounts;
  • synchronize encrypted workspace information across authorized devices;
  • validate purchases, maintain subscription access, and provide billing support;
  • send required authentication, invitation, service, and support communications;
  • investigate errors, abuse, security events, and service reliability;
  • understand aggregate traffic on the public website and improve it;
  • comply with legal obligations and protect People Work, its customers, and others.

4. What we share, and what we never share

We do not share your private workspace content. Contacts, journal entries, reflections, commitments, and other private workspace data are encrypted before they reach our servers. Because we do not have your private keys, we cannot decrypt that content for a service provider, an advertiser, or a legal request.

We use a small number of providers for information outside your private workspace:

  • Apple for App Store distribution, purchases, and subscriptions;
  • Google for Google Play distribution, purchases, and subscriptions;
  • Stripe for subscriptions started through Stripe-enabled People Work clients;
  • Resend for authentication and invitation email delivery;
  • Plausible Analytics for aggregate measurement of the public website only;
  • Cloudflare and infrastructure providers for website hosting, network delivery, security, and service operation.

They receive only the limited account, transaction, email-delivery, network, or website information needed to perform their role. They are required to protect it under their agreements with us and applicable law.

If the law requires us to disclose information we can access, we will disclose only what the request lawfully covers. For synchronized workspace content, what we can access is encrypted ciphertext. We cannot turn it into readable workspace data because we do not possess your private keys.

We do not sell personal information, and we do not share information with advertising networks.

5. Retention

We do not keep a readable copy of your workspace on our servers. Here is what we do retain:

  • Encrypted local workspace data remains on an approved device until you remove the app's local data from that device.
  • Encrypted synchronized workspace versions and assets are retained so approved devices can stay in sync. We cannot decrypt them.
  • Account and approved-device records, including your name, email address, account status, public keys, and device records, are retained while needed to provide and secure your account.
  • Completed or expired verification, registration, recovery, and related security records are scheduled for removal after the approved 90-day retention window.
  • Abandoned Stripe checkout-session records are scheduled for removal after 90 days.
  • Subscription and transaction records may be retained after a subscription ends when needed for billing, taxes, refunds, disputes, fraud prevention, and legal obligations.
  • Support messages and email-delivery records are retained as needed to answer you, troubleshoot delivery, prevent abuse, and preserve an accurate support history.

We remove or anonymize information when it is no longer reasonably needed for those purposes. Account deletion and removing encrypted workspace data from a device are separate actions.

6. Your choices and account questions

You can contact support@people-work.io to ask what account information we hold, request correction of inaccurate account information, or ask a privacy question. Depending on where you live, applicable law may provide additional rights.

You can delete your account from People Work. The app verifies the request through your account email and requires an exact confirmation phrase. Successful deletion immediately makes the account inaccessible and revokes its clients. Cloud data is scheduled for permanent deletion within 15 days; that interval is processing time, not a recovery period. Account deletion does not cancel an Apple, Google Play, or Stripe subscription, which must be managed with the provider where it was purchased.

7. Security

Privacy is part of the architecture, not just this page. People Work uses end-to-end encrypted synchronization, hashed authentication material, scoped device credentials, and access controls. We also design logs and operational metrics to avoid private relationship data and encryption material.

No system or device is invulnerable. You can help by protecting your devices, recovery material, and account access. We will keep working to earn the trust you place in us.

8. Children

People Work is a professional-relationship product and is not directed to children under 13. If you believe a child has provided personal information to us, contact support.

9. Changes to this policy

We may update this policy as People Work changes or as legal requirements evolve. We will post the revised policy here with an updated date and provide additional notice when appropriate.

10. Contact