Privacy Policy

1. Who we are

Screening Notes Pro is developed and operated by Business Monkey (contact: info@businessmonkey.eu). For personal data processed through the App and businessmonkey.eu, Business Monkey is the controller.

We do not sell personal data. We do not use your notes or session content for advertising. We do not run third-party ad networks in the App.

2. Solo lists (on your device)

A solo list stays on your device. Notes, tags, titles, clock settings, and related metadata are stored locally (for example in the App’s preferences storage). Optional project images you attach are stored in the App’s private application support files on the device.

Your display name for exports (set in Settings / welcome) is stored locally on the device and is used when you export. It is not uploaded for solo lists.

Solo list content is not sent to our servers unless you later turn that list into (or participate in) a live group session, or you export/share files yourself through iOS share sheets.

3. Live group sessions (on our servers)

When you create or join a live group session (also called a group list), we temporarily host the shared room so everyone can write notes on the same clock — in the App or via a browser join page on businessmonkey.eu.

What we process for a live session

• Session title, frame rate, start timecode / clock settings, tag set configuration
• Notes and tags contributed during the session (user content)
• Contributor display names you enter when joining (so others can tell notes apart)
• Technical room identifiers (join token, contributor IDs)
• Optional join password (stored only as a one-way hash, never in plain text)
• Host device identifier (an app-installation / vendor device ID) used to create the room and apply free-tier limits
• Expiry time chosen when the session is created

Where it lives during the session

Active group session data is stored on infrastructure operated via Cloudflare (Workers, Durable Objects for the live room, and a D1 database for persistence), served from businessmonkey.eu.

Each participant’s device also keeps a local copy of the session and notes so you can keep working offline-ish and retain your notes after the live room ends.

Secrets needed to host or rejoin (creator secret, join password) are kept in the device Keychain where applicable, not in plain text inside the shared note file.

4. When data is deleted

On the server (live group sessions)

• While live: the room stays available until the host completes it, or until the chosen expiry time (typically up to 24 hours for free / day-pass hosts, longer for Pro where offered).
• When completed or expired: the live session ends. Contributors are disconnected. The server keeps the data for a short grace period of about one hour so devices can still fetch a final copy if needed.
• After the grace period: an automated hourly cleanup permanently deletes the group list, its notes/entries, and contributor records from our database. The join link then stops working.

On your device

• Deleting a list in the App removes that session’s local notes, clock state, and related project image files from the device.
• If you are the host of an incomplete group session and you delete it locally, we complete the remote session so the room closes for everyone (same outcome as completing it).
• Uninstalling the App removes local App data from that device (subject to iOS behaviour). It does not by itself cancel an already-running server room until that room expires/completes and is cleaned up as above.

5. Device limits & freemium counters

To enforce free allowances (for example a limited number of hosted group sessions), we may store a small counter keyed to a device identifier on our server (how many free group sessions that device has already used). This is not an advertising identifier and is not used to build marketing profiles.

Related freemium state on the device (remaining free groups, last free export time, day-pass expiry) may also be stored in the device Keychain / local preferences so limits survive ordinary App reinstalls where iOS Keychain persistence applies.

6. Purchases

In-app purchases and subscriptions are processed by Apple through the App Store / StoreKit. We receive entitlement information needed to unlock features (for example Pro, unlimited exports, or a group-sessions pass). We do not receive your full payment card details.

Apple’s processing of payment data is governed by Apple’s own privacy policy and terms.

7. Camera, photos & Apple Watch

• Camera sync reads on-screen timecode on your device to align the clock. Frames are processed locally for that purpose; we do not upload a live camera stream for solo use.
• QR scanning is used only to join a group session. Camera access is optional and used for that feature.
• Save QR to Photos writes an image you explicitly export to your photo library.
• Apple Watch companion features exchange session/tag taps with your iPhone over Apple’s WatchConnectivity mechanisms. Watch note content follows the same local / group-session rules as phone notes.

8. Use of TelemetryDeck to analyze app usage

We use the privacy-friendly analytics service TelemetryDeck (provider: TelemetryDeck GmbH, Von-der-Tann-Str. 54, 86159 Augsburg, Germany) to analyze usage data. The use is based on Art. 6 para. 1 lit. b GDPR, as we require reliable and efficient tools for collecting app usage data in order to fulfill the contract with you, our customer.

What data is transferred?

The data processed by TelemetryDeck is completely anonymized and does not allow any conclusions to be drawn about personal information.

The following data is collected, among other things:

• an anonymized, untraceable user ID (per app installation),
• actions defined by the app publisher (e.g., “app launched,” “settings opened”),
• a rounded timestamp (to the nearest hour),
• device metadata (e.g., system version, app version, device type),
• additional metadata defined by the app publisher (e.g., “number of items in the database”).

In Screening Notes Pro, product events may also include non-identifying feature context such as entitlement tier labels (for example free / Pro) or export format names — not the text of your notes.

What is not stored?

• No IP addresses (not in logs, not in the database),
• No cookies or tracking technologies,
• no persistent identifiers that could be traced back to individuals.

The source code of the TelemetryDeck SDK is completely open source and available on GitHub: https://github.com/TelemetryDeck

Further information on the exact data processing by TelemetryDeck can be found at: https://telemetrydeck.com/privacy and at https://telemetrydeck.com/docs/guides/privacy-faq/

9. Infrastructure & processors

• Cloudflare, Inc. — hosting for businessmonkey.eu, live group session APIs, and temporary session storage. See Cloudflare’s privacy documentation for their role as infrastructure provider.
• TelemetryDeck GmbH — privacy-friendly product analytics (see section 8).
• Apple Inc. — App Store distribution, in-app purchases, push/device platform services, and optional crash diagnostics you may share with Apple through iOS.

Depending on where you and these providers operate, data may be processed in the EU and/or other countries. Where required, appropriate safeguards (such as Standard Contractual Clauses) are used by those providers for international transfers.

10. Legal bases (GDPR)

Where the GDPR applies, we rely on:

• Art. 6(1)(b) — performance of a contract / steps prior to a contract: providing the App, solo lists, live group sessions, exports, and related support; TelemetryDeck usage analysis as described above.
• Art. 6(1)(f) — legitimate interests: securing the service, preventing abuse of free allowances, diagnosing reliability issues, and improving the product in a privacy-preserving way.
• Art. 6(1)(a) — consent, where iOS permission prompts require it (for example camera or Photos access). You can withdraw device permissions in iOS Settings at any time.

11. Your rights

Depending on applicable law, you may have the right to:

• access, rectify, or erase personal data we hold about you
• restrict or object to certain processing
• data portability for data you provided
• lodge a complaint with a supervisory authority

For solo lists, most content only exists on your device — delete lists in the App or uninstall to remove them locally.

For live sessions, server copies are short-lived and automatically deleted after completion/expiry plus the grace window. If you need help with a deletion request while a room is still active, email us with enough detail to identify the session (for example the join link or token), and we will help where we reasonably can.

12. Children

Screening Notes Pro is aimed at film and video professionals and is not directed at children. We do not knowingly collect personal data from children. If you believe a child has provided personal data through a live session, contact us and we will delete server-side data we control.

13. Changes

We may update this policy when the product or legal requirements change. The “Last updated” date at the top will change when we do. Material changes may also be noted in the App Store “What’s New” text or in the App.

14. Contact

Questions about privacy or this policy:
info@businessmonkey.eu
Website: https://businessmonkey.eu
App Store: Screening Notes Pro