Squared Paper

Squared Paper

Privacy policy

Last updated 12 November 2026.

The short version

Squared Paper has no account, no server and no analytics. Your plans and your sessions are stored on your iPhone. Two things can leave the device, and both are switches you control and both are off or private by default: iCloud sync, which goes to your own iCloud and not to anyone else’s, and Apple Health, which is off until you turn it on.

Nothing is sent to the developer. There is no mechanism in the app that could send it.

Who is responsible

Squared Paper is made by Francesco Recupero Gasperetti, an individual developer in Italy, trading as Your Product Buddy. For anything in this policy, write to francesco@francescorecupero.com.

What the app stores on your iPhone

Everything you put into it, and nothing else:

  • Your plans — their names, categories, groups, exercises and the fields on each step.
  • Your logged sessions — type, date, time, duration, notes and the body of the session.
  • Your workout types and your unit preferences.
  • Which theme you chose, which is kept on that device only and is not synced.

This lives in the app’s own storage on the device, inside the sandbox iOS gives it. Deleting the app deletes it. The app does not read your contacts, your photos, your location or your calendar, and asks for no permission to.

iCloud sync

Sync is a switch in Settings. When it is on, your plans and sessions are mirrored to the private database of your own iCloud account, which is how your other devices see them. That data sits in your iCloud, under your Apple Account, governed by Apple’s privacy policy. The developer has no access to it and no way to obtain it.

Turning sync off stops the mirroring and leaves what is already in your iCloud alone — the app says so plainly where you turn it off, because it is your data in your account and deleting it silently would be worse than leaving it. You remove it yourself through iOS Settings, under your Apple Account.

The app also reports what iCloud actually says rather than what it hoped: if sync is failing, it tells you, rather than showing a tick.

Apple Health

Saving to Apple Health is off until you turn it on, and iOS asks you separately before anything is written. When it is on, each session you log is written to Health as a workout with:

  • the activity type and whether it was indoor;
  • the date and start time;
  • the duration;
  • the distance, where a step in the session recorded one;
  • the workout’s name.

The app reads nothing of yours from Health. It requests no read authorisation at all. It does look up workouts it wrote itself, so that editing or deleting a session here updates Health instead of leaving a stale copy behind — that lookup is restricted to this app’s own samples and cannot see anything written by any other app or device.

Health data stays in Health, on your device and in your own encrypted iCloud if you have Health sync on. It is never sent to the developer. Turning the switch off stops new writes; what is already in Health stays there, and you remove it in the Health app.

Backups you export

You can export everything as a single JSON file. You choose where it goes — Files, iCloud Drive, a third-party storage app, anywhere the iOS share sheet offers. Once it leaves the app it is an ordinary file under your control, and whatever you send it to applies its own policy. The developer never receives it.

What is not collected

To be specific, because “we value your privacy” is not specific:

  • No analytics or usage statistics of any kind.
  • No crash reporting SDK, no advertising identifier, no attribution or marketing framework.
  • No third-party software development kits at all.
  • No accounts, so no email address, password or profile.
  • No network requests to any server operated by the developer, because there isn’t one.

What Apple sees

Downloading the app is a transaction between you and Apple, and Apple may share aggregate, anonymous statistics with the developer — how many downloads there were in a country, for instance, or anonymised crash reports if you have chosen to share analytics with developers in your iOS settings. None of it identifies you, and none of it is collected by the app.

Children

Squared Paper is not directed at children and collects nothing from anybody, so there is nothing collected from a child either.

Your rights

Under the GDPR you have rights of access, correction, erasure, portability and objection. They are straightforward here because the developer holds no data about you: there is nothing to request and nothing to erase. Your own copy is in your hands — export it as a file at any time, and delete the app to remove what is on the device. If you believe otherwise, write to francesco@francescorecupero.com, and you may complain to your national data protection authority.

Changes

If this policy changes, the new version appears here with a new date above. Material changes will be described in the App Store release notes of the version that makes them.

Contact

francesco@francescorecupero.com