Whenzo — Privacy Policy
Last updated: 30 September 2026
Whenzo is a personal-memory app that answers “when did I last do this?”. It runs entirely on your device.
The short version
Whenzo sends no tracker data or app analytics to its developer. Your trackers, notes and history stay on your device. There is no account or sign-in, and the app has no INTERNET permission.
Android may back up app data to your Google account. If you share usage and diagnostics with Google, Play may also provide crash and performance reports to the developer. Backup and Play diagnostics are explained below.
What the app stores, and where
Everything you enter (tracker names, groups, icons, target intervals, the history of when you logged something, and any notes or amounts attached to those logs) is stored in a database in the app’s private storage on your device. No other app can read it. Uninstalling Whenzo deletes it.
Backup to your own Google account
Android’s built-in Auto Backup is enabled for Whenzo. This means Android may copy the app’s database to your Google account, so that your history survives a lost phone or a move to a new one.
This is a transfer between you and Google, under Google’s privacy policy. The developer of Whenzo has no access to it and is not notified that it happened.
You can turn it off at any time in Android Settings › Google › Backup, or for this app specifically where your version of Android offers that. The app states this on its own Settings › About screen too, so the behaviour is not hidden behind this document.
Exporting your data
Whenzo can export your data as a CSV or a JSON backup. These files are plaintext, not encrypted. Settings exports use the destination you choose in Android’s file picker; sharing a tracker’s history creates a temporary CSV and opens Android’s share chooser. Only the recipient you choose receives a read grant to that shared file. Old temporary files are removed when another history share is prepared after 24 hours.
An export or share happens only when you ask. The provider or recipient you choose may upload or sync the file, including to a cloud drive, under its own policy. Keep exports private and choose a trusted destination. The app lock does not protect exported files.
Optional app lock
The app lock protects viewing the app and widget setup; it does not encrypt the database or gate every log entry. Configured widgets, pinned shortcuts and reminder actions can log entries without app authentication. Tracker information you choose to put on a home-screen widget or pinned shortcut remains visible there. When the lock is enabled, Android 13 and later hide task thumbnails; older Android versions also block screenshots and screen sharing to protect those thumbnails.
Permissions, and why each one exists
Whenzo does not request INTERNET. If you are an invited tester, you can open its Google Play testing page while signed in and check the app’s permission details. The public Play listing is not available yet.
| Permission | Why |
|---|---|
POST_NOTIFICATIONS | To show the optional daily reminder. Requested only when you first turn a reminder on, never at launch. The app works fully without it. |
VIBRATE | The short haptic pulse when you log something. Switchable off in Settings. |
USE_BIOMETRIC, USE_FINGERPRINT | The optional app lock. Authentication is handled entirely by Android; Whenzo never sees a fingerprint, a face, or your passcode — only whether Android reported success. |
RECEIVE_BOOT_COMPLETED | To restore your reminder schedule after the phone restarts, so a reminder is not silently lost. |
WAKE_LOCK, FOREGROUND_SERVICE, ACCESS_NETWORK_STATE | Required by Android’s WorkManager, which schedules the reminder. ACCESS_NETWORK_STATE lets WorkManager check connectivity; Whenzo never uses it to make a connection, and cannot, having no INTERNET permission. |
Whenzo does not request location, contacts, camera, microphone, storage, or any advertising identifier.
No third parties
Whenzo contains no analytics SDK, no advertising SDK, no crash-reporting SDK and no social login. Nothing in the app talks to a server, the developer’s or anyone else’s.
Google Play may collect install, crash and performance diagnostics from devices whose users choose to share usage and diagnostics with Google. Play Console may provide those reports to the developer. This is Google’s collection under Google’s privacy policy, not data sent by Whenzo.
This website
This public policy page is hosted through Cloudflare, which processes web requests, including IP addresses and request metadata, to deliver and secure the page. This is separate from the offline app. See Cloudflare’s privacy policy. This page does not use an analytics script and asks search engines not to index it; that request is not an access restriction.
Children
Whenzo is not directed at children and collects no data from anyone, including children.
Changes to this policy
If the app ever gains a capability that changes any of the above, such as a sync service, this policy will be updated before that version is published, and the change will be visible in the app’s requested permissions.
Contact
Questions about this policy: whenzo@sumtips.com