Fieldnotes privacy policy

Last updated 14 October 2026. Fieldnotes is a personal dashboard operated by its owner on their Mac. It is not currently offered to other users.

Information used

The owner can record health, fitness and financial measurements. When a connection is configured and authorised by the owner, Fieldnotes can retrieve weight and body-composition measurements from Withings, and sleep duration, heart rate variability and resting heart rate from WHOOP. Imported records include dates, observation timestamps and source identifiers. WHOOP permission is limited to reading sleep and recovery data and renewing the connection.

Purpose and storage

Measurements are used to show personal summaries, trends and target progress. The dashboard stores measurements, metric settings and targets in a local SQLite database on the owner's Mac. API credentials and authentication tokens are stored separately in macOS Keychain. Data is retained until the owner deletes it or restores a backup. Local backups may retain earlier records.

Sharing

The dashboard sends authentication requests and data-fetch requests to the connected providers. It does not upload the owner's measurements to a cloud database, sell them, use advertising trackers or send analytics to a third party. Exporting a backup creates a file the owner controls; any later sharing or cloud backup of that file is their choice. This public policy page is hosted separately from the local dashboard. Its hosting provider, Cloudflare, may process visitor request information, such as IP addresses, for delivery and security under its privacy policy. The hosting provider does not receive the dashboard’s measurements or API credentials from this page.

Security

Provider API requests use HTTPS. Secrets are not exposed in frontend JavaScript, ordinary logs or exported backups. The database and backup exports are not independently encrypted by Fieldnotes; protection at rest depends on the Mac's storage encryption and the owner's backup arrangements. The current dashboard listens only on the Mac's loopback interface. The WHOOP connection is configured to return authorisation to a local HTTP callback on the owner’s Mac. This public privacy-policy page does not receive authorisation codes or handle provider sign-in.

Control and deletion

The owner can review, manually edit, export or delete records, clear demonstration records, and manage metric definitions and targets. Manual readings take priority for the same metric and day. Removing a metric hides it while retaining its records. Deleting an imported reading saves a suppression reference so it does not reappear on later syncs. Disconnecting an integration locally removes its saved tokens and stops automatic syncing; imported readings remain unless deleted. Provider permission can also be revoked in the provider's connected-app settings.

Contact

For questions about Fieldnotes and its data handling, contact twittertrial34@gmail.com.