Last updated 29 August 2026
Wendra is built so that we do not hold your notes. This page explains exactly what that means and where the exceptions are.
There is no Wendra account and no Wendra database. Your notes live on your devices and, if you leave sync on, in your own private iCloud storage, which is your Apple Account and not ours. We cannot browse it, search it, or hand it to anyone, because we have no access to it at all.
Every field Wendra writes is stored in an encrypted CloudKit field rather than in plain text: the body of every note, its title, its tags, its folder and its flags. Attachment bytes are encrypted the same way. The only things stored unencrypted are the ones Apple's sync system controls and we cannot change: a random identifier per note, and Apple's own record timestamps.
Being stored in an encrypted field is not the same as being end to end encrypted, and we will not blur the two. Under standard iCloud protection, Apple holds the key that unlocks those fields. If you turn on Advanced Data Protection in your Apple Account settings, the key stays on your devices and nobody but you can read your notes, including Apple and including us.
Wendra contains no analytics, no advertising, no tracking pixels, no crash reporting service and no third party SDKs that phone home. We do not collect a device identifier, a location, a contact list, or a record of what you typed.
If your app crashes and you have opted in to sharing diagnostics with developers in your device settings, Apple may send us an anonymised crash report. That is a setting you control, it is delivered by Apple rather than by us, and it contains a stack trace rather than your content.
Wendra is free to download. Some features are sold as a subscription or a one time purchase. Apple processes every payment. We never see your card, your billing address, or your Apple Account email. Your device asks Apple what you are entitled to and unlocks accordingly. Refunds are handled by Apple.
When you import from another notes app, the file you choose is read on your device and written into your own library. Nothing is uploaded to us and nothing is sent anywhere else.
Mail sent to info@crindustries.xyz reaches a mailbox we read. We keep it
for as long as it takes to help you, and we do not add you to anything.
Wendra is a tool for adults doing work. It is not directed at children and we do not knowingly collect anything from them, which is straightforward here because we do not collect anything from anyone.
If this policy changes, the date at the top changes and the new version appears here. A change that affects what leaves your device will be called out in the app's release notes rather than only appearing quietly on this page.
info@crindustries.xyz