PipeGuard

Privacy Policy

Last updated: 18 September 2026

What the app handles, and where it stays

Location	Used only to request the forecast for the house, rounded to about a kilometre (two decimal places) before it is stored on the phone or sent in a request. It never follows your phone after setup, and we never receive it.
Forecast requests	Sent from your phone to the US National Weather Service (api.weather.gov) for homes in the US and to MET Norway (api.met.no) everywhere else. A request carries the rounded coordinates and, like any web request, your IP address; MET Norway also receives the app's name and our support address, as its terms require. No account, no identifier of yours. Forecast data: NWS (public domain) and MET Norway (CC BY 4.0).
The town or address you type	Turned into coordinates by your phone's own geocoding service — Google's on Android, Apple's on iOS — in a single request when you save it, not as you type. That request goes to the platform your phone runs on, under its terms; it does not come to us, and we never see the text or the result.
Your home profile, journal, notes and photos	Stored on the device. Never uploaded. The policyholder name and street address you type for the PDF stay on the phone and are printed only into the PDF you export.
PDFs and shared checklists	Leave the phone only when you share them yourself, through your phone's share sheet.
Notifications	Scheduled locally by the app. There is no push server, so nothing about you passes through us.

Your phone’s own backup

Your home profile and the season journal are included in your phone's own backup — Android Auto Backup, or iCloud Backup on an iPhone — if you have it switched on, which is what puts a season's evidence back when you replace the phone. Journal photos are left out of the Android backup, because a season of them can exceed the quota Android gives an app and take the rest of the backup down with them. A backup like that is made by your phone into your own Google or Apple account, under your control and your provider’s terms. It never reaches us, and you can switch it off in your phone’s settings.

This website

This site is served by Cloudflare Pages, which counts visits through Cloudflare Web Analytics — it sets no cookies, stores no identifier and does not follow you across sites. The pages themselves set no cookies, contain no forms and load nothing from anywhere else.

Crash and error reporting

To find and fix defects, the app sends crash and error reports to Sentry, our error-monitoring provider. A report contains the error itself, a technical breadcrumb trail, the app version, the device model and the operating system version. Reports contain no personal content by construction: nothing you type or map is ever attached, the breadcrumb trail is trimmed to technical operation names before sending, and session tracking is switched off so a report carries no installation identifier. Like any request over the internet a report arrives from your IP address; the project is configured not to store it. Reports are never sent from development builds. Crash reports contain no location, none of your answers and no journal content; the coordinates in a forecast request are removed from them before sending.

You can switch this off. Settings → Send crash reports stops the app sending anything at all; everything else keeps working. Reports are processed on Sentry's servers in the United States and are deleted automatically after 90 days.

Feedback you send

Settings → Send feedback is the one place where something you wrote leaves the phone, and only because you wrote it and tapped send. It carries your message and the diagnostic journal the app shows you in full beforehand, to the same provider as the crash reports. Two things travel only if you choose them: your email address, if you type one so that a person can reply, and a picture of the app’s own screen, if you switch that on for that one message. The picture is the screen you were looking at and you see it before it goes; it is never a photo, a recording or a file from your phone. If crash reporting is switched off, the app opens your own mail app instead and sends nothing itself. Feedback is deleted after 90 days like the reports; a feedback carrying your email address can be found and deleted sooner if you ask, and one sent without an address cannot be found at all.

Purchases

Payments are processed entirely by Google Play or the Apple App Store. We never see or store your card details, address or payment identity — the app only learns whether a purchase is active.

Advertising and tracking

The app contains no advertising, no analytics SDK, no advertising identifier and no cross-app or cross-site tracking of any kind. Nothing you do in the app is sold or shared for marketing.

Children

The app is a household utility and is not directed at children under 13.

Your data, your control

Delete journal & profile in Settings, or uninstalling the app, removes everything from the device. PDFs you exported stay where you saved them. Because we operate no accounts and no servers holding your content, there is nothing for us to delete on our side and nothing to export from us. If you have any question about your data, write to [email protected] and you will get an answer from a person.

If you are in the EU, the UK or California

The controller of the little data described above is Dmitrii Zusmanovich, an independent developer established in Israel, reachable at [email protected] — so Israeli privacy law applies to us alongside the law of the country you live in. Crash reports are processed on the basis of legitimate interest — keeping the app from crashing — and you can withdraw from that at any time with the switch in Settings, with no effect on anything else. Because there is no account and no server of ours, there is nothing about you for us to look up, correct, port or erase: the crash reports above carry nothing that identifies you, so we could not find yours even in order to delete it, and they are deleted after 90 days regardless. Everything else exists on your own device and under your control. You retain the right to lodge a complaint with your national data-protection authority. We do not sell or share personal information, and we have no “sale” or “targeted advertising” to opt out of.

Changes

If this policy changes, the date at the top changes with it, and the updated text is published on this page before the release that relies on it.

Contact

PipeGuard is made by Dmitrii Zusmanovich, an independent developer. Questions, requests or complaints: [email protected].