Privacy Policy for Foreglow
Who is responsible
Robert Anton Wecken
Rodenbergstraße 23
10439 Berlin, Germany
support@foreglow.net
I build and run Foreglow as an individual. Under the GDPR I am the "controller" for the data described here.
The short version
Foreglow has no accounts, no login and no servers of its own. Everything you log stays on your iPhone and Apple Watch and, if you use iCloud, in your own iCloud account. I cannot see it. The app asks a weather service for UV and sunshine data for your location, and that is the only data that leaves your device during normal use. There are no analytics, no advertising and no tracking.
What Foreglow uses, and where it goes
Your location. Foreglow uses your location only while you use the app (and the Watch app). It needs it to show local UV, sunrise, sunset and daylight. To get that data, the app sends your coordinates, rounded to about one kilometre, to the weather service Open-Meteo, which returns UV and sunshine data. Sunrise and sunset are calculated on your device. The app also asks Apple to turn coordinates into a place name, and shows session places on Apple Maps. Your last known place is kept on your device and your Watch. Places you save (up to five) are kept on your device. The place of each session is kept with that session. If you turn on the "Sun is out" notification, the app may refresh UV data for your last known place in the background, without asking for your current location.
Your profile. First name and skin type. Kept on your device and, if iCloud is on, in your private iCloud database so your devices stay in sync.
What you log. Sunscreen applications, outdoor sessions (times, activity, place, title, notes, pauses) and photos you add to a session. Kept on your device and, if iCloud is on, in your private iCloud database. Photos are stored without their original location metadata.
Apple Health (optional). If you allow it, Foreglow reads your skin type, time in daylight, workouts and the starting point of workout routes to suggest sessions. It writes the UV index of each logged session to Health. Anything Foreglow takes from Health stays on your iPhone. It is not synced to iCloud, not sent to anyone, and never used for advertising or any purpose other than the app's features. You can withdraw Health access at any time in the Health app.
Daily light records. Your mode, your daily light goal and the last 14 days of light exposure are kept on your device and shared with the widgets and the Watch app.
Foreglow Pro. Purchases run through Apple's App Store. Apple handles payment; I never see your payment details. Foreglow attaches a random support ID to purchases so I can help you if a purchase goes wrong. This ID is not linked to your name or Apple Account and syncs through your iCloud Keychain. Apple's terms and privacy policy apply to the purchase itself.
Support. If you email support@foreglow.net, I receive your email address and what you write. The email template adds your device model, iOS version, language, app version and support ID; you can delete any of it before sending. Support mail is routed by Cloudflare and stored in a Google (Gmail) mailbox. I keep support emails as long as needed to help you and delete them after 12 months at the latest.
Notifications. Reminders such as "Reapply" are scheduled on your iPhone. Nothing about them is sent to a server.
Sharing. Share cards you create are images. They leave the app only when you choose to share or save them.
The services behind the app
When the app fetches data, the provider's server sees your IP address, as with any internet request.
- Open-Meteo (OpenMeteo GmbH, Bürglen, Switzerland): receives rounded coordinates and dates to return UV and sunshine data. Their server logs are deleted after 90 days and not shared. Switzerland is recognised by the EU as a country with adequate data protection. Weather data by Open-Meteo.com, licensed under CC BY 4.0. Privacy: open-meteo.com/en/terms
- Apple (Apple Distribution International Ltd., Ireland, for users in the EU): place names and maps, iCloud and CloudKit, the App Store and StoreKit, and push delivery for iCloud sync. Apple may process data outside the EU; its privacy policy explains the safeguards. Privacy: apple.com/legal/privacy
Nobody else receives data from the app. Foreglow contains no third-party software development kits.
Legal basis
Providing the app's features: Art. 6 (1) (b) GDPR. Location and Health access: your consent through the iOS permission dialogs, Art. 6 (1) (a) and, for Health data, Art. 9 (2) (a) GDPR. Answering support requests and keeping the service running: Art. 6 (1) (f) GDPR. You can withdraw location and Health access at any time in iOS Settings.
How long data is kept
Data on your device and in your iCloud stays until you delete it. Delete a single session, place or photo in the app, or use "Erase everything" in Settings to remove all Foreglow data from your device, your Watch, your private iCloud database and, if Foreglow still has Health permission, the UV values it wrote to Health. Deleting the app removes local data; iCloud data stays until you erase it in the app or in iOS Settings under iCloud.
Your rights
You have the right to access, correct, delete and receive your personal data, to restrict or object to its processing, and to withdraw consent. Because I hold no copy of your data, you exercise most of these rights directly in the app. For anything else, write to support@foreglow.net. You can also complain to a data protection authority; the one responsible for me is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, datenschutz-berlin.de.
The website
foreglow.net is a static website hosted by Cloudflare. It sets no cookies and uses no analytics. Cloudflare processes your IP address to deliver the pages and protect against abuse; see Cloudflare's privacy policy at cloudflare.com/privacypolicy.
Children
Foreglow is not directed at children under 16.
Changes
If this policy changes, the new version appears here with a new date. Material changes are also mentioned in the app's release notes.