This Privacy Policy explains how Brightwater ("Brightwater", "the app", "we", "us", or "our") handles information in connection with your use of the Brightwater iOS application (bundle identifier xyz.bogtsi.brightwater). Brightwater is developed and operated by an individual developer based in Israel (the "Developer").
Brightwater has no user accounts, no login, and no backend server operated by us. Your records stay on your device unless you explicitly choose a destination for an export or backup. The chosen destination's privacy practices then apply. Subscription services are described below.
Brightwater is operated by a solo developer based in Israel. For any privacy question or request, contact us at support@bogtsi.xyz.
The following information is created and stored on your device inside the app's sandbox, except when you choose to share or email an export or full backup. It is never transmitted to us — we operate no server to receive it:
Uninstalling removes local app data, but cannot erase any copies you previously shared through Files, Mail or another destination. Brightwater offers no automatic cloud backup or sync. iCloud device backups, if enabled, are governed by Apple.
Attaching a photo and scanning a test strip are optional. iOS asks for photo-library or camera permission first. Brightwater reads only photos you select; it does not browse your library or write to the camera roll. Scanner analysis uses the phone's camera, Vision and Core Image locally. A strip capture is temporary and not added to the diary; attached diary photos stay in app storage unless you explicitly include them in a full backup and choose an external destination. Deleting an entry or the app does not delete copies already shared elsewhere.
If you enable reminders, Brightwater schedules local notifications on your device only — for maintenance tasks and, if you set them up, lights-on/lights-off reminders. They are generated and delivered on-device and respect the quiet hours you set. We use no push tokens and send no remote push notifications.
On every plan, a per-tank CSV export is a human-readable, partial interchange: it cannot contain photo bytes or all local settings. A full .brightwaterbackup file includes the app's 11 local state stores and referenced photo bytes. The backup file is not encrypted; anyone with it can read its contents. We write a temporary file locally and open the iOS share sheet or your configured Mail composer only after you choose a destination. Opening Mail does not mean an email was sent. Files, Mail, AirDrop or another app may copy your records and photos off the device under that destination's policies. We never automatically send an export or backup to our servers. A restore reads a file you explicitly choose, checks it and asks you again before replacing the data on this phone. Legacy CSV imports recover only fields actually present in the CSV, not missing photo bytes or settings.
Brightwater relies on a small number of third-party services. When you use the app, some of these services may collect or process data directly, under their own privacy policies. We map each one below.
| Service | When it applies | What it processes | Purpose |
|---|---|---|---|
| RevenueCat | When you start, restore, or manage a Brightwater Pro subscription | Purchase and subscription data, keyed to a pseudonymous app-user identifier (we never set a user ID, because there are no accounts). No tank data, readings, photos, or any other app content is ever sent to RevenueCat. | To process purchases, validate receipts, and unlock Pro features |
| Apple / App Store | Download, updates, and in-app purchases | Purchase transactions and standard App Store data handled by Apple. Payment is made to Apple with your Apple ID — the Developer never receives or sees your payment card details. | App distribution and payment processing |
| Expo / EAS | App build, distribution, and over-the-air updates | Used to build and ship the app and to deliver JavaScript updates; the app sends no personal data to Expo at runtime as part of Brightwater's features | To build and ship app updates |
We use no analytics or crash-reporting SDKs of our own (no Firebase, Sentry, Amplitude, or similar), and Brightwater's own code makes no network requests to any server we operate.
Brightwater contains no advertising and no advertising SDK. The app displays no ads, contains no third-party ad or tracking framework, and does not collect or use the advertising identifier (IDFA). The app's privacy manifest declares that it does not track you, and because nothing in the app tracks you, Brightwater never presents Apple's App Tracking Transparency prompt. If advertising were ever introduced in a future version, this Privacy Policy would be updated before it shipped.
The services above process data under their own privacy policies, which we encourage you to review:
We ourselves do not collect or receive your personal data on any server. Information is used only for the purposes described above: providing app features on-device (tank logs, charts, maintenance reminders, lighting plans, the cycle assistant, livestock records, the diary, expenses, streaks, CSV export) and processing subscriptions. We do not sell your personal data, and we do not use it for advertising or profiling.
Data stored locally on your device is retained until you delete it in the app or uninstall the app. Data processed by third parties (RevenueCat, Apple) is retained according to their respective policies.
Brightwater is not directed to children and is not intended for use by anyone under the age of 13 (or the minimum age of digital consent in your jurisdiction, such as 16 under the GDPR). We do not knowingly collect personal information from children. In line with the U.S. Children's Online Privacy Protection Act (COPPA) and the GDPR's protections for children, if you believe a child has provided personal information through the app, please contact us at support@bogtsi.xyz and we will take appropriate steps.
The Developer is based in Israel. Brightwater is available internationally. RevenueCat, Apple and Expo may process service data in other countries under their policies. App content is not sent to those providers by Brightwater's code, but a Files, Mail or other destination you choose for an export or backup may transfer that content abroad.
Local records benefit from your device protections. A full backup file is not encrypted; protect the location and recipient you choose. Other services' security practices govern files shared with them. No storage or transmission is perfectly secure.
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and post the new version at this URL. Material changes will be reflected here; your continued use of the app after an update constitutes acceptance of the revised policy.
Questions about this Privacy Policy or your data? Email support@bogtsi.xyz.