herebeatPrivacy Policy
Last updated 2 October 2026
Herebeat is published by Nebula Edge LLC ("we", "us"). It is built to know as little about you as possible. There's no account, no advertising and no tracking. This policy explains what does leave your iPhone and why.
Stored only on your iPhone
Your chosen area, saved places and routes, readiness checklist and app settings are stored on your iPhone. They aren't sent to us. Deleting the app, or Settings → Delete my data on this iPhone, removes them. They may be included in your own iPhone backups.
What is sent, and why
| Data | Sent to | Why |
|---|---|---|
| Coordinates of the area you're viewing | Herebeat's server | To look up alerts, reports and river levels for that area. Lookups aren't stored with any identifier. |
| Location for forecasts | Apple Weather (WeatherKit) | To show the forecast. Handled under Apple's privacy policy. |
| Rain radar map tiles (if you turn on Radar) | NOAA (U.S. government) | Your iPhone downloads radar images for the part of the map you're looking at. NOAA sees the map area and your network address, like any website. |
| Air quality (if you open it) | Herebeat's server only. The readings come from AirNow (U.S. EPA) and OpenAQ, which our server downloads every hour. | To show air quality near the area you're viewing. Only the approximate coordinates or map area are sent; nothing identifies you. AirNow and OpenAQ never receive your location. |
| Your current location, only when you tap to find your area | Stays on your iPhone, apart from the area lookup above | To suggest your area. You can type a place instead. |
| Alert notifications (only if you turn them on) | Herebeat's server, then Apple Push Notification service | To send alerts for the places and routes you watch: your iPhone's notification token, the watched places (approximate coordinates and radius), the alert types and level you chose, quiet hours, time zone, language and whether a subscription is active. Not linked to your name or Apple Account. Deleted from our server when you turn notifications off or your subscription ends; removing a watch removes it from our server too. |
| Crash and performance reports (optional) | Herebeat's server | To find and fix crashes and slowdowns: daily counts of crashes, hangs and similar problems from Apple's MetricKit, with app version, iOS version and device type, under the same random app ID. Sent only when Share anonymous usage stats is on. |
| Anonymous usage stats (optional) | Herebeat's server | To count how many people use Herebeat: a random app ID made on your iPhone, app version, language, region code and whether a subscription is active; and which setup and subscription screens you reach and whether you start a trial or purchase (no prices or Apple account details). Turn it off in Settings → Share anonymous usage stats. |
| Ad attribution | Apple, then Herebeat's server | To see which ads bring people to Herebeat: if you installed from an Apple Search Ads ad, which campaign, ad group and keyword it was, through Apple's AdServices under the same random app ID. No tracking across apps or websites, no advertising identifier, and not linked to you. Sent only when Share anonymous usage stats is on. Separately, Apple may send ad networks (and a copy to us) an anonymous install report through its privacy-preserving AdAttributionKit / SKAdNetwork; it says only how far set-up got and whether a trial or subscription started, never who you are. |
| Purchases | Apple, then Herebeat's server | Apple handles payment. We never see your name, email or card. Apple tells our server about subscription events (plan, price, storefront country, start, renewal, cancellation or refund) under an Apple transaction number, so we can confirm subscriptions and understand our business. We don't link this to your name or Apple Account. |
Like any website or server, our hosting providers briefly record technical request data, such as IP address and time, for security and reliability. We don't use it to identify you.
The herebeat.app website
The website uses Cloudflare Web Analytics, which doesn't use cookies, doesn't fingerprint you and doesn't track you across sites. It counts page views, referring sites, browser and device type, country and page speed, all in aggregate. See Cloudflare Web Analytics.
What we don't do
- No accounts, names, emails or phone numbers. If you email us, we only use your email to reply.
- No advertising, no ad identifiers, no tracking across other apps or websites.
- We don't sell or share personal information.
Service providers
- Supabase: the Herebeat server and database, hosted in Singapore.
- Cloudflare: this website and the security in front of it.
- Apple: App Store purchases, WeatherKit forecasts and maps.
Official alert sources, such as the National Weather Service, get nothing from your iPhone. Our server fetches their public feeds itself.
Keeping and deleting
Anonymous usage records can't be linked to you, so we can't find "your" records. To stop sending them, turn the setting off. Deleting your data in the app also resets the random app ID.
Children
Herebeat isn't directed at children under 13, and we don't knowingly collect their information.
Your rights
Depending on where you live (for example, the EU and UK GDPR or California's CCPA), you may have rights to access, correct or delete personal information. Because we don't hold information that identifies you, there is usually nothing to return. Email us and we'll help.
Changes and contact
If this policy changes, we'll update the date above and tell you in the app when the change matters. Contact: info@herebeat.com.