Trueframe DIGITAL
ShoreWindow

Privacy Policy

Last updated: 21 August 2026

The short version: ShoreWindow is local-first. Your saved spots, rules, alerts and settings stay on your device. There is no account system and no server of ours that stores what you save. Tide, sun and moon are calculated on the device itself.

What we collect

ShoreWindow has no sign-up and no user account. We do not collect your name, email address, contacts, or any of the content you create in the app. Your saved spots and their names, your window rules, your alert rules and your app settings are written to a database file on your own device and stay there unless you choose to export or back them up yourself.

We run no advertising, no analytics SDK, no tracking pixels and no profiling. We never see which shores you save, what you search for in the Finder, or how often you open the app. We do not sell or rent data to anyone, because we do not hold it.

Tides, sun and moon are worked out on your device

Tide predictions are computed on your phone from harmonic constants that ship inside the app, and sun and moon times are computed from the spot's coordinates locally. None of that requires a connection, and none of it sends anything anywhere. This is why a cove with no signal still gets a full window. Alerts are worked out and scheduled on the device too.

Location (only while you are using the app)

If you ask ShoreWindow to find shores near you, or to place a spot at where you are standing, it requests your location while the app is in use to find nearby tide stations and set the spot's coordinates. There is no background tracking, no location history and no movement profile: the app never asks for “always” access, and the position is used for that one action and then discarded.

Declining the permission leaves everything else working — you can search for a place by name instead, and every other feature behaves the same way.

Weather, waves and live gauges (the network part)

Conditions are the one thing that needs a connection. When ShoreWindow shows weather, wind, wave height or a live gauge reading for a spot, it sends the coordinates of that area to the forecast and gauge services so they can answer for that stretch of coast. No name, email, account, device identifier or app content goes with it. As with any network request, the service may process standard connection information such as an IP address.

Those lookups only happen for spots you saved or opened, and you can turn network conditions off entirely in Settings, in which case the app keeps working on the on-device tide, sun and moon calculations alone.

Crash reports (on by default, and you can turn them off)

ShoreWindow can send an anonymous diagnostic report when something goes wrong, so the bug gets fixed. The switch is in Settings → Diagnostics → Crash diagnostics, and turning it off stops all of it immediately.

A report contains the error and where in the code it happened, plus the app id, app version, platform and operating-system version. It does not contain an account identity, a device identifier, or any of your content — no spot names, coordinates, rules or alerts. Reports are handled by our own reporting endpoint and by Sentry, whose project for this app is hosted in the European Union (Frankfurt).

Backups and exports (you choose, every time)

Backup and export are free and entirely under your control. A backup is created only when you use the backup features. If you enable automatic copies, ShoreWindow keeps the latest local copies and can mirror them to your iCloud Drive under your own Apple ID. A manual backup goes to iCloud Drive or another file location you pick. We have no access to it.

Once a backup or export leaves the app it is covered by whatever service or storage you sent it to, not by this policy.

Purchases

ShoreWindow Pro is sold as a yearly subscription, a monthly subscription, or a one-time Lifetime purchase; all three unlock the same features. Payment is handled entirely by the Apple App Store or Google Play. We never see your card details, billing address or store account. Purchase status is managed through RevenueCat, our purchase processor, which receives the store receipt, an anonymous app identifier and standard request information so the app can grant and restore your purchase across your devices. Details are in the RevenueCat privacy policy. We never send RevenueCat your spots, your rules or your location. ShoreWindow also keeps a local cache of your entitlement so it works offline.

Apple Universal Purchase and Family Sharing apply: one purchase covers your iPhone and iPad.

Notifications

Notification permission is requested only if you create an alert. The alert is calculated and scheduled on your own device; nothing about it is sent to a server, and there are no push notifications from us.

Data sharing

We do not sell data or use it for advertising. The only outbound connections the app makes are the weather, wave and live-gauge lookups described above, optional crash reports, app-store and RevenueCat purchase processing, and a backup you explicitly ask for.

Your control & deletion

Everything is on your device, so you are in control of all of it. Delete a spot, a rule or an alert in the app and it is gone. Settings → Reset Data wipes the entire local database after confirmation. Uninstalling ShoreWindow removes its data from your device. If you made backups or exports, delete those copies wherever you put them. To request deletion of a RevenueCat purchase record or an anonymous crash-diagnostic record, email [email protected]. Apple or Google may retain store transaction records under their own legal and accounting obligations.

Children

ShoreWindow is a planning tool for the shore, is not directed at children, and we do not knowingly collect anything from anyone.

Changes

If this policy changes, we will update this page and the “last updated” date above.

Contact

Questions about this policy? Email [email protected].