Trueframe DIGITAL
ShoreWindow

Privacy Policy

Last updated: 20 August 2026

The short version: ShoreWindow is local-first. Your saved spots, rules, alerts and settings stay on your device. There is no account system and no server of ours that stores what you save. Tide, sun and moon are calculated on the device itself.

What we collect

ShoreWindow has no sign-up and no user account. We do not collect your name, email address, contacts, or any of the content you create in the app. Your saved spots and their names, your window rules, your alert rules and your app settings are written to a database file on your own device and stay there unless you choose to export or back them up yourself.

We run no advertising, no analytics SDK, no tracking pixels and no profiling. We never see which shores you save, what you search for in the Finder, or how often you open the app. We do not sell or rent data to anyone, because we do not hold it.

Tides, sun and moon are worked out on your device

Tide predictions are computed on your phone from harmonic constants that ship inside the app, and sun and moon times are computed from the spot's coordinates locally. None of that requires a connection, and none of it sends anything anywhere — which is why a cove with no signal still gets a full window. Alerts are worked out and scheduled on the device too.

Location (only while you are using the app)

If you ask ShoreWindow to find shores near you, or to place a spot at where you are standing, it requests your location while the app is in use to find nearby tide stations and set the spot's coordinates. There is no background tracking, no location history and no movement profile: the app never asks for “always” access, and the position is used for that one action and then discarded.

Declining the permission leaves everything else working — you can search for a place by name instead, and every other feature behaves the same way.

Weather, waves and live gauges (the network part)

Conditions are the one thing that needs a connection. When ShoreWindow shows weather, wind, wave height or a live gauge reading for a spot, it sends the coordinates of that area to the forecast and gauge services so they can answer for that stretch of coast. No name, no email, no account, no device identifier and nothing else from your app goes with it — there is no identity for those services to attach the request to.

Those lookups only happen for spots you saved or opened, and you can turn network conditions off entirely in Settings, in which case the app keeps working on the on-device tide, sun and moon calculations alone.

Crash reports (on by default, and you can turn them off)

ShoreWindow can send an anonymous diagnostic report when something goes wrong, so the bug gets fixed. The switch is in Settings → Diagnostics → Crash diagnostics, and turning it off stops all of it immediately.

A report contains the error and where in the code it happened, plus the app id, app version, platform and operating-system version. It does not contain an account identity, a device identifier, or any of your content — no spot names, coordinates, rules or alerts. Reports are handled by our own reporting endpoint and by Sentry, whose project for this app is hosted in the European Union (Frankfurt).

Backups and exports (you choose, every time)

Backup and export are free and entirely under your control. Nothing is backed up automatically and nothing is uploaded in the background. A backup goes to your iCloud Drive under your own Apple ID, or to any file location you pick. We have no access to it.

Once a backup or export leaves the app it is covered by whatever service or storage you sent it to, not by this policy.

Purchases

ShoreWindow Pro is sold as a yearly subscription, a monthly subscription, or a one-time Lifetime purchase; all three unlock the same features. Payment is handled entirely by the App Store — we never see your card details, billing address or store account. Purchase status is managed through RevenueCat, our purchase processor, which receives the store receipt and an anonymous app identifier (no name, no email) so the app can grant and restore your purchase across your devices. Details are in the RevenueCat privacy policy. We never send RevenueCat your spots, your rules or your location. ShoreWindow also keeps a local cache of your entitlement so it works offline.

Apple Universal Purchase and Family Sharing apply: one purchase covers your iPhone and iPad.

Notifications

Notification permission is requested only if you create an alert. The alert is calculated and scheduled on your own device; nothing about it is sent to a server, and there are no push notifications from us.

Data sharing

We do not share your data, because we do not have it. The only outbound connections the app makes are the weather, wave and live-gauge lookups described above, optional crash reports, App Store and RevenueCat purchase processing, and a backup you explicitly ask for.

Your control & deletion

Everything is on your device, so you are in control of all of it. Delete a spot, a rule or an alert in the app and it is gone. Settings → Reset Data wipes the entire local database after confirmation. Uninstalling ShoreWindow removes its data from your device. If you made backups or exports, delete those copies wherever you put them. There is nothing for you to request from us, because there is no account and no server-side copy.

Children

ShoreWindow is a planning tool for the shore, is not directed at children, and we do not knowingly collect anything from anyone.

Changes

If this policy changes, we will update this page and the “last updated” date above.

Contact

Questions about this policy? Email support@trueframedigital.app.