Draft. Not yet legally reviewed or in effect. Generated from Legal/privacy-policy.md.

Hovry Privacy Policy — draft

Status: internal engineering draft; not published, not legally approved and not a substitute for counsel. Effective date, publisher legal identity, contact address and public URL are unresolved.

This draft is derived from Compliance/privacy-inventory.json. If that inventory or the implementation changes, this text must be reviewed again before use.

What Hovry does

Hovry is a weather and headache-journaling companion. The current app lets you choose a city, view available weather and pressure information, record headache entries and review your records. It does not require an account and does not currently provide cloud sync.

Information kept on your device

The current app can store your headache-entry dates and times, optional pain level, selected pain regions, your description and notes, optional display name and hairstyle appearance, onboarding choices, settings, selected city and time zone, and weather context saved with an entry when available.

These records are stored in the app's local container. Hovry requests iOS complete file protection for its local data directory and excludes the records from device backups. Because there is no cloud restoration or export in the current build, losing the device or removing the app can result in permanent record loss. Physical-device protection and restore behavior still require release qualification.

Information sent to service providers

When you type a place into manual city search, the place text is sent to Apple MapKit so address candidates can be returned. Hovry does not request device-location permission for this feature.

After you choose a city, Hovry sends that city's public center latitude and longitude, truncated to four decimal places, to MET Norway to request weather. MET Norway can also observe the requesting IP address and Hovry's identifying User-Agent. MET documents that IP logs for public meteorological services may be retained for up to 90 days and that service statistics are used for operations and improvement. Provider practices are governed by their own terms and policies and must be rechecked before release.

Hovry does not include your headache entries, notes, optional name, appearance choice or onboarding health observations in MapKit search or MET weather requests.

Analytics, advertising and tracking

The current Hovry app has no Hovry analytics SDK, advertising SDK, session replay or ad-targeting system. It does not implement cross-company tracking. MET's operational request statistics are reflected conservatively in Hovry's engineering privacy classification; this does not mean Hovry has installed an analytics SDK.

Accounts, cloud services and notifications

The current app has no account system, cloud journal service, background notification registration or production notification backend. Any future introduction of these features requires a new data-flow review and an updated policy before release.

Retention and deletion

Local records remain until you delete individual records, use the in-app data-deletion control, or remove Hovry. The in-app deletion flow also clears the separate local weather cache and reports a failure if the cache cannot be removed. Provider-side retention is controlled by the relevant provider; deleting local Hovry data does not by itself delete provider request logs.

Health and sensitive information

Headache entries and notes can contain sensitive information. Keep access to your device secure and consider the privacy implications before sharing screenshots or future exports. Hovry does not currently upload journal data to its own server.

Children and age requirements

The intended audience and any minimum-age requirements have not received final legal approval. The released policy must state the approved position and match the App Store age rating and product presentation.

International processing and legal rights

Apple and MET Norway may process requests in locations determined by their services. Required regional notices, lawful bases, controller/processor roles and user-rights procedures remain subject to human legal review once the publisher identity and launch regions are selected.

Changes

The released policy will describe how material changes are announced and when a new effective date applies. This internal draft does not establish those terms.

Contact

Publisher legal name: unresolved Privacy contact: unresolved Postal address: unresolved Public policy URL: unresolved

Release blockers

Before publication, reconcile this draft with the shipping binary, PrivacyInfo.xcprivacy, final App Store Connect answers, provider terms, support/contact details, launch regions, any StoreKit or website data flow, and human legal review.