Privacy Policy

1. Overview

Time Zone Buddy does not sell your personal information, run advertising, or operate user accounts or developer-owned backend servers.

The App is designed with a privacy-first philosophy. Data you enter — time zones, work hours, groups, and preferences — stays on your device unless you explicitly enable private iCloud Sync. Network services used for maps, solar times, holidays, analytics, and crash diagnostics are described below. We have no backend servers, no user accounts, and no advertising SDKs.

The App uses Firebase Analytics and Crashlytics (by Google) to understand aggregate usage patterns and diagnose crashes so we can improve the app. This data is not linked to your identity, and we do not use it for advertising, profiling, or selling data. See §2.7 for full details.

2. What Data the App Uses

2.1 Data You Enter

The App stores the following data locally on your device only:

• Time zones you add to your list
• The city you select as Home
• Work hours you configure for each zone
• Groups you create and their members
• App preferences (sort order, appearance, 24-hour time, notification settings)
• Display labels you apply to zones

This data is stored in your device's local storage (UserDefaults / on-device JSON). It never leaves your device unless you explicitly enable iCloud Sync (see §2.3).

2.2 Location Data (Optional — Travel Mode only)

By default the App does not request or use your device's GPS location.

Time zones are derived solely from your explicit searches, your device's system timezone setting, and MapKit city search results (address/timezone lookup only — no GPS involved). MapKit search is handled by Apple's servers, subject to Apple's Privacy Policy.

Optional exception (Travel Mode, version 1.4 and later). If you choose Use Precise Location after arrival or under Settings → Home & Travel → Precise Location, the App requests When In Use location access to show accurate sunrise/sunset for where you are and to determine the state/province you are travelling in so that Plus and Lifetime away public holidays are precise where available.

• It is entirely optional. Travel Mode works without it — travel is detected from your device's time-zone change alone, and sunrise/sunset falls back to your time-zone's approximate centre, with no location access.
• The first request occurs only after you choose Use Precise Location. Once authorized, the App may request bounded fixes after a time-zone change and when you foreground the App with a fix at least six hours old. It never monitors location continuously or requests background access.
• Access is When In Use only (never “Always”), at coarse (kilometre) accuracy.
• The coordinate is sent to Apple's geocoding service (CLGeocoder) only to resolve it into a state/province name — the same mechanism as MapKit search.
• The coarse coordinate and resulting subdivision label (e.g. “NSW”) are cached only on your device, keyed to the current time zone so a previous trip's fix is never reused. This lets Away sunrise/sunset stay accurate across launches and in widgets.
• The coordinate is sent to SunriseSunset.io to retrieve solar data as described in §2.8.
• The coordinate and location-derived values are never sent to our servers (we have none), included in analytics, linked to your identity, or used for tracking. Analytics records only whether location permission was authorized, denied, or restricted.

2.3 iCloud Sync (Plus Tier Only)

If you subscribe to Time Zone Buddy Plus and enable iCloud Sync, your time zone list, groups, and selected Home city are synced across your Apple devices using Apple's iCloud Key-Value Storage (NSUbiquitousKeyValueStore).

2.4 Notifications

If you enable DST notifications (Lifetime/Plus tier), the App schedules local notifications on your device using Apple's UNUserNotificationCenter framework. Notifications are scheduled entirely on-device — no network request is made. Manage permissions in iOS Settings → Time Zone Buddy → Notifications.

2.5 In-App Purchases

Purchases (Lifetime, Plus Monthly, Plus Annual) are processed entirely by Apple's App Store using StoreKit 2. We do not handle payment information. Subject to Apple's App Store Privacy Policy.

2.6 MapKit

The App uses MapKit (Apple Maps) to look up cities: city search, when you search for a city that is not in the App's built-in coordinate table, and optional geocoding, if you opt into Travel Mode's Precise Location. See §2.2.

Map thumbnails, up to version 1.4. In these versions the zone Detail screen also showed a city map thumbnail, which fetched map tiles from Apple's servers each time you opened a city. Version 1.5 removes it — that header is now a sky gradient drawn on-device from the city's own sunrise and sunset times, so opening a city no longer requests map tiles.

In both cases the only data sent to Apple is the city's geographic coordinate. No personal data is sent. Subject to Apple's Privacy Policy.

2.7 Firebase Analytics and Crashlytics (Google)

2.8 SunriseSunset.io (Solar Data)

The App fetches sunrise, sunset, golden hour, and blue hour times from SunriseSunset.io — a free, open-source solar data API.

• The only data sent is the geographic coordinate (latitude/longitude) of a location you have added and the date range being fetched
• No personal data, device identifiers, or account information is sent
• Data is fetched once per year per location and cached locally on your device — it is not synced to iCloud and is excluded from device backup
• No data passes through our servers

Provider: sunrisesunset.io

2.9 Nager.Date (Public Holiday Data — Lifetime/Plus only)

For Lifetime and Plus subscribers, the App fetches public holiday data from Nager.Date — a free, open-source public holiday API (MIT licence).

• The only data sent is the ISO country code (e.g. "AU", "US") of locations you have added and the calendar year being fetched
• No personal data, device identifiers, or account information is sent
• Holiday data is fetched once per year per country and cached locally on your device — it is not synced to iCloud and is excluded from device backup
• A weekly version check is also performed — the App sends each cached country code to Nager.Date's version endpoint to see if their data has been updated; if so, the cache is refreshed automatically so corrections reach you without waiting for the next annual cycle
• No data passes through our servers

Provider: date.nager.at

2.10 Website Analytics & Cookies (tzbuddy.app)

This website uses Firebase Analytics (Google) to understand which pages and features are popular, using an anonymous analytics cookie/identifier. As in the App, it is not used for advertising, profiling, or the sale of data.

• Analytics load only after you accept in the cookie banner — if you decline, no analytics cookies are set and nothing is sent to Google
• Your choice is stored locally on your device; you can change it at any time via the Cookie Settings link in the footer
• No account, name, or contact details are collected, and the website sets no advertising or cross-site tracking cookies

3. Data We Do NOT Collect

We explicitly do not collect or use:

• ✗ Names, email addresses, or contact details
• ✗ Device advertising identifiers (IDFA, IDFV) — ad personalisation is disabled
• ✗ Personal analytics linked to your identity
• ✗ GPS or precise location for tracking, advertising, or profiling (in version 1.4 and later, Travel Mode may, only if you explicitly enable it, use bounded coarse location fixes for accurate Away solar data and regional details — see §2.2; the coordinate is cached only on your device and never sent to our servers or analytics)
• ✗ Contacts, calendar, or health data
• ✗ Microphone, camera, or Face ID data
• ✗ The content of your time zones, groups, or preferences (Firebase only receives event names, not your data)
• ✗ Search terms you type into the app
• ✗ Names of groups you create

4. Third-Party Services

5. Children's Privacy

The App has an age rating of 4+ on the App Store. It does not knowingly collect personally identifiable information from anyone, including children under 13 (or under 16 in the EU). Firebase is configured without advertising identifiers, and its usage and diagnostic data is not linked to identity or used for tracking.

6. Data Retention and Deletion

7. International Data Transfers

8. Your Rights

9. Security

All data is stored on your device using standard iOS security (encrypted at rest when the device is locked). iCloud data is encrypted in transit and at rest by Apple. Firebase data is transmitted over HTTPS.

We have no backend servers that could be breached to expose your personal data.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this document will reflect any changes. We will not retroactively apply changes to collect data that we don't currently collect.

If we introduce new data collection beyond what is described here, we will clearly communicate this to users before the change takes effect, and obtain consent where required by law.

11. Contact

If you have questions or concerns about this Privacy Policy or the App's privacy practices, please contact us:

12. Legal Basis (GDPR — EU Users)

For users in the European Economic Area (EEA) and United Kingdom:

• On-device data: No legal basis required — processing occurs entirely on your device under your control.
• iCloud Sync: Any processing by Apple is governed by Apple's Data Processing Agreement with EU Standard Contractual Clauses.
• Firebase Analytics and Crashlytics: Processed under our legitimate interest in understanding aggregate app usage, maintaining reliability, and improving the product (Article 6(1)(f) GDPR). The data is not linked to identity and no individual profiling occurs.

13. California Privacy Rights (CCPA)

For California residents: We do not sell personal information. We do not share personal information for cross-context behavioural advertising. Firebase Analytics data collected is not linked to your identity and is not "personal information" under CCPA. There is no personal information to access, delete, or correct because none is collected.

14. App Store Privacy Nutrition Label

Third-party partners: Google LLC (Firebase Analytics and Crashlytics — non-personal usage and diagnostic data).

Location note: Time Zone Buddy declares Location: Not Collected because it never transmits your location to us. In version 1.4 and later, Travel Mode's optional Precise Location uses bounded, coarse, When-In-Use fixes to provide accurate Away sunrise/sunset and resolve a state/province via Apple's geocoder (see §2.2). The coordinate is cached only on the device, is never included in Firebase, linked to identity, or used for tracking, and is sent to SunriseSunset.io only to return solar data (see §2.8).