Privacy Policy

1. Who we are

Fenaura OÜ (“Fenaura,” “we,” “us,” or “our”) provides WatchYourPhone and is the controller of personal data described in this policy, except where another provider acts independently for its own purposes.

2. Scope

This policy applies to the WatchYourPhone app and companion experiences, the WatchYourPhone cloud service, these legal pages, and feedback sent through the app. Apple, Garmin, Mapbox, Cloudflare, and other third parties may separately process information under their own privacy notices.

3. Information kept locally on your devices

WatchYourPhone processes information on your devices so that protection features can work. Depending on the permissions you grant and the features you use, this may include:

• Location and motion context: precise and background location, accuracy, timestamps, and whether the iPhone is inside or outside a Trusted Place.
• Trusted Places: names, coordinates, enabled status, and radii you configure.
• Connectivity: Bluetooth connection state, nearby-device state, selected wearable, and Wi‑Fi network names (SSIDs) used to recognize trusted networks.
• Protection records: local incident history, alert state, notification pauses, and technical journal or diagnostic entries.
• Preferences: language, permissions, privacy settings, and feature configuration.

Trusted Place coordinates and Wi‑Fi SSIDs are not uploaded to the WatchYourPhone cloud service. Local data remains subject to your device security, backup configuration, and Apple platform settings. You can remove local information by using available in-app controls or deleting the app, subject to data that may remain in your device backups.

4. Information processed by our cloud service

Theft Location Protection

This Premium feature is off unless you enable it. When enabled, WatchYourPhone may upload the iPhone’s latest precise location during an active incident. The app can update this location while the incident remains active. It is disclosed only through the authenticated incident experience to the owning installation, its registered supported wearable, and devices the owner has linked. A linked person must be someone you trust.

When a supported wearable requests an address, coordinates may be sent to Mapbox for temporary reverse geocoding. The returned address is used for that response and is not written by us to D1, KV, the Cache API, or another WatchYourPhone store.

Purchases

Apple processes App Store purchases, billing details, subscription management, and refund requests. WatchYourPhone receives entitlement and transaction information needed to determine whether Premium is active; we do not receive your full payment-card details.

No advertising or cross-app tracking

WatchYourPhone does not sell personal data and does not use your data for third-party behavioral advertising or tracking across apps and websites owned by other companies.

5. How we use information

• provide separation alerts, Trusted Place behavior, theft-incident features, linked-device assistance, find-phone actions, and push notifications;
• authenticate installations and prevent unauthorized access;
• display Premium entitlement and restore purchases through Apple;
• maintain service reliability, diagnose failures, secure the service, and prevent abuse;
• receive and answer voluntary feedback; and
• comply with legal obligations and establish, exercise, or defend legal claims.

6. Legal bases for processing

If the European Economic Area, United Kingdom, or another jurisdiction requiring a legal basis applies, we rely on:

• Performance of a contract: to provide the app, linked-device service, notifications, subscription entitlement, and requested support.
• Consent: where you enable optional Theft Location Protection, grant device permissions, or where consent is otherwise required. You may withdraw consent by disabling the feature or permission, without affecting earlier lawful processing.
• Legitimate interests: to secure, maintain, troubleshoot, and improve the service, prevent fraud and abuse, and communicate about requests, balanced against your rights.
• Legal obligation: where processing is necessary to meet applicable law.

7. Recipients and service providers

We disclose information only as needed to provide and protect WatchYourPhone, when you direct us to do so, or when required by law.

• People and devices you link: an authorized linked person may receive incident notifications and view the latest shared incident location. Your registered Apple Watch or supported Garmin device may also receive incident details.
• Apple: App Store and StoreKit 2 for purchases and entitlements; Apple Push Notification service (APNs) for notifications; Apple Maps and Apple platform services where invoked on your device.
• Cloudflare: DNS, Workers, D1, static asset hosting, networking, and security infrastructure.
• Mapbox: temporary reverse geocoding of incident coordinates when a readable address is requested on a supported wearable.
• Garmin: Connect IQ platform services when you choose to use a supported Garmin device.
• Resend: transmission of feedback email that you voluntarily submit, including your email address and message.
• Authorities or transaction parties: where legally required, necessary to protect rights and safety, or in connection with a merger, financing, acquisition, or sale, subject to appropriate safeguards.

We do not make your incident location public. Do not link with a person you do not trust.

8. Retention

• Incident records and uploaded location: an incident expires 24 hours after creation. Expired incident rows are removed by an automated hourly cleanup. Because cleanup runs periodically, deletion from the database may occur shortly after the 24-hour expiry. You can delete an active incident sooner in the app.
• Invitation tokens: invitations expire after five minutes. Invitation records may remain until routine deletion or deletion of the owning installation, but cannot be used after expiration or consumption.
• Installation, push, wearable, and link records: retained while needed to operate linked-device and notification features, until you delete cloud data from the app, or until we determine they are no longer needed.
• Feedback: retained for as long as reasonably necessary to respond, maintain support records, resolve disputes, and meet legal obligations.
• Infrastructure logs and backups: may be retained for limited periods under provider schedules for security, resilience, and legal compliance.

9. Your controls and privacy rights

Controls in WatchYourPhone

• Disable Theft Location Protection to stop new incident-location sharing.
• Use Stop sharing and delete active incident to stop tracking and request immediate server deletion of the active incident.
• Remove an individual linked-device relationship.
• Use Delete cloud data from this iPhone to delete this installation’s server identity, incidents, invitations, linked-device relationships, and registered Watch and Garmin records. This does not delete another person’s device or independently submitted data.
• Change Location, Bluetooth, Local Network, and Notification permissions in Apple Settings. Some features will not work without their required permissions.
• Delete local records through available in-app controls or delete the app.

Deletion requests require a network connection and successful authentication. If a request fails, the app reports an error so you can retry or contact us.

Your legal rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of personal data, and to withdraw consent. You may also complain to a data protection authority. In Estonia, the supervisory authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon). We may need information to verify your request. Email privacy@fenaura.ee to exercise a right.

10. Security

We use measures intended to protect information, including encrypted network transport, per-installation credentials, hashing of server-side secrets and wearable tokens, authenticated access to cloud records, and limited incident retention. No method of storage or transmission is completely secure, and we cannot guarantee absolute security. Protect your devices, passcodes, Apple Account, and linking QR codes.

11. International transfers

Our providers may process information outside Estonia or the European Economic Area, including in the United States. Where required, we rely on recognized adequacy decisions, standard contractual clauses, or another lawful transfer mechanism, together with supplementary safeguards where appropriate.

12. Children

WatchYourPhone is not directed to children below the age at which they may independently consent to data processing or enter into the applicable agreement in their country. A minor should use the app only with permission and supervision of a parent or legal guardian where local law requires it. If you believe a child’s personal data was provided without appropriate authorization, contact us.

13. Changes to this policy

We may update this policy to reflect changes in the app, law, or our practices. We will change the “Last updated” date and, where required, provide additional notice or request consent. The version in effect when information is processed applies to that processing.

14. Contact