Privacy Policy

01Who is responsible for your data

The data controller is Oleksandr Andriushko (sole proprietor, FOP), Ukraine. Data enquiries: o.andriushko@gmail.com.

This Policy explains what data the Nebo Pro app for iPhone and Apple Watch (including its widgets, watch face complications and Live Activities) processes and how. We comply with the Law of Ukraine “On Personal Data Protection” No. 2297-VI and the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).

Legal bases for processing

• Performance of a contract (Art. 6(1)(b) GDPR) — providing the features you turn on: push notifications, Live Activities, voice alerts, Sign in with Apple and, once available, Circle, On Air and the subscription.
• Consent (Art. 6(1)(a) GDPR) — access to location (including sending the weather point to Apple WeatherKit) and permission to send notifications. You can withdraw consent at any time in iOS Settings → Nebo Pro.
• Legitimate interests (Art. 6(1)(f) GDPR) — server security and stability, abuse prevention and, once Circle and On Air launch, their moderation.

For users in Ukraine, Article 11 of the Law of Ukraine “On Personal Data Protection” also applies.

02In short: what data and why

The alert map, your sector and haptic signals work without an account. We do not sell data, show ads, use advertising identifiers (IDFA) or track you across other apps and websites. The app contains no third-party advertising or analytics SDKs and does not ask for tracking permission (App Tracking Transparency).

What we do not do

• we do not collect advertising identifiers or track you across apps;
• we do not send coordinates to our server or keep any location history (only Apple WeatherKit receives the weather point);
• we do not sell or share data with advertisers, data brokers or other third parties;
• we do not use third-party analytics, crash reporting or advertising services;
• we do not ask for your email, phone number or contacts.

03Location

If you allow it, the app determines your hromada, district and oblast from your location directly on the device: the point is checked against community boundaries built into the app (offline, without contacting a server). Coordinates are neither transmitted to nor stored on our server.

The app asks only for “While Using the App” access, with roughly one-kilometre accuracy; there is no background tracking. You can turn location off (iOS Settings → Nebo Pro → Location) and choose your sector manually — all alert features work the same way.

Weather (Apple WeatherKit)

To show a forecast, the app sends Apple WeatherKit the coordinates of a point: your current location if your sector is determined by location, or the centre of a manually selected sector. This point is stored on the device for the “Sky” widget, and the Home Screen widget itself requests the forecast for it from WeatherKit. These requests are processed by Apple under its Privacy Policy; the coordinates never reach our server. Weather data is attributed to “Apple Weather” with a link to its data sources.

04Data on your device

Your selected sector, “Watching” places, vibration mode, voice settings, random install ID and other preferences are stored on your device. The state needed by widgets, complications and Live Activities is kept in the app's shared container (App Group) on the same device: for the “Sky” widget this is the sector name and description, the current alert status, the latest weather and the coordinates of the weather point. Synthesised voice phrases for notifications are also cached there (up to 40 files).

Apple Watch receives place names (your sector and “Watching” places) from your iPhone via WatchConnectivity and, when you delete your account, a command to reset its identifier. The watch stores these names, its own random install ID and the “In shelter” mode state locally.

This data is deleted together with the app. So that notifications arrive while the app is closed, the names of the places you follow, notification tokens and your voice setting are sent to the server — but not coordinates (see section 7).

05Server technical data

To show alerts, the app (as well as Apple Watch and widgets) requests alert data, provided by Trembita Pro, from our server. These requests contain no identifiers of yours.

Like any web server, the server processes technical request data (IP address, time) in security logs. These are kept for a limited period, used only to protect the server and keep it running, and are not linked to your identity.

06Sign in with Apple

The map, sector, alerts, signals and Apple Watch work without an account. Sign in with Apple is required only for Circle, On Air and the “Support” subscription. These features have not launched yet — coming soon.

We receive an anonymous Apple ID identifier (issued by Apple specifically for this app) and request only your name — if you choose to share it, only your first name is kept. We do not request your email. We never see your Apple ID password — authentication is handled by Apple.

Currently the identifier and name are stored only on your iPhone and are not sent to our server; they are not linked to the notification record. When Circle and On Air launch, the identifier will be used for your account on the server — we will update this Policy before launch. If you stop using Sign in with Apple for Nebo Pro in your Apple ID settings, the app signs you out.

07Notifications

So that push notifications and Live Activities (the “Alert Island”) arrive even when the app is closed, the server stores an install record:

• a random install ID — not linked to your identity or Apple account;
• the Apple Push Notification service (APNs) device token and its environment (production or test);
• Live Activity tokens — for starting an activity (push-to-start) and for updating a specific activity;
• the platform (iPhone or Apple Watch);
• whether voice alerts are turned on;
• the names of places you follow: your hromada or oblast and your “Watching” places — not coordinates;
• internal state: the last known alert status for each of these places (to detect when an alert starts and ends) and the time of the last test notification;
• the time the record was created and last updated.

This data is used solely to send alerts about the places you chose. Notifications are delivered by Apple via APNs. The record is created when the app starts; if notifications are not allowed, it contains no APNs token. The app asks permission only for banners and sounds — no app icon badges.

Voice alerts

The text of a voice alert (for example, “Attention! Air raid alert…”) is synthesised by the Trembita Pro voice server. The request contains only the text of the phrase — the place name and threat type — with no identifiers, tokens or coordinates.

Apple Watch

Apple Watch receives the same place names from your iPhone (via WatchConnectivity) and registers a separate record on the server: its own random install ID, its own APNs token, platform “Apple Watch”, the same place names, voice off (no Live Activity tokens).

Minute of Silence

The daily 9:00 reminder is a local notification scheduled on the iPhone itself; no server is involved and no data is sent. You can turn it off in the app (HQ).

Retention and opting out

The app updates the record while you use it (when you open it or change your sector, places or voice setting). Every day the server automatically deletes records that have not been updated for 60 days. You can turn notifications off at any time: iOS Settings → Nebo Pro → Notifications. After you delete the app, the record stays on the server until this automatic cleanup removes it — about 60 days after its last update. Deleting the record together with your account is described in section 11.

08Circle and On Air

Circle (your loved ones' status) and On Air (chat) are upcoming features that will require Sign in with Apple. They have not launched yet, and the app does not collect or store any messages, statuses or reports.

Once these features launch, messages, “I'm safe” statuses and reports you send will be stored on the server so that recipients and moderators can see them; you will be able to delete your messages and your account, and reports will be handled under the Terms of Use. We will update this Policy before launch.

09Purchases

The “Support” subscription is not available yet, and the app currently offers no purchases. Once it becomes available, it will be purchased through the App Store and payment will be processed by Apple. We will not receive any payment data (card, address, etc.) — only the subscription status.

10Where data is stored

The server (Trembita Pro infrastructure, api.trembita.app) is located in the European Union (Contabo GmbH, Germany). Data between the app and the server is transmitted only over an encrypted connection (HTTPS).

Who else receives data

• Apple — delivery of notifications and Live Activities (APNs), Sign in with Apple, weather forecasts (WeatherKit receives the coordinates of the weather point) and, in future, App Store payments. Apple processes this data under its own Privacy Policy.
• Trembita Pro — the alert data source and voice server; the same server infrastructure and the same developer.

Data is not disclosed to any other third parties, except where expressly required by law.

11Deletion and retention

HQ → Account → “Delete account” (available after Sign in with Apple):

• signs you out and removes the Apple ID identifier and name from your iPhone (there is currently no account on the server);
• sends the server a request to delete your iPhone's install record (tokens, place names, voice setting, internal state);
• creates a new random install ID and registers it again so that alert signals keep arriving without sign-in; the new record is not linked to the old one;
• asks your Apple Watch via WatchConnectivity (if a watch is paired and Nebo Pro is installed on it) to delete its own record in the same way and switch to a new ID — the command runs as soon as the watch is connected.

If there is no connection to the server at the moment of deletion, the old record is removed by the automatic cleanup after 60 days without updates. Data on your device is deleted together with the app; after you delete the app, the server record remains until the automatic cleanup removes it.

Retention periods

• install records for notifications — while the app keeps updating them; records not updated for 60 days are deleted by the daily automatic cleanup, and immediately when you delete your account;
• server security logs — for a limited period, not linked to your identity;
• Circle and On Air messages and statuses (once these features launch) — until you delete them or your account;
• location — never stored on the server at all.

12Your rights

Under the Law of Ukraine “On Personal Data Protection” (Art. 8) and the GDPR (Arts. 15–22), you have the right to:

• know what data about you is processed and obtain a copy (right of access);
• have inaccurate data corrected;
• have your data erased (“right to be forgotten”);
• restrict and object to processing;
• data portability;
• withdraw consent at any time, without affecting the lawfulness of processing before withdrawal;
• lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights or with the data protection supervisory authority of the EU country where you live.

Write to o.andriushko@gmail.com — we reply within 30 days. Because most data is not linked to your identity, we may ask for details to locate the relevant record.

13Age

The alert map and signals are available to everyone and do not require an account. Social features (Circle, On Air) are intended for people aged 18 and over. We do not knowingly collect personal data from children; if we learn of such an account, we will delete it.

14Changes

We may update this Policy. We will notify you of material changes in the app; the current version is always available on this page with a new “Last updated” date. In case of any discrepancy, the Ukrainian version prevails.