Sightlines privacy policy

Scope and contact

Penguin Falls LLC operates Sightlines. This policy covers Sightlines and related support, separately from Twofer and the company website. For privacy questions or requests, contact contact@penguinfalls.com.

Location and direction

With your permission, Sightlines uses foreground location and compass heading. A Nearby or Night scan sends coordinates, direction, distance, and accuracy information to the Sightlines service hosted by Supabase. Derived search locations go to Google Maps Platform to find candidate addresses and roads. The server does not intentionally log precise coordinates or retain scan results.

Nearby displays Google Maps. Map loading also communicates with Google. World Line uses bundled geographic data; any displayed base map may communicate with its map provider. Sightlines does not request background location, camera access, or resident, owner, or contact information for addresses.

Guest identity and scan allowance

The app creates a pseudonymous guest account through Supabase Auth, without asking for an email address or password. Session credentials are stored in the device’s secure storage. The private server ledger stores an account ID, a free-scan counter, purchase-state flags, short-lived keyed request fingerprints, rate-limit information, and provider-call budget counters. It does not store coordinates, candidates, or report text.

Three successful cloud scans are available before purchase. Plus includes 100 per subscription year. To keep that annual allowance consistent across restored devices or deleted guest accounts, the server retains a keyed hash of the store subscription-period transaction and its usage count. The retained period-counter record contains no guest ID or raw receipt ID. Short-lived scan-attempt records associate a guest ID with the period hash while requests are processed; those links are removed when the attempts or guest account are deleted.

Saved history and sharing

Completed Nearby and Night results are saved locally in the app’s SQLite database, which can include your precise coordinates and report text. Sightlines does not sync saved history to our servers. Preferences are also stored on your device. The launch app excludes its iOS scan database directory from device backup; this does not remove copies from backups of earlier versions.

Copying or sharing a report can disclose its coordinates and candidate addresses to the app or recipient you choose. Deleting local data does not erase shared copies, older backups, or records held independently by providers.

Purchases, updates, and service information

Apple processes payment. RevenueCat verifies subscriptions and restoration, and provides purchase analytics, using your guest ID, transaction identifiers, product IDs, purchase and expiry dates, and app/device information. Sightlines does not receive your full payment card details.

Supabase, Google Maps, RevenueCat, and Expo’s app-update service may process IP addresses, timestamps, device/app information, usage, and diagnostics needed to deliver and secure their services. Google or hosting logs may include location parameters. Provider retention follows their policies and settings; we cannot promise that providers never retain location.

Support email includes your address and whatever information you send. We use it to respond and keep relevant support records. We do not sell personal information, show third-party ads, or use location for advertising. Information is shared with service providers to operate Sightlines, or when required by law or necessary for security.

Retention and deletion

Delete individual saved scans in History, or all history in Settings. “Delete guest account” in Settings requests deletion of the Supabase guest identity and associated private user ledger, and the RevenueCat customer record, then removes local history and stored session credentials. The app will not silently create another guest account after deletion.

The subscription-period usage hash is retained through that paid period and removed on a later admitted scan once it is more than 30 days past expiry. Request attempts older than one day and provider-budget records older than two days are likewise cleaned up on later admitted scans. During inactivity, these cleanup thresholds are not guaranteed deletion deadlines. Apple, service-provider, legal, and support records may have separate retention requirements.

Deleting the app, history, or guest account does not cancel an Apple subscription. Use Manage Subscription in Settings or Apple subscription settings. You can also revoke location permission or contact contact@penguinfalls.com about access, correction, or deletion requests. Verification and applicable recordkeeping obligations may limit a request.

Provider policies

Supabase · Google · Apple · RevenueCat · Expo