1. Information We Collect

Hotline collects only two pieces of data, both essential for the app to function:

Data	Purpose	Linked to You?
Anonymous User ID	Associate your device and logs with your anonymous session	No
Device Push Token (APNs)	Deliver push notifications when your bot goes silent or triggers an alert	No

2. Information We Do NOT Collect

We explicitly DO NOT collect:

• 🚫 Personal information (name, email, phone number)
• 🚫 Location data
• 🚫 Contacts or address book
• 🚫 Photos, media, or files
• 🚫 Financial or payment information
• 🚫 Usage analytics or behavior tracking
• 🚫 Advertising identifiers
• 🚫 Health or fitness data
• 🚫 Browsing or search history

3. Data Storage

3.1 Server-Side Storage

Hotline uses a cloud backend to deliver its core functionality. The following data is stored on our servers:

• Anonymous User ID: A randomly generated UUID with no personal information
• Device Push Token: Your APNs token for push notification delivery
• Bot Logs: Alert messages sent by your bot (e.g., "Heartbeat OK", "Memory warning")
• Device Metadata: Bot name, status (online/offline/killed), and last seen timestamp

3.2 Data Retention

• Data is retained as long as your anonymous session is active
• Uninstalling the app removes your local session — server data becomes orphaned and inaccessible
• You may request deletion of your data by contacting us

4. Permissions We Request

Permission	Why We Need It	Required?
🔔 Push Notifications	To alert you when your bot goes silent, encounters errors, or triggers a critical event	Recommended
🚨 Critical Alerts	To deliver alerts even when Do Not Disturb is enabled (for emergency bot failures)	Optional

Note: You can manage these permissions in iOS Settings → Hotline at any time.

5. How Your Data Is Used

Your data is used exclusively to provide the core functionality of the app:

• Push Token: To send you real-time alerts via Apple Push Notification service
• Anonymous ID: To associate your device with your bot logs and settings
• Bot Logs: To display your alert history within the app

We do NOT use your data for advertising, marketing, profiling, or any purpose other than delivering the app's core features.

6. Third-Party Services

6.1 Supabase (Backend Infrastructure)

• Purpose: Backend database, authentication, and serverless functions
• Data Stored: Anonymous user ID, push token, bot logs, device metadata
• Privacy Policy: Supabase Privacy Policy

6.2 Apple Push Notification service (APNs)

• Purpose: Delivering push notifications to your device
• Data Shared: Device push token and notification content
• Privacy Policy: Apple Privacy Policy

6.3 No Third-Party Analytics or Ads

• We do NOT use Google Analytics, Firebase, or any analytics services
• We do NOT use advertising SDKs or ad networks
• We do NOT use crash reporting services that collect user data

7. Data Security

We implement the following security measures:

• Encrypted Communication: All data transmitted between the app and servers uses HTTPS/TLS encryption
• API Key Authentication: Bot-to-app communication is secured with unique API keys
• JWT Authentication: User sessions are secured with JSON Web Tokens
• Row Level Security: Database enforces row-level security so users can only access their own data
• No Plain-Text Secrets: Sensitive keys are stored securely and never exposed to clients

8. Children's Privacy

Hotline is rated 4+ and is safe for all ages:

• We do NOT knowingly collect personal information from children under 13
• No account creation or personal data is required
• No social features, messaging, or user-generated content sharing
• Complies with COPPA (Children's Online Privacy Protection Act)

9. Your Rights and Choices

9.1 Access and Deletion

• View Data: All your bot logs and device info are visible within the app
• Delete Data: Uninstall the app to remove your local session
• Request Deletion: Contact us to request server-side data deletion

9.2 Permission Management

• Disable push notifications in iOS Settings
• Revoke Critical Alerts permission in iOS Settings

10. Data Sharing and Disclosure

We do NOT sell, rent, or share your data with third parties.

We may only disclose information if required by law:

• To comply with legal obligations (e.g., court order, subpoena)
• To protect our rights, property, or safety
• To prevent fraud or illegal activity

11. International Users

Hotline is available worldwide:

• Server data is stored in cloud infrastructure
• Complies with GDPR (EU), CCPA (California), and other applicable privacy regulations
• You may request data access or deletion regardless of your location

12. Changes to Privacy Policy

We may update this Privacy Policy from time to time. We will notify you by:

• Updating the "Last Updated" date at the top
• Posting the new policy at this URL

Continued use of the app after changes constitutes acceptance of the updated policy.

13. Contact Us