Privacy Policy
Same Sky is a private iPhone app for two people who explicitly choose to connect. This policy describes the restricted pre-release version, the information it handles and the limits of its privacy protections.
Summary
Same Sky does not include advertising or third-party analytics, does not sell personal information and does not track you across other companies’ apps or websites. Private feature content is encrypted on an approved phone and decrypted on the approved partner phone. The service necessarily handles account, device, pair, timing and delivery metadata.
Account and pairing information
The service stores your normalised email address, chosen display name, password hash, email-verification state, random account and device identifiers, public encryption/signing keys, session and rate-limit records, and the fact that two accounts chose to pair. Raw passwords, access tokens, refresh tokens, invitation tokens and verification tokens are not stored.
Pair setup stores signed device rosters, commitments and a separately encrypted copy of the pair key for each approved device. The service does not hold the plaintext pair key.
Point At Me
Same Sky asks for When In Use location only. It collects a fresh location sample only after you open the foreground sharing flow, shows its age and accuracy, and asks you to confirm a 5, 15 or 30-minute share. It does not continuously track you, refresh the spot automatically or create a location history.
The selected spot is encoded into a fixed-size message and encrypted on your phone before upload. The service receives ciphertext plus necessary signed metadata such as the pair, sending device, content type, creation time and expiry. It does not receive coordinate plaintext. The approved partner phone may decrypt the spot and use it for on-device direction guidance.
The spot becomes unavailable at expiry even while a phone is offline. Primary server storage is scheduled for deletion within 24 hours after expiry. Stopping early sends an encrypted withdrawal and requests removal, but Same Sky cannot erase a copy that another person already saved, photographed or otherwise retained.
Sensors and camera
Heading, motion and attitude data are processed on the phone and are not sent to the service. Camera access is requested only if you choose the optional augmented-reality view. Same Sky does not record or upload camera images or video.
Notifications
If you allow notifications, the service stores the Apple Push Notification service device token protected with authenticated encryption. Push messages are generic wake-up hints such as “Something is waiting in Same Sky.” They do not contain coordinates, private content, email addresses, relationship status or lifecycle detail. Apple necessarily processes notification routing and delivery information.
Technical and service information
The hosting and network layers may process IP addresses, request times, routes, response status and coarse operational information needed for security and reliability. Authentication headers, request bodies, notification tokens, device keys and private content are excluded from application logs. Short-lived, cryptographically blinded rate-limit records help prevent abuse.
Support website
If you contact support, the name, email address, topic and message you submit are emailed to support@rnodern.dev so the developer can reply. Do not send coordinates, passwords, verification links or tokens, device identifiers, notification tokens or encryption keys. Contact information is not used for advertising or marketing.
Storage, service providers and disclosure
Same Sky uses DreamHost for the API and recovery backups and Apple for TestFlight/App Store distribution, device services and push notifications. These providers may process information in countries other than your own under their terms and privacy practices.
Same Sky does not sell or rent personal information and does not disclose private content to advertisers or data brokers. Information may be disclosed when required by law or reasonably necessary to protect people, the service or legal rights. End-to-end encryption limits the private content available to the service.
Retention and deletion
- Email-verification links expire after 30 minutes and are single use.
- Access credentials are short-lived; refresh sessions expire after 30 days and are revoked on logout, reuse, device revocation or account deletion.
- Point At Me content is available for no more than 30 minutes and is removed from primary storage within 24 hours after expiry.
- A generic encrypted presence pulse expires after 24 hours.
- Account, device and pair records remain while needed to provide the service or until you delete, revoke or unpair them.
- Non-identifying deletion-completion records may remain for up to 90 days.
Restricted validation notice: automated maximum retention for encrypted recovery backups is not yet enabled. Account enrolment remains closed until that maximum is approved, enforced and published here. A deleted record may remain in a protected backup until that process is complete.
Your choices
You can deny location, camera and notification permission; stop an active share; unpair; revoke a trusted device; sign out; or request account deletion from the Account & Privacy screen. Revocation stops future access but cannot remotely erase plaintext already retained on another approved phone. Account export is not yet available in the restricted pre-release version.
Security and limitations
Same Sky uses HTTPS, platform Keychain protection and end-to-end encryption for private feature content. No service can guarantee absolute security. A compromised unlocked phone, a person who deliberately copies received information and traffic-analysis metadata are outside the protections described here.
Children
The restricted validation programme is intended for invited adults and is not directed to children.
Changes and contact
This policy will be updated when data practices, retention or release scope changes. For privacy questions, contact Same Sky support.