What we collect
Only what's required to do our one job — telling you when to open or close windows for the place you call home.
- Home anchor coordinates. The latitude/longitude of your home, set by you when you tap "I'm home." Used to fetch weather data for that specific spot. Stored encrypted at rest on our servers if you join a household; otherwise stored only on your device.
- An opaque per-device ID. A random UUID generated on your device the first time you open WindowWise. Used to identify your device when syncing household state. Doesn't contain or reveal any information about you.
- Optional thermostat readings. If you connect a smart thermostat, we read its current temperature and setpoint to make better recommendations. We do not store your thermostat history.
- Shared household state (only if you create or join a household): the current windows-open flag, the device ID of the member who toggled it, the home anchor coordinates, and a per-member record containing your chosen display name ("David's iPhone"), device platform (iOS / Android / macOS / Windows), join-date, and last-seen timestamp. Synced via our Cloudflare-hosted backend. Savings totals stay on your device only — we do not aggregate them server-side.
- Short-lived invite tokens (only when you tap "Invite a device"): a random 6-character code that expires 20 minutes after creation, single-use, and bound to your household. Discarded immediately after redemption.
What we don't collect
- Your name, email address, phone number, or any login credential
- Analytics or usage tracking — no third-party SDKs, no event pipelines
- Advertising identifiers
- Location history (only the single point you anchored as "home")
- Indoor camera, microphone, or any other sensor data
Third parties we talk to
- Apple WeatherKit (via our Cloudflare Worker): we send your home coordinates to fetch the current and forecasted weather at that location. Apple does not receive your device ID.
- Open-Meteo (fallback): same coordinates, same purpose, used only when WeatherKit is unreachable. No device ID transmitted.
- Smart-home vendors you've explicitly connected (Nest, Ecobee, Honeywell, Home Assistant, SmartThings, Tempest, Ecowitt): credentials and data flow per their respective privacy policies. We never broker your data between them.
- Cloudflare hosts our backend. They see your device's IP address as a side-effect of HTTP traffic; we don't log or retain that.
How long we keep your data
Data stays on your device until you uninstall the app. Household data on our backend is deleted automatically when the last household member leaves; individual device records are auto-removed after 90 days of inactivity.
Your rights
You can delete all data we hold about your household at any time by leaving the household (Settings → Family Sharing → Leave household). You can delete your device's local data by uninstalling the app.
Contact
Questions or requests: privacy@windowwise.app.
Changes to this policy
We'll update this page if our data practices change. Significant changes will be surfaced in the app on next launch.
Last updated: 2026-05-08