This policy describes how the API Watcher mobile application, including its iPhone app and its Apple Watch app (“API Watcher,” “the app”), handles information when you use it on your iPhone and Apple Watch. API Watcher is designed to work without an account and to keep your dashboards, request settings, and any API credentials you enter on your iPhone and Apple Watch.
API Watcher is provided by Los Palmos LLC, a Pennsylvania limited liability company (“Los Palmos,” “we,” “us”). For questions about this policy, contact us at admin@lospalmos.org.
API Watcher does not collect any data, and nothing you enter in the app is sent to us. The app connects to the internet only to make the requests your dashboards use: requests to endpoints you configure and to built-in public example APIs. These requests go directly from your device to those endpoints, not through us. It requires no account and contains no analytics, advertising, or tracking. Your dashboards, request settings, API credentials, and the most recently fetched values are stored only in the Keychain on your iPhone and Apple Watch. We do not sell your personal information.
Dashboards, request settings, and API credentials (stored locally). Your dashboards, request settings, and any API credentials you enter are stored in the Keychain on your iPhone and Apple Watch. The iPhone app syncs them to your Apple Watch using Apple’s WatchConnectivity framework, so they are synced only between your own iPhone and Apple Watch and are not synced through iCloud Keychain. The most recently fetched values for your dashboards are also stored in the Keychain on your iPhone and Apple Watch. None of this is sent to us by the app, because API Watcher does not require a login and does not use our own backend. You can delete dashboards and tiles at any time within the app; removing a tile’s credential or deleting the tiles that use it removes that credential.
Health, motion, and location data. API Watcher does not read motion or health data and does not access Apple Health or HealthKit. API Watcher does not use your location.
Erasing your device removes this data unless you have a device backup that includes it.
API Watcher makes network requests only to fetch the information shown on your dashboards. Both the iPhone app and the Apple Watch app make these requests directly from the device. Requests go to:
Providers include the U.S. National Weather Service, U.S. Geological Survey, U.S. Treasury, GitHub, Open Library (Internet Archive; see its terms of use, which include its privacy terms), and Where the ISS At? (which does not publish a privacy policy).
Three starter dashboards are added on first launch: San Francisco weather (U.S. National Weather Service, api.weather.gov), Earth pulse (U.S. Geological Survey earthquakes, earthquake.usgs.gov), and the built-in offline Demo dashboard, which makes no network requests. Nothing is sent when the app launches: a request is made only when you open a dashboard. “Refresh when opened” is on by default and can be turned off for each dashboard, and you can delete starter dashboards.
Like any web request, each request lets the receiving server see your device’s IP address. Each request includes the settings you configured for it, and each credential is sent only to the endpoint of the request it belongs to. Requests do not include cookies, and the app does not follow redirects. The built-in examples use fixed public endpoints, send no device location or device identifiers, and identify the app in their User-Agent header. How those servers handle your requests is governed by their providers’ own policies, which are outside our control.
Local network access. API Watcher uses local network access only to reach endpoints you configure on your local network. Your device asks you to allow the app to access your local network only when a request you set up reaches a host on your local network.
API Watcher is purchased through the App Store, and Apple processes the payment. We do not receive your payment details. Apple provides us with sales reports that do not identify you personally.
API Watcher does not include any third-party libraries, analytics, crash-reporting, or advertising SDKs, and does not engage in tracking. If that changes in a future update, we will update this policy and, where required, the App Store privacy details.
Your use of API Watcher is also subject to Apple’s terms and policies for the App Store, iOS, and watchOS. Apple may process certain technical or usage information in accordance with its own policies, which are outside our control.
We do not receive or retain any of your data. Dashboards, request settings, and credentials stay on your iPhone and Apple Watch until you delete them. Data stored in the Keychain can remain on your device after you delete the app, but API Watcher erases its dashboards, request settings, credentials, and latest fetched values the next time you install and open the app. To remove this data right away, delete it within the app before deleting the app. Copies may remain in your device backups (such as iCloud Backup) until those backups are deleted. Because we hold no data about you, there is nothing for us to access, correct, or delete on request, but you can contact us with any privacy question.
API Watcher is a general-audience app and is not directed at children under 13. We do not knowingly collect personal information from children. If you believe we should address a specific concern, contact us using the information below.
We design the app to store your dashboards, request settings, API credentials, and the most recently fetched values in the Keychain on your iPhone and Apple Watch. No method of storage is perfectly secure; keeping your device software up to date and using device passcode or biometrics helps protect your data.
We may update this policy from time to time. The “Last updated” date at the top will change when we do.
For privacy questions or requests related to API Watcher, contact us at:
Los Palmos LLC, a Pennsylvania limited liability company
Email: admin@lospalmos.org