Privacy Policy

Introduction

Seismo ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services.

Information We Collect

Personal Information You Provide

Account Information:

• Email address (required for registration and authentication)
• Full name (optional)
• Password (encrypted and stored securely using bcrypt hashing)

User-Generated Content:

• Custom metrics you create (names, types, colors, icons)
• Entry data you log (values, timestamps, notes)
• Settings and preferences
• Photos you attach to an entry (see Photos below)

Apple Health Data

If you allow it, Seismo reads data from Apple Health (for example heart rate, sleep, steps, workouts, body measurements and blood pressure) and uploads it to your own Seismo account so you can look for patterns in it. Seismo only reads Health data; it never writes to Health. You choose which types to allow in iOS, and you can change that at any time in Settings > Health. Health data is used only to provide the app to you, never for advertising or marketing, and is not shared with anyone else.

Location Tags

Location tags are off by default. If you turn them on in Settings, entries you log while the app is open record the device's latitude, longitude and accuracy. Seismo asks only for "while using the app" permission and never tracks you in the background. Turn the setting off to stop tagging; positions already saved stay with their entries until you delete them. For an entry that has a position, the app asks Apple's maps service for the nearest address or place name; Apple receives the coordinates for that lookup. Seismo saves the name with the entry, like the position, and removes it when you delete the entry.

Photos

You can attach up to 10 photos to an entry, chosen with the iOS photo picker (Seismo gets only the photos you pick and has no access to the rest of your library). On your device each photo is re-saved as a JPEG with its location and other metadata removed before it is uploaded. Photos are stored in a private bucket and are shown only to you, through short-lived links. When you delete a photo, its entry or your account, the file is removed within one day.

Automatically Collected Information

• Device information (iOS version, device model)
• Authentication tokens (JWT, stored securely in iOS Keychain)

Biometric Data

How We Use Your Information

• Service Provision: Create and manage your account, authenticate identity, store and sync data
• Service Improvement: Monitor usage patterns, diagnose issues, improve performance
• Communication: Send service-related notifications, respond to support requests
• Security: Detect fraud, protect against threats, enforce terms

How We Store Your Information

On Your Device

• Core Data: Metrics and entries stored locally in encrypted SQLite database
• iOS Keychain: Authentication tokens with iOS-level encryption
• UserDefaults: App preferences and last login email

On Our Servers

• Backend hosted on Google Cloud Platform (US data centers)
• Database encrypted at rest and in transit (HTTPS/TLS)
• JWT tokens with expiration (1 hour access, 30 days refresh)

Data Sharing and Disclosure

We may share information only in these circumstances:

• Service Providers: Google Cloud Platform (infrastructure)
• Legal Requirements: To comply with laws or protect rights
• Business Transfers: In connection with merger or acquisition
• With Your Consent: Any other disclosure with explicit consent

Data Security

Technical Safeguards:

• HTTPS/TLS encryption for all data in transit
• Encrypted storage for tokens (iOS Keychain)
• Database encryption at rest
• JWT-based authentication with expiration
• Password hashing using bcrypt

Your Privacy Rights

• Access: Request a copy of your personal information
• Correction: Update account information in Settings
• Deletion: Delete metrics/entries in app or request account deletion
• Data Portability: Export your data (feature coming soon)
• Opt-Out: Disable biometric authentication anytime

To exercise these rights, contact: privacy@smallblocksoftware.com

Children's Privacy

Seismo is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe your child has provided us with information, contact us immediately.

Third-Party Services

We do NOT use:

• Third-party analytics (no Google Analytics, Firebase, etc.)
• Advertising networks
• Social media tracking pixels
• Cookies or tracking technologies

California Privacy Rights (CCPA)

California residents have additional rights including:

• Right to know what data we collect
• Right to delete personal information
• Right to opt-out of data sales (we don't sell data)
• Non-discrimination for exercising rights

European Privacy Rights (GDPR)

EEA residents have rights including access, rectification, erasure, restriction, portability, and the right to object to processing.

Data Protection Officer: dpo@smallblocksoftware.com

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification. Continued use after changes constitutes acceptance.

Contact Us

App Store Privacy Labels

Data Used to Track You: None

Data Linked to You: Email address, metrics, entries, photos, Health and fitness data, precise location (only if you turn on location tags), User ID

Data Not Linked to You: None - all data is associated with your account