Direct product policy. This Privacy Policy applies only to Kept (app.rork.ppmzphfgdcfgapyjsmzie). It directly states the product’s data practices and is not an owner-site redirect or a portfolio-wide substitute.
Scope, controller, and contact
UNCOMMON WEATHER LLC, 1212 N Walker Ave Apt 207, Oklahoma City, OK 73103, United States, is responsible for the limited information described here. Contact team@uncommonweather.com for privacy questions, rights requests, or support.
Information Kept handles
- Pact titles, terms, schedules, participant roles and labels, check-ins, streaks, and history
- Proof photographs or other proof media, human verdicts, and verdict notes
- Partner and sharing metadata, CloudKit record and share identifiers, and accepted-share state
- Private iCloud key-value synchronization envelopes, tombstones, and deletion state
- Optional on-device image tags and generated feedback
- Notification, widget, display, and other product preferences
- Anonymous App Store purchase and entitlement metadata
- Privacy-minimal legal-choice evidence
Product-specific practices
Pacts and private iCloud synchronization
Kept stores pact titles and terms, schedules, participant roles and labels, check-ins, streaks and history, proof photographs or other proof media, human verdicts and verdict notes, partner and sharing metadata, CloudKit identifiers, notification and widget preferences, and other settings in local app storage.
Kept also serializes pact records and deletion tombstones through Apple's private iCloud key-value storage so pacts, including solo pacts, can synchronize across devices signed in to the same Apple account. Solo pact data therefore is not strictly device-only. The developer does not operate a product-data server and does not receive that private iCloud content merely because synchronization is enabled.
Shared partner pacts
Partner pacts use Apple CloudKit sharing. Pact content and proof associated with a shared pact can be made available through the user's private CloudKit share to people who accept the invitation. Invitees can view the content made available to that share and may retain copies or screenshots outside Kept. Apple processes iCloud and CloudKit data under its own privacy terms.
On-device analysis
Kept may use Apple's on-device Vision and Foundation Models frameworks to create optional image tags or private feedback. Kept does not send proof media to a third-party artificial-intelligence service. Automated analysis does not make the human decision to accept or reject proof and does not by itself mark a pact as failed.
Notifications and widgets
Kept uses local notifications and widgets. Pact status or reminders may be visible on the lock screen or other device surfaces according to the user's system settings.
Purchases and legal choices
Apple processes App Store purchases and payment credentials. RevenueCat receives an anonymous app-user identifier and limited app, device, purchase, and entitlement metadata needed to determine access; it does not receive pact text, proof media, verdicts, check-ins, partner identities, or participant labels.
The legal-choice service receives only signed, privacy-minimal evidence of an acceptance, decline, or withdrawal, including product and document identifiers, versions and hashes, the choice, broad age band and acceptor role when applicable, pseudonymous installation and request identifiers, timestamps, locale, and security proof. It does not receive Kept product content.
Retention and deletion
Kept keeps local and private iCloud records until the user removes them with an available control, clears applicable app storage, leaves or deletes an applicable share, or removes the app, subject to Apple's storage, synchronization, and backup behavior. Deletion tombstones can propagate through private iCloud synchronization. Leaving or deleting a shared pact cannot erase copies or screenshots already retained by another participant, and exported or shared copies remain wherever they were saved.
Purchases and entitlements
Apple processes App Store purchases, payment credentials, refunds, and subscription management. RevenueCat receives an anonymous app-user identifier and limited app, device, transaction, purchase, and entitlement metadata needed to present offerings and determine access. RevenueCat does not receive the product content identified in this policy.
Legal choices and signed evidence
When a user accepts, declines, or later withdraws acceptance to use limited mode, Kept records the choice locally and queues a signed, privacy-minimal event for the Uncommon Weather legal-choice service hosted on Supabase. The service receives product and document identifiers, versions and SHA-256 hashes; the choice; broad age band and acceptor role when applicable; pseudonymous installation and request identifiers; app or extension version and build; timestamps, locale, source and sequence; online or offline state; cryptographic proof; and receipt-linkage fields where applicable.
The service does not receive the user’s name, email address, birth date, full App Store receipt, or Kept product content. A keyed pseudonym is derived from the random installation identifier; the raw installation identifier is not retained in the legal ledger. Security providers may process ordinary connection metadata, such as IP address, route, response status, and timing, to deliver and protect the request.
A local decline or withdrawal takes effect immediately and remains queued until it can be delivered without silently changing the decision time. A user who declined or withdrew remains quietly in limited mode across later document families and can choose to review and accept from settings. An acceptance remains verification-pending, with ordinary product access limited, until a signed server receipt bound to the current product documents is returned and verified. A verified current choice is not repeatedly requested.
Service providers and disclosures
Apple provides iOS, App Store billing, and the Apple frameworks or iCloud services specifically identified above. RevenueCat provides subscription-entitlement infrastructure. Supabase hosts the signed legal-choice and receipt service. Cloudflare delivers and protects the public website. Support and network providers process only the information needed for those functions. Information may also be disclosed when required by valid legal process, to protect rights or safety, to investigate abuse or security incidents, or in a business transaction with legally required safeguards.
Uncommon Weather does not sell personal information, share it for cross-context behavioral advertising, serve third-party ads, or track users across unrelated products.
Retention and deletion
Product data follows the product-specific retention and deletion boundaries stated above. Copies deliberately exported or shared remain wherever the user or recipient saved them. Support correspondence is retained while needed to handle the request and for reasonable operational, security, and legal purposes. Apple, Google, RevenueCat, Gumroad, and other independent platforms retain their records under their own policies and legal duties.
Legal-choice events and acceptance receipts are append-only evidence retained until the verified relationship ends plus seven years. Related challenge, key-registration, request-audit, signing-key incident, receipt-integrity, and retention-purge records follow their security and legal-claims schedules. Immutable legal evidence may be retained where needed to establish, exercise, or defend legal claims.
Security
The legal-choice system uses HTTPS, P-256 signatures, keyed pseudonyms, replay-resistant single-use challenges, strict origin or product allowlists, rate limits, restricted service credentials, append-only evidence, and signed receipts. Apple security frameworks are used where the product-specific disclosures identify them. No system is perfectly secure.
Choices and privacy rights
Users can decline, later withdraw to limited mode, review the current documents, or affirmatively accept from Legal & Privacy settings. Available product controls can delete or export product data, manage or restore purchases, leave a share, or deactivate a local license where applicable. Depending on location, rights may include access, correction, deletion, restriction, objection, appeal, withdrawal, or a regulator complaint.
Children and eligibility
Kept is intended only for adults age 18 or older. The legal flow records only a broad age band and acceptor role, not a birth date.
Changes and related documents
Material changes receive a new immutable document version. Previously accepted users are asked to make one new choice for a materially changed family; continued use alone does not silently create acceptance. A stored decline or withdrawal remains limited without a recurring prompt. Read the Kept Terms of Service and Kept Product Schedule.
UNCOMMON WEATHER LLC
1212 N Walker Ave Apt 207
Oklahoma City, OK 73103
United States
team@uncommonweather.com