Product-specific document. This schedule applies only to Parcel (app.parcel.Parcel). It supplements the separate Parcel Terms of Service and Privacy Policy, each with its own immutable version and SHA-256 hash.
Product purpose
Parcel lets an adult choose a land area, review a historical satellite-derived change report, and optionally monitor that land for significant vegetation or water change using Copernicus Sentinel imagery.
An indicator, not a survey or official record
Parcel identifies possible surface change from satellite observations. It does not establish ownership, title, a legal boundary, acreage, encroachment, regulatory compliance, environmental condition, timber volume, crop condition, flood extent, insurance loss, construction progress, or the cause of a detected change. Verify important conditions on the ground and use a licensed surveyor or other qualified professional when appropriate.
Clouds, revisit timing, and detection limits
Parcel is not real-time, continuous, guaranteed, or an emergency notification system. Satellite checks run in scheduled processing windows. A newly submitted land history can wait for a later window and take a day or longer to finish. A report or alert can also be delayed by satellite revisit timing, clouds, haze, snow, shadows, source outages, processing queues, notification delivery, or repeat confirmation. Neither a same-day first report nor a same-day alert is promised. Do not rely on Parcel for personal safety, emergency response, trespass intervention, wildfire or flood warning, security monitoring, or an official deadline.
The service can miss a real change, flag a seasonal or temporary condition, merge separate events, estimate the wrong area, or display incomplete or misleading evidence. A “nothing changed” result means only that the completed analysis found no qualifying change in the available clear observations under the current method.
Authority and lawful use
The user is responsible for choosing land for a lawful purpose and for having any authority, consent, or other basis required for the intended use. Parcel must not be used to harass, stalk, discriminate, threaten, evade a legal restriction, interfere with a property, misrepresent ownership, or make a decision that law requires to be based on a different or official source.
Free access and Parcel Watch
Free access and lookup limits are the current limits displayed in the app. Parcel Watch is an auto-renewable Apple subscription that can add monitored parcels, notification delivery, and the imagery or history features shown in the current purchase disclosure. The price, term, trial, renewal terms, parcel limit, and included features shown by Apple before purchase control.
Field notes and evidence reports
A signed-in user can add text field-verification notes to their selected land and associate a note with a satellite scene. These user statements are not independently verified by Parcel. Notes are stored locally on the device under the account and parcel, not automatically synchronized to other devices. After observation and alert histories load, the user can generate a PDF evidence report combining the selected boundary, available scene chronology, confirmation records, and local notes. The generated PDF is a local temporary file; a user-directed export or share can create separate copies. Neither the notes nor the report is an official survey, certification, or proof of a change's cause.
Limited mode
After a decline or withdrawal, limited mode preserves access needed to review available account records; delete the account; sign out; read legal and support information; and manage or restore an Apple purchase. New lookups, parcel creation, monitoring, processing, alert delivery, purchases, and premium imagery can remain unavailable until the current product documents are affirmatively accepted.
Current product data boundary
The following categories and operational boundaries are specific to Parcel and form part of this schedule.
- Authentication identifiers and account data, including an anonymous lookup user ID, email address where provided, Sign in with Apple identifier, Supabase user ID, and session state
- Land-area geometry, parcel name, purpose, land-cover choice, calculated area, map search or selected location, monitoring state, and processing progress
- Satellite source identifiers, acquisition dates, cloud and valid-pixel measurements, derived vegetation and water indices, baseline and replay state, alert footprints, confidence state, and monitoring health
- Private generated evidence, including before, after, and difference images, monthly snapshots, and timelapse files associated with a selected parcel
- User-authored text field notes, note timestamps and selected scene identifiers saved on the device, and user-requested PDF evidence reports generated on the device
- Push-notification token, notification environment and bundle identifier, optional alert-email preference, and alert-delivery state
- Apple purchase and RevenueCat subscription and entitlement metadata associated with an anonymous or signed-in app user identifier
- Privacy-minimal legal-choice evidence and request-audit metadata
- Operational network and security metadata processed by service providers
- Support correspondence and attachments the user deliberately sends to Uncommon Weather
Anonymous lookups, accounts, and authentication
Parcel can create a random anonymous Supabase identity so a person can check a limited number of spots without first providing an email address. That identity and its lookup records are not a promise of permanent storage or account recovery. Watching land, receiving account-linked alerts, and purchasing paid access require the durable account state shown in the app.
A user can sign in with Apple or a supported email one-time code. Supabase processes the authentication identifier, email address where provided, access and refresh tokens, and account user ID. Parcel does not receive an Apple ID password or email-account password.
Land boundaries, search, and device location
A boundary the user draws or selects, its calculated area, name, monitoring purpose, land-cover choice, and processing state are stored because they are the subject of the requested service. Those records can reveal an interest in a home, farm, forest, water body, work site, or other location and should be treated as sensitive even when ownership is not established.
Parcel requests precise device location only after the user chooses the location control and uses it to center the map. Parcel does not request background location and does not monitor the device's movement. Map search and map imagery are provided through Apple frameworks.
Satellite sources, derived observations, and evidence
The service searches public Copernicus Sentinel-2 catalog records through Element 84 Earth Search and reads source imagery from AWS Open Data for the selected land window. It records source scene identifiers, observation dates, cloud and validity measures, derived vegetation and water values, baseline state, possible-change state, alert footprints, and service health needed to build the report and continue monitoring.
When a qualifying change is confirmed, Parcel can generate private before, after, and difference images, snapshots, and a timelapse for the account. Generated media is stored in private service storage and made available through short-lived access URLs. A copy deliberately exported or shared remains with the selected recipient or service.
Local field notes and PDF reports
Field notes are text the user enters, with a recording time and an optional selected satellite-scene identifier. Parcel saves them in app-owned, account-and-parcel-scoped storage on that device. They are not automatically uploaded to the Parcel service or synchronized to another device. A report is generated only at the user's request after the app loads the available observation and alert history; its local PDF can include a selected land boundary, scene chronology, alert records, and those notes. The app keeps generated PDFs in temporary account-and-parcel-scoped storage. A file deliberately exported or shared may remain with the selected destination or recipient outside Parcel's control.
Push and email alerts
If notifications are enabled, Apple provides a device push token. Parcel stores that token with the account, app bundle, and development or production environment needed to route an alert through Apple Push Notification service. Delivery and device presentation remain controlled by Apple and device settings.
If the user enables email alerts, the account email address and alert content needed for that message can be sent to Resend. Parcel does not use push or email identifiers for advertising.
Purchases, entitlements, and legal choices
Apple processes App Store purchases and payment credentials. RevenueCat receives an anonymous app-user identifier and, after durable sign-in, the Supabase user identifier, plus limited app, device, transaction, purchase, subscription, and entitlement metadata needed to present offerings, restore purchases, provide aggregate subscription analytics, and determine server-authorized access. RevenueCat does not receive parcel geometry, satellite imagery, alert evidence, or location merely to verify an entitlement.
The Uncommon Weather legal-choice service receives signed, privacy-minimal evidence of an acceptance, decline, or withdrawal. It does not receive the Parcel account email, Supabase account ID, parcel geometry, satellite evidence, or alert content.
Retention, account deletion, and subscription cancellation
Account-backed parcel records and generated media remain while the account is active or as needed to provide the requested service. Local field notes remain on the device until removed by the user, the app, or a confirmed account or parcel deletion; temporary PDFs may also be removed by the app or operating system. Operational records can remain for a limited period to retry work, investigate a failed run, prevent duplicate alerts, control abuse, secure the service, resolve a dispute, or satisfy legal obligations.
The in-app account-deletion flow removes account-owned private storage through the storage service, then removes the Supabase authentication user and user-owned database records. After the server confirms deletion, Parcel also removes app-owned local notes and reports for that account; if local cleanup fails, it retains a recoverable pending-deletion state rather than treating the local deletion as complete. A completed deletion does not erase copies the user shared, Apple or RevenueCat transaction records, provider security records, or privacy-minimal legal-choice evidence. Deleting a Parcel account does not cancel an Apple subscription.
Legal choices and verification
A decline or withdrawal takes effect locally at once and remains limited without a recurring prompt. A user can review the current documents and affirmatively accept from Legal & Privacy settings. A current affirmative acceptance takes effect after it is durably saved on the device and unlocks main-app access while signed-receipt delivery retries in the background. A non-terminal network, Apple, or service outage does not lock the main app or create another prompt. Widgets, Live Activities, and other extension surfaces that require a verifiable cross-process receipt may wait until the server-signed receipt is received and verified. If the server explicitly rejects the exact saved acceptance as terminal, the client quarantines that failed record and returns to the appropriate decision or limited-state screen. A current choice is not repeatedly requested.
Related documents
Parcel Terms of Service · Parcel Privacy Policy · Legal Center