Android-specific privacy policy. This policy applies only to Parcel package com.ryantinklepaugh.parcel. It does not change the iOS app’s privacy policy or receipt history.
Scope and controller
Uncommon Weather LLC controls the processing described here. Contact team@uncommonweather.com. Parcel is a parcel-boundary and satellite-observation evidence tool that records dated land-change signals for user review and field verification.
Information handled
- Supabase account and session identifiers
- parcel name, boundary, area, land-cover choice, and selected baseline
- satellite scene identifiers, observation times and sources, usable-pixel and cloud-mask fractions, indices, alerts, and private image-object paths
- app-private field-verification notes and locally generated evidence reports
- optional push-registration token and ownership metadata
- purchase entitlement and legal-choice evidence
Parcel uses network access for authenticated parcel records, observations, alerts, and signed private imagery. Field-verification notes remain app-private and local. Notifications are optional. A report leaves the app only when you direct an Android share action.
Product storage and providers
Parcel stores parcel definitions, observation evidence, alerts, account state, and private imagery paths in its Supabase product service under account-scoped controls. Signed imagery is downloaded for display. Field-verification notes stay app-private and local, and evidence PDFs are created locally for user-directed sharing.
Supabase provides authentication, database, private object delivery, and server processing. Satellite-source requests and imagery providers supply observation data. When enabled, Firebase Cloud Messaging processes an installation push token and delivery metadata without parcel content. Google Play and RevenueCat process purchase and entitlement state.
Legal-choice evidence and abuse prevention
To preserve your choice and prevent forged receipts, the app may send privacy-minimal evidence to Supabase-hosted services: package ID, document versions and hashes, acceptance or withdrawal state, coarse adult age band and role, timestamps, a random installation identifier, request identifiers, an Android Keystore public-key proof, and—when configured—Google Play Integrity verdict material. We also process connection metadata such as IP address, user agent, response status, and rate-limit state for security, reliability, and abuse prevention. We do not send your ordinary product records with legal-choice evidence.
Purchases
Google Play supplies transaction and purchase-token data, and RevenueCat supplies entitlement and offering state. We do not receive your full payment-card number.
Retention and deletion
Supabase parcel and account records remain until the user deletes the parcel or account, subject to necessary security and backup windows. Local field notes remain until the user deletes the case or app data or removes the app. A shared report remains with the selected destination until removed there. Legal-choice evidence follows the separate evidentiary retention described below.
Server-side legal evidence is retained to prove and honor the choice, withdrawal, integrity, and retry history it records. Security logs are retained only as reasonably needed for fraud prevention, troubleshooting, and legal compliance. Contact us to request access or deletion; we may retain evidence where necessary to establish, exercise, or defend legal claims.
Choices and rights
You can deny optional Android permissions, decline or withdraw legal consent, manage purchases where applicable, and request privacy help. Depending on where you live, you may have rights to access, correct, delete, restrict, object, or appeal. We do not discriminate for exercising a privacy right.
Age boundary
The app is not directed to anyone under 18. We do not knowingly collect a precise birth date through the legal-choice flow.
Security and transfers
We use reasonable technical and organizational safeguards, but no device, network, or storage system is guaranteed secure. Providers may process information in the United States or other countries subject to applicable safeguards.