Privacy Policy

Who this policy covers

This policy covers Hallboy, an iOS app published by Anchorwright. It applies to the app itself and to Apple’s own services the app relies on (iCloud/CloudKit, StoreKit, and the system notification service). It does not cover any other app, website, or service.

Contact

Questions about this policy or how the app handles your information: hello@anchorwright.com.

What the app stores

Hallboy stores only what you type into it:

• Your home — the home type you enter (for example “Single-family house”) and, optionally, a location label such as a city. The location field is optional, is free text you write yourself, and is used only to label the home so you can tell several apart. Hallboy does not use your device’s location services, and does not ask for location permission.
• Systems you track — a name, the system type, an optional description of its age, and an optional note about where it is in the house, plus reference data you enter for it (make, model, serial number, filter sizes).
• Your schedule — the maintenance tasks for those systems, when each is next due, how often it recurs, and the date you last marked one done.
• Attachments — a photo or document you add to a tracked system: a nameplate, a manual, a warranty, a receipt. You can take a photo, choose one from your library, or pick a file. Hallboy does not read your contacts or calendar, and does not ask for either of those permissions.

Photos you attach are stripped of location and camera metadata before they are ever saved — always, the moment you add one, not as a setting to turn on. A photo from your camera or library can carry hidden data: where it was taken, when, and what device took it. Hallboy removes all of that before the photo is stored, so an attached photo carries only the image itself. This isn’t a promise about our intentions — it happens in code, the same way every time, before the photo ever reaches iCloud.

Where it is stored, and who can read it

Everything above is stored on your device. If you are signed in to iCloud, iOS also syncs it to your own private iCloud database, so it reaches your other devices. That database belongs to your Apple Account. Anchorwright has no access to it and no ability to read, export, or recover what it holds.

We want to be precise about one thing rather than imply more than is true: Hallboy does not apply its own encryption on top of Apple’s. Your home data is protected by Apple’s device encryption and by the protections Apple applies to iCloud, under your Apple Account — not by a separate key held by the app. Apple’s own documentation describes how iCloud data is protected.

What is never collected

• No accounts. There is no sign-up, no login, no password, and no profile.
• No analytics or tracking. The app contains no analytics software, no advertising software, and no third-party SDKs at all. It does not track you across apps or websites, and it collects no advertising identifier.
• No network calls to us. The app contains no networking code at all — no URLSession, no HTTP requests of any kind. It never contacts a server operated by Anchorwright, and there is no Anchorwright service that receives, stores, or processes anything from the app. (This website is a plain set of pages; visiting it is not the app doing anything.)
• Nothing is sold or shared. We have nothing to sell or share, and would not.

Notifications

If you turn reminders on, Hallboy schedules them with iOS on your device. They are local notifications: no reminder is sent through a server, and the content of a reminder never leaves your phone. You can turn them off at any time in the app’s Settings, or in iOS Settings.

Exporting your home record

Hallboy Plus can export a home’s record: a summary document plus a separate copy of every photo and manual you have attached. This happens entirely on your device, and only when you ask for it. Hallboy prepares the files locally and hands them to iOS’s own share sheet — the standard one you see anywhere in iOS — and from there you choose what happens: save to Files, send in Mail or Messages, AirDrop, print, or cancel. Nothing is uploaded to Anchorwright at any point; there is still no networking code in the app at all.

Two things worth saying plainly, because they are the parts a careful reader would want to know:

• The exported photos have already had their location and camera metadata removed, by the same code described above. Export does not re-attach anything; it copies what is already stored.
• Once you send an exported file somewhere, it is out of Hallboy’s hands. A PDF you email or a photo you AirDrop is an ordinary file on whatever device or service receives it, governed by that service’s terms, not this policy. Deleting the attachment in Hallboy later does not reach a copy you already sent. That is true of any export in any app, and we would rather state it than let the sentence above imply otherwise.

While preparing an export, Hallboy writes the files to its own temporary storage on your device. It clears anything left there the next time it launches.

Hallboy Plus

Hallboy Plus is a one-time purchase, not a subscription — sold once through Apple’s In-App Purchase system, unlocking export and up to three homes for as long as you use the app, with nothing to renew or cancel. Apple handles the entire transaction. We never see your payment method, card details, or billing address. The app receives only Apple’s confirmation of whether you own it — no identity attaches to it. If you ever need to restore it (a new phone, a reinstall), the app’s own Restore Purchases brings it back. Refunds are handled by Apple.

Crash diagnostics

Hallboy records crash and performance diagnostics from Apple’s own MetricKit framework — stack traces and device state — into a folder inside the app’s own storage on your device. These records contain no information about your home and no content you entered.

They are never transmitted anywhere. Nothing uploads them, and the app has no network code that could. They exist so that a crash can be diagnosed from a device you still hold, and only the most recent are kept.

Separately, if you have opted in to Apple’s own analytics sharing in iOS Settings, Apple may share aggregated crash reports with developers under Apple’s policies, not ours.

Children

Hallboy is a home-maintenance tool for adults and is not directed at children. It collects no personal information from anyone, including children.

Deleting your information

You can delete a tracked system, or an entire home along with its whole schedule, from inside the app — Home Profile. Deleting a home removes its systems and its tasks with it.

To remove everything, delete the app from your device. To also remove the synced copy, delete Hallboy’s data from your iCloud storage in iOS Settings, under your Apple Account. Because we never receive your information, there is nothing for you to request from us and nothing for us to delete on your behalf.

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete personal information a company holds about you. Anchorwright holds none from this app. Your information is in your own possession and your own iCloud account, and the app gives you direct access to all of it.

Changes to this policy

If this policy changes, the updated version will be posted at this address with a new “last updated” date. Material changes affecting how the app handles your information will also be noted in the app’s release notes.