Privacy Policy

Effective 23 October 2026

In short

  • Untrail does not collect personal data. We never receive your trips, sightings, locations, notes, photos or reports.
  • There is no account, no advertising, no analytics, no tracking and no third-party SDK in the app.
  • The app makes no network requests of its own. The only connections are to Apple services you choose to use (described below).
  • What Untrail stores stays on your iPhone. You choose how long it is kept, and you can delete it at any time.

1. Who we are and what this covers

This policy explains how the Untrail app for iPhone and iPad handles information, including its widget, Live Activity, Control Center controls, Siri and Shortcuts actions and its Apple Watch companion. It also covers this website. “We” and “us” mean the developer of Untrail. Where this policy says iPhone, the same applies to iPad.

2. What we collect

Nothing. Untrail has no account or sign-in, and it contains no advertising, analytics, attribution, crash-reporting or other third-party code. It does not track you across apps or websites, and it does not send any information to us or to anyone else.

Untrail only listens for Bluetooth advertisements from nearby devices. It does not connect to, pair with or change any device.

If you have chosen in iOS to share analytics with app developers, Apple may give us crash reports and aggregated usage statistics through its developer tools. Apple controls this under its own privacy policy, and Untrail adds nothing to it. You can change this in your iPhone’s Settings under Privacy & Security › Analytics & Improvements.

3. What stays on your iPhone, and why

The information below is created and stored only on your iPhone, inside Untrail’s private storage. Trip data and attachments are protected by iOS file protection and are excluded from iCloud and computer backups, so they are not copied to a new device.

Sweep, Locate and Arrival Check results
Shown while you use them and not saved as history.
Guarded trips
When you start Journey Guard, Untrail saves the trip’s start and end time, how it ended and the sensitivity setting. It does not record your route.
Sightings
During a guarded trip only, and only for signals that look like a supported tracker, Untrail saves the tracker family, a confidence label, the identifier iOS gives that signal within Untrail (not the device’s hardware address), the signal strength, the time and, when a recent one is available, an approximate location (about 100 m accuracy). Untrail compares these to tell whether the same tag seems to be moving with you, and uses them in your evidence reports.
Trusted Tags
Tags you mark as trusted, with the label you give them, so they don’t raise alerts.
Saved places
Places you save, with a name, type and location, and whether an arrival reminder is on. If you turn on “Learn tags at home”, your current location is saved as your home place on this device and sightings there can suggest familiar tags. Nothing is trusted automatically.
Report notes and photos
Notes you write for a report are saved with that trip. Photos you attach are resized and their location metadata is removed before they are saved with the trip.
Settings
Your choices, such as the retention period, Discreet mode and sweep settings, are stored in the app’s preferences on your iPhone, along with when you last received an alert or arrival reminder, so they aren’t repeated too often.

4. How long data is kept, and how to delete it

In Settings › Trip data and retention › Keep trip data you can choose 7, 14, 30, 90 or 365 days, or Never automatically delete. The default is 30 days. Ended trips older than your choice are removed automatically, together with their sightings, notes and photos.

Without Untrail Plus, the app shows the last 7 days of history. Older trips stay on your iPhone until your retention setting removes them or you delete them.

Trusted Tags and saved places stay until you remove them. You can also delete data yourself at any time:

  • A single trip: open it in Trip data and choose Delete trip. Its photos and notes are removed too.
  • A trusted tag: select it and choose Untrust.
  • A saved place: swipe it in Saved places and choose Delete.
  • Everything: Delete all data ends any active trip and removes all trips, sightings, trusted tags, saved places and attachments. This cannot be undone.
  • Deleting the Untrail app removes all of its data from your iPhone.

Because we don’t hold any of your data, there is nothing for us to access, export or delete on our side.

5. Permissions Untrail asks for

Untrail asks for each permission when a feature needs it. You can change any of them later in iOS Settings.

Bluetooth
To scan for nearby Bluetooth trackers during sweeps, Locate, Arrival Check and guarded trips. During a guarded trip, scanning continues in the background; when the trip ends, background scanning stops.
Location (While Using or Always)
Used only for Journey Guard and for saved places. Journey Guard needs Always so it can compare where a tag was seen while your screen is off; location updates for a trip stop when it ends. Arrival reminders also need Always and use iOS region monitoring for the places where you turn reminders on. While Using lets you choose your current location for a saved place. Sweeps, Locate and an Arrival Check you start yourself don’t need location.
Notifications
For trip status, tracker alerts and arrival reminders you set. They are created on your iPhone; Untrail doesn’t use push notification servers. In Discreet mode, wording is neutral.
Face ID or passcode
Only if you turn on the app lock in Discreet mode. iOS performs the check; Untrail never sees your face data or passcode.
Photos
Untrail uses the iOS photo picker, which gives the app only the photo you choose. It doesn’t ask for access to your photo library.

6. Widgets, Live Activity, Apple Watch and Siri

These all work on your devices and send nothing to us.

  • The widget and Live Activity receive only trip status: when the trip started or ends, how many unknown tags were seen and whether one was flagged. They receive no sightings, locations, tag identifiers or report data. In Discreet mode, counts and whether a tag was flagged are hidden. The Live Activity is updated by the app on your iPhone, not by push.
  • With Untrail Plus, your paired Apple Watch receives the same kind of coarse trip status. It never receives device identifiers, locations or notes, and the watch doesn’t scan. In Discreet mode, the watch shows no details.
  • Siri, Shortcuts, Focus filter and Control Center actions only start or end a trip, start a sweep or open Arrival Check. They run on your iPhone.

7. Evidence reports and sharing

Evidence reports are created as PDF files on your iPhone. Nothing is uploaded. A report can include sighting times, tracker families and confidence labels, the app’s identifier for each signal, approximate areas, your notes, an optional case number and photos you attach. Maps are not included.

By default, locations in a report are rounded to a grid of about 1 km (“Hide exact coordinates”). If you turn this off, the report includes the recorded coordinates with their accuracy.

A report leaves your iPhone only when you share it with the iOS share sheet, to a person or app you choose. The temporary file is removed after sharing. Once you share a report, how the recipient handles it is outside Untrail’s control. Check its contents, including any photo, before you share it.

8. Apple services

Some features use Apple services, which handle information under Apple’s privacy policy:

  • Purchases. Untrail Plus is sold through the App Store. Apple processes payment, and the app checks your purchase status with Apple’s StoreKit. We don’t receive your payment details.
  • Maps. When you choose a saved place on the map, the map is provided by Apple Maps and loads from Apple.
  • Links. Links to this policy or Apple’s Terms of Use open in your browser only when you tap them.

9. This website

This website is a set of static pages. It uses no cookies, analytics, tracking pixels, external fonts or third-party embeds, and it has no scripts. The service that hosts it may keep standard technical logs, such as IP address and the page requested, to deliver and protect the site. We don’t use them to identify or track visitors.

10. Children

Untrail doesn’t collect personal information from anyone, including children.

11. Changes to this policy

If this policy changes, we will update this page and the effective date above. If the app’s handling of information changes, we will describe it here before the change applies.

12. Contact

Questions about privacy: marchettiua@icloud.com