App Privacy Policy

What We Collect

Apart from the StormWatch features described below, nothing. Anything you create or enter in one of our apps stays on your device, under your control. There are no accounts to register and no profiles being built behind the scenes.

Ads

None. Our apps contain no advertising, no ad networks, and no ad SDKs. Nothing in our apps is watching what you do in order to sell you something later.

Analytics and Tracking

None. No analytics SDKs, no crash reporters that phone home, no usage metrics, no fingerprinting, no tracking of any kind. We don't know how often you open our apps, what you tap, or when you leave — and that's by design.

Third Parties

We don't sell or share your data with third parties, and our apps include no third-party data collection services. StormWatch's servers run on Vercel, which keeps standard request logs, including your IP address, for one day. Outage reports and push tokens are stored with Upstash. Apple delivers Live Activity updates and confirms that outage reports come from a real device.

Children

Apart from the StormWatch features described below, our apps collect no personal information from anyone, children included. StormWatch never asks for a name, email address, or age.

Changes

If a future app ever needs to handle data differently, we'll update this policy and the date at the top before that app ships. The goal stays the same — collect as little as possible, which for most of our apps means nothing at all.

Contact

Questions about this policy? Reach us at sayhello@tapiki.ai or by mail at Tapiki, PO Box 970944, Waipahu, HI 96797.

Health and Photos (Wayvy)

Wayvy reads your weight from Apple Health and looks at photos in your library. None of it leaves your phone.

Apple Health. With your permission, Wayvy reads your body weight (body mass) history from Apple Health to build a timeline on your phone. It reads only weight. It never writes anything to Health, and it never sends your Health data anywhere. Your Health data stays on your device, is never used for advertising or marketing, and is never shared with or sold to anyone. You can revoke access at any time in Settings → Health → Data Access & Devices → Wayvy.

Photos. With your permission, Wayvy looks in your photo library for photos taken on the days you weighed in. To find the ones with you in them, it compares faces in those photos to a few reference photos you choose. That comparison runs entirely on your device using a model built into the app. No photo, face data, or anything derived from them leaves your phone. Wayvy never modifies or deletes your photos. You can revoke access in Settings → Privacy & Security → Photos → Wayvy.

Where it lives. Everything Wayvy keeps, including your photo choices, your reference faces, and cached face data, is stored in the app's private storage on your device and is removed when you delete the app. Tapiki has no server that receives it. It may be included in your own iCloud or computer backup, which is under your control.

Location, Outage Reports, and Live Activities (StormWatch)

Most of StormWatch only reads public weather and emergency data, so it collects nothing. Two features send limited data to StormWatch's servers.

Community outage reports. When you choose to report a power outage, StormWatch asks for your location, or you can drop a pin instead. The app sends that point with your report, and our server immediately turns it into a neighborhood-sized area about half a kilometer across. The server keeps that area, the outage status, when it started, the time of the report, and a scrambled form of a random ID the app creates for your device. The ID stops duplicate reports and lets you withdraw yours. The server never stores your exact location. To limit abuse, our code keeps a scrambled form of your IP address for one hour, and our host's request logs keep it for one day. Apple's DeviceCheck confirms the report comes from a real device. Reports aren't tied to your name, address, or Apple ID. Because the device ID stays the same on your device, the App Store lists this data as linked to you. Each report leaves the map after 24 hours and is deleted from our server within 15 minutes after that. You can withdraw yours at any time, which deletes it immediately. You can revoke location access in Settings → Privacy & Security → Location Services → StormWatch.

Live Activities. When Live Activities are on, StormWatch gives its server an Apple push token each time you open the app. The token only lets Apple deliver alert updates to your Lock Screen and Dynamic Island. It isn't linked to your name or Apple ID. The server deletes it 30 days after you last open the app, or sooner if Apple reports it's no longer valid. You can turn Live Activities off in Settings → StormWatch → Live Activities.

Public data. To show weather, radar, cameras, and news, the app downloads images and data directly from the National Weather Service, NOAA, USGS, Iowa State University, YouTube, and the websites of featured relief organizations. Like any web request, each of these receives your IP address.

The website. The StormWatch website at stormwatch.tapiki.ai works differently from the apps. See the next section.

StormWatch Website (stormwatch.tapiki.ai)

The StormWatch website has no account, no ads, and no advertising or analytics cookies.

Visit counts. The website uses Vercel Web Analytics to count page views. It sets no cookies and doesn't follow you to other sites.

Embedded live content. The live news and webcam streams are embedded from YouTube, and the wind map is embedded from Windy. When they load, YouTube and Windy receive your IP address and browser details, and YouTube sets its own cookies. Their privacy policies apply to that content.

Other services your browser contacts. Map tiles come from CARTO, fonts from Google Fonts, and weather images directly from the National Weather Service and other public agencies. Like any website request, each of these receives your IP address.

Outage reports. Outage reports sent from the website work like the ones from the app. Your browser asks before sharing your location, the server keeps the same limited details described above, never your exact location, and each report leaves the map after 24 hours and is deleted within 15 minutes after that. Cloudflare Turnstile checks that a person, not a bot, is sending the report.