Privacy Policy

Information We Collect

Information You Provide

When you use Shiplet, you may provide the following information:

Information Collected Automatically

Camera Access

Shiplet requests camera access only to scan package tracking barcodes. Camera data is:

• Processed entirely on-device
• Never recorded, stored, or transmitted
• Used solely to extract tracking number text

You can deny camera access and manually enter tracking numbers instead.

How We Use Your Information

Your information is used exclusively to:

1. Display package tracking status — We query carrier APIs with your tracking numbers to show delivery updates.
2. Sync across your devices — If you enable iCloud, your packages sync privately through your Apple iCloud account.
3. Provide offline access — Package data is cached locally so you can view it without an internet connection.

Data Storage & Security

On-Device Storage

All package data is stored locally on your device using Apple's SwiftData framework with standard iOS data protection.

iCloud Sync

If you have iCloud enabled for Shiplet:

• Your data syncs through Apple's CloudKit infrastructure
• Data is encrypted in transit and at rest
• Only you can access your data through your Apple ID
• We cannot access your iCloud data

You can disable iCloud sync for Shiplet in iOS Settings → [Your Name] → iCloud → Apps Using iCloud.

Carrier API Communication

When refreshing tracking information:

• Your tracking numbers are sent directly to carrier APIs (USPS, UPS, FedEx, DHL, OnTrac)
• Communication uses HTTPS encryption
• We do not operate intermediate servers — requests go directly to carriers
• Carrier privacy policies apply to data they process

Third-Party Services

Shipping Carriers

Shiplet communicates with these carrier services:

When you add a tracking number, that number is shared with the respective carrier to retrieve status. Carriers may log API requests per their policies.

Apple Services

• iCloud/CloudKit — For optional cross-device sync (Apple Privacy)
• MapKit — For displaying package location (no personal data shared)

Data Retention

• Package data is retained until you delete it from the app
• Archived packages remain until you permanently delete them
• Deleted data is removed from your device and iCloud (sync may take time)

To delete all your data:

1. Delete individual packages via swipe actions
2. Or delete the app (removes all local data)
3. iCloud data can be managed in iOS Settings

Your Rights

You have the right to:

• Access — View all data stored in the app at any time
• Delete — Remove any or all packages and their history
• Portability — Your data syncs via iCloud and can be accessed on any of your devices
• Opt-out of iCloud — Use the app with local-only storage

Children's Privacy

Shiplet does not knowingly collect information from children under 13. The app is designed for general audiences tracking their own package deliveries.

Changes to This Policy

We may update this privacy policy occasionally. Changes will be reflected in the "Last Updated" date above. Continued use of the app after changes constitutes acceptance.

Contact

If you have questions about this privacy policy or your data:

California Residents (CCPA)

Shiplet does not sell personal information. California residents have the right to know what data is collected (detailed above) and request deletion at any time through the app.

European Users (GDPR)

For users in the European Economic Area:

• Legal basis: Legitimate interest in providing the service you requested
• Data controller: Tim Heuer
• No cross-border transfers: Data stays on your device and Apple's iCloud infrastructure