Nothing leaves your device.

Who we are

Unichrono is a world clock and widget app, published by Spiny Valley Labs: on Android (package name com.spinyvalley.unichrono) and on iPhone, iPad and Mac (bundle IDs com.spinyvalley.unichrono and com.spinyvalley.unichrono.widgets for the widget extension, the same on all three). This policy covers every platform, and applies equally to each unless a section says otherwise.

Data we collect

None. Unichrono does not collect, store, transmit, sell, or share any personal data or usage data. Specifically, the app has:

• No analytics, crash reporting, or advertising SDKs, on either platform.
• No accounts, sign-in, or user profiles.
• No access to your location, contacts, files, camera, or microphone. The one file the app ever touches is one you pick yourself, to export or import your clock list.
• On Android: no internet access. The app does not request the network permission, so it is technically incapable of sending data anywhere.
• On iPhone, iPad and Mac: the app makes no network calls of its own. The only network activity on the device is Unichrono Pro, an optional one-time in-app purchase processed entirely by Apple's App Store — Apple handles your payment details directly and we never see or receive them. The app only stores, on your device, whether Pro is unlocked.

There is one way to send us something, and you have to choose it: the Send feedback button in Settings, which opens a form in your browser. Nothing is collected in the background, and nothing is sent unless you fill that form in and submit it. What it includes is set out below.

Data stored on your device

Your chosen cities, clock labels, widget layouts, and app settings are stored locally on your device only. They never leave it, and they are deleted when you uninstall the app. Timezone calculations use the timezone database that ships with the operating system; no lookup ever happens over a network. On iPhone, this data is kept in a shared container so your Home Screen and Lock Screen widgets can read it — that container stays on your device and is never transmitted anywhere.

On Apple Watch: Unichrono on Apple Watch shows the cities from your iPhone, and lets you add, remove and reorder them. Your iPhone and watch exchange the city list and its display settings directly, over Apple's own connection between a paired iPhone and Apple Watch. Nothing is sent to us or to any server. The watch keeps its copy on the watch, where its watch face complications read it, and it requests no permissions.

On Wear OS: Unichrono on a Wear OS watch shows the cities from your Android phone. The phone sends the city list and its display settings to the watch through Google Play services' phone-to-watch connection (the Wearable Data Layer), the same mechanism every Wear OS app uses to talk to its phone. Neither the phone app nor the watch app has internet permission, nothing is sent to us or to any server of ours, and the watch keeps its copy on the watch for its tile and complication. The watch app requests no permissions.

If you send feedback

On Android, iPhone and iPad, Settings has a Send feedback button (the Mac app has none), for feature requests, bug reports and general comments. It is the one place in Unichrono where information can leave your device, and only if you choose to use it.

Tapping it opens a Google Form in your browser. The app itself does not send anything, and does not talk to Google: it hands the link to your browser and stops there. On Android this is why the app still has no internet permission: the browser makes the request, not Unichrono.

The form arrives with four pieces of context already filled in, so a bug report says which build it came from:

• The app version.
• Your device model (for example Pixel 8 or iPhone12,3). This is the model of phone, not an identifier for your phone.
• Your operating system version.
• Whether you are on Android or iPhone.

They are ordinary visible boxes on the form, not hidden fields, so you can read them and clear any of them before submitting. None of them are required. Nothing is sent until you press submit, and closing the browser sends nothing at all.

What you submit goes to Google, who run the form, and lands in a spreadsheet only we can read. Google's handling of it is covered by the Google Privacy Policy. Giving your email address is optional and exists only so we can reply; we use it for nothing else, and we do not add it to any mailing list. Your cities, labels, widgets and settings are never part of a submission.

Permissions the app uses

Android

• Notifications (POST_NOTIFICATIONS): requested when you turn on the optional quick-access clock notification or create a city alert. Used only to show those on your phone. Clock change reminders use the same permission if you have already granted it, and never ask for it themselves. Any of them can be turned off in the app or in system settings.
• Run at startup (RECEIVE_BOOT_COMPLETED): used only to restore the quick-access notification after a reboot, if you have enabled it.

iPhone

Home Screen and Lock Screen widgets are provided through Apple's WidgetKit, which needs no access grant from you. Three optional features do ask, and each is requested only at the moment you first use that feature — never at launch. Declining any of them leaves the rest of the app working normally.

• Notifications: requested when you create your first spoken city alert, or turn on the time announcer. Used only to deliver those alerts on your device at the times you set. Nothing is sent anywhere.
• Calendar (write only): requested when you first use “Add to Calendar” on the plan board. This is Apple's write-only access: the app can add the event you asked for and cannot read any event in your calendar. Full calendar access is never requested.
• Alarms: requested when you first use “Set alarm” on the plan board, on iPhones running iOS 26.1 or later. The alarm is scheduled with Apple's AlarmKit and rings on your device only.

Mac

Mac widgets come from the same WidgetKit, with no access grant. Nothing is requested at launch.

• Notifications: requested the first time you save a city alert or a reminder. Used only to show those alerts on your Mac.
• Calendar: requested only if you turn on Show my next meeting in Settings. Unichrono then reads your calendar on the Mac to find your next meeting and show it, with its video link, in the menu-bar panel. Nothing from your calendar leaves the Mac or is stored by Unichrono, and turning the setting off stops the reading. Without that setting the calendar is never requested: Add to Calendar opens the meeting in Apple's Calendar app as a standard event file, and Calendar asks you to confirm it.
• Launch at login: registered with macOS so the menu bar clock starts when you log in. You can turn it off in the app's Settings, or in System Settings → General → Login Items.

The rating prompt

After you have used Unichrono for a while, it may ask once whether you would like to rate it, and offers "Already rated" so it can stop asking. That choice is a setting stored on your device, exactly like your cities are. Neither Google Play nor the App Store tells an app whether you have actually rated it, which is the whole reason the app has to ask you rather than check, and it is also why nothing about your rating or your review is visible to us here. The Mac app never asks.

Children

Unichrono does not collect data from anyone, including children.

Changes to this policy

If a future version of the app ever changes how data is handled, this policy will be updated before that version is released, and the effective date above will change.

Contact

Questions about this policy: hello@unichrono.app