Privacy Policy

Substorm · Exploring Exposure

The short version

Substorm exists to answer one question: is tonight worth going out with a camera? To answer it we need your location and, if you sign in, your email address. We collect nothing else, we run no ads, no analytics, and no trackers, and we never sell or share your data.

What we collect

• Email address — used only to sign you in (one-tap links) and, if enabled, account notices. Sign in with Apple gives us only what you approve there.
• Location — your home base (which you set) and, if you allow it, your device's GPS position, so forecasts and alerts point at where you actually are. Location is used for computation and alert targeting; we keep only the most recent fix per device, not a movement history.
• Your saved spots, settings, and field reports — the content you create in the app, stored so the app works.
• Push subscriptions — the delivery token your device gives us so alerts can reach you.

What we don't do

• No advertising, no ad identifiers, no third-party analytics.
• No selling, renting, or sharing of personal data.
• No location history — alerts follow your last fix only.

Third-party services

Forecast data comes from public scientific sources (NOAA SWPC, NASA, USGS, GFZ and others — see the app's Data & Credits page). Your coordinates are sent to weather and geocoding providers (e.g. Open-Meteo) to fetch forecasts for your area, and to our email provider (Resend) to deliver sign-in links. Payments are processed by the App Store, Google Play, or Stripe via RevenueCat — we never see your card details.

Deleting your account

You can delete your account from Settings → Account at any time. Deletion is immediate and removes your saved spots, field reports, settings, and alert devices. We keep only a one-way hash of the deleted address to prevent abuse.

Contact

Questions: david@exploringexposure.com

Last updated: July 2026 (draft)