Dusklist — Privacy Policy
Version 1, in effect from 3 October 2026.
Dusklist is made by Siva Koza d.o.o. ("we"). This policy says exactly what the app, its website and its server hold, and what they cannot hold. It describes them as built.
The short version
Where you are standing never leaves your phone. The sky is computed on the device from the time and your coordinates, so the app works with no signal and no account. The app has no sign-in, no analytics, no advertising and no tracking. What reaches us at all is a vote, if you cast one, and a message, if you write one.
Your location
- Dusklist asks for your location because the sky is different from every point on Earth.
- It is used on the device to compute what is above your horizon, when it gets dark, and which way to point.
- It is never transmitted to our servers, and it is not included in any search the app starts for you.
- The most recent position is stored on your device so the app opens to a sky rather than to a permission prompt.
You can refuse the permission or withdraw it in system settings. Dusklist will then have nothing to compute and will say so.
Other sensors
The compass and motion sensors are read only while the pointing screen is open, only to show which way to turn, and the readings are not stored or transmitted.
The dusk reminder
If you turn it on, the evening notification is scheduled on your phone by iOS. There is no push service: nothing about it is sent to us or to anyone else.
Searches
"What will it actually look like?" and "How do I spot it?" hand a search to your own browser and the search engine you chose — the name of the object and your telescope's aperture, nothing else. It goes from your browser to that search engine, not through us, and that engine's own privacy policy applies.
If you vote on the roadmap
The app lets you vote for what to build next. A vote sends:
- a random install id — 32 characters made on your phone the first time you vote. It is not tied to you or to your device's own identifiers, and it is sent with nothing else,
- which feature you asked for, and when.
To stop one machine casting thousands of votes, we also count votes per hour against a digest of the network address they came from. The address itself is not stored, and the digest is keyed with a server secret, so the table cannot be turned back into addresses.
If you write to us
The support page has a contact form. What you put in it — your email address, your name if you give one, the topic and your message — is emailed to us so we can answer, and kept only as long as the conversation needs. To stop the form being flooded, we count messages per hour against the same kind of keyed digest of your network address; the address itself is not stored. Cloudflare Turnstile checks that the form is being filled in by a person; it sees your browser, not the message.
App updates
When the app starts, it asks Expo, our update service, whether a newer version of its code is available. That request carries the app's version, your platform and a random identifier that the update system creates for this installation. It carries no location and nothing about you, and it is used only to deliver updates.
The website
The public pages — this policy, the terms, the front page and support — set no cookies and run no analytics.
Like any website, our server sees the network address of each request. Cloudflare, which runs it, keeps request logs for a few days so faults can be traced, and then deletes them.
What we never do
- We do not use analytics, advertising, or tracking of any kind.
- We do not sell or share personal data.
- We do not track your movements, build a location history, or profile you.
Who processes data on our behalf
- Cloudflare, Inc. — runs the website and server, sends support messages, runs the Turnstile check on the contact form, and keeps short-lived request logs.
- Expo (650 Industries, Inc.) — delivers app updates.
- Apple Inc. — distributes the app and delivers notifications on the device.
Keeping and deleting
Votes are kept while the roadmap is open. Support messages are kept as long as the conversation needs. The database is backed up nightly, and each backup is deleted after thirty days. To have anything deleted, write to contact@sivakoza.ai.
Deleting the app removes what it keeps in its own storage. Your saved position, your settings and the install id are kept in the iOS Keychain, which iOS does not always clear when an app is deleted; reinstalling may find them again. They never leave the phone except the install id, and only with a vote.
Your rights
If you are in the EU or UK, you may request access, correction, deletion, restriction, or a portable copy of the data listed above, and you may complain to your national data protection authority. We rely on our legitimate interest in keeping the roadmap and the contact form free of abuse, and on your request when you write to us.
Our servers are operated by Cloudflare and data may be processed outside your country under standard contractual clauses.
Children
Dusklist is not directed at children under 16, and we do not knowingly collect their data.
Changes
If this policy changes, the new version is published here with a new date above.
Contact
Siva Koza d.o.o. — contact@sivakoza.ai, or the support form at dusklist.apps.sivakoza.ai/support.