We don't want
your data.

• No account, sign-in, email address or name.
• No advertising identifier, and no advertising of any kind.
• No analytics, telemetry, behavioural tracking or crash-reporting SDK.
• No contacts, photos, microphone, camera, health or fitness data.
• No data is ever sold or shared with data brokers or advertisers.

It is genuinely optional

If you decline the location permission, the app still works. It falls back to a neutral default location, and the Earth, Moon, Sun and planet views need no location at all.

Nearly all of it is computed on the watch

The astronomy engine runs entirely on your device. Sun, Moon and planet positions, ISS pass predictions, eclipses, meteor showers, moonrise/moonset and golden hour are all calculated on the watch from published orbital and ephemeris data. None of those calculations send your location anywhere.

What actually leaves the watch

Two things need live data from the internet: local weather and tides. To fetch them, the app sends your coordinates, rounded to four decimal places, to the Planetaria data service, a small Cloudflare Worker at planetaria-api.jdcap.workers.dev. The service uses them only to answer that request:

If that service cannot be reached, the app falls back to fetching the same public data directly from the agencies that publish it, with no server of ours in between. In that case your rounded coordinates go straight to MET Norway for the weather forecast ; the same coordinates, to the same recipient, one less hop. Tides are still requested by public station identifier, so NOAA never receives your coordinates on either path.

• Weather: your rounded coordinates are passed to MET Norway (the Norwegian Meteorological Institute) to retrieve a local forecast.
• Tides: the service picks the nearest station from a fixed list of public NOAA tide stations and then asks NOAA for that station's predictions. NOAA never receives your coordinates, only a public station identifier.

Your coordinates are not written to any database, not kept in an activity log, not attached to any identifier, and never used to build a profile. Responses may be held in a short-lived edge cache so repeat lookups are fast.

Requests that carry no location at all

The Sun imagery, aurora forecast, cloud imagery, earthquake list and ISS orbit data are the same for everyone on Earth, so those requests contain no location whatsoever.

IP addresses

As with any request over the internet, the servers that answer (including Cloudflare, which hosts the data service) necessarily see your device's IP address in order to send a reply. Planetaria does not use it to identify, profile or track you, and does not retain it.

If you enable alerts, Planetaria can notify you about a genuinely visible ISS pass, a likely aurora, an upcoming eclipse or a meteor shower peak. These are computed on the device from the same on-watch engine. There is no push server, and enabling notifications sends nothing about you anywhere.

Your settings, and a cached copy of the most recent weather, tide, ISS, aurora and imagery data, are stored locally so the app keeps working offline. This data stays on the watch, and uninstalling Planetaria removes all of it.

• MET Norway: weather forecasts (CC BY 4.0)
• NOAA CO-OPS: tide predictions, by public station
• USGS: recent earthquakes
• CelesTrak: ISS orbital elements
• NASA (GIBS / VIIRS, Blue & Black Marble, SDO): imagery
• NOAA SWPC: aurora forecast

Planetaria is not directed at children, and it collects nothing that identifies anyone of any age.

If this policy changes, the updated version will be posted on this page with a new date above. Material changes will be reflected in the app's store listing.

Questions about privacy, or about anything on this page: jdcapone@gmail.com.