Privacy policy

Hundo Hunter is built around a hard rule: your data stays on your device. No login, no analytics, no third-party tracking, no servers holding your collection. This page documents exactly what happens with the data the app and website touch.

01 · The short version

The iOS app stores your collection locally in a SQLite database inside the app sandbox. Nothing is uploaded.
No accounts, no sign-in, no email collected. The app does not contain analytics, advertising, or behavior tracking SDKs.
Pro-tier purchase status is verified directly with Apple’s StoreKit. We never see your Apple ID or payment info.
Web tools (this site) run entirely in your browser. Inputs are not sent to a server — calculations happen client-side.

02 · Data handled by the iOS app

Local collection database

Each entry you add (manually, via scan, or via Live broadcast) is written to an on-device SQLite file. The file lives in the app’s sandboxed container and is included in your iCloud device backup if you have iCloud Backup enabled — Apple manages that backup; it is not transmitted to any server we control.

Live broadcast (screen capture)

When you arm Live broadcast, iOS captures the screen of the foreground game and feeds frames to a sandboxed broadcast extension. The extension runs OCR on-device, extracts candidate species + stats, and writes results to the app’s shared container. Frames are never uploaded; they are discarded after processing.

Live Activity push notifications

When a Live broadcast is armed, the app registers an Apple Push Notification token so Apple can deliver Live Activity updates (the Dynamic Island counter) to your device. Each update we send to Apple includes only the captured species name and basic stats — no personal identifiers. The push token is opaque and rotated by Apple. We use a small relay endpoint (hundo-hunter-push.vercel.app) to sign and forward these updates; the relay does not store them.

In-app purchases (Pro)

Pro is a one-time non-consumable IAP processed by Apple. We receive only a boolean entitlement (“active” or not) via StoreKit 2 — never your Apple ID, name, email, payment method, or transaction details. Apple’s privacy policy applies to the purchase itself.

Crash reports

The app does not include third-party crash reporting (no Sentry, Crashlytics, etc.). If you have iOS-level analytics sharing enabled (Settings → Privacy & Security → Analytics & Improvements → Share With App Developers), Apple may forward anonymized crash logs to us. You can disable that any time.

03 · Data handled by the website

What runs on our servers

Two read-only proxy endpoints fetch public game data:

/api/egg-pools — proxies LeekDuck’s egg-pool data
/api/tier-lists — serves cached PvP tier lists

These endpoints receive no user-specific input and store no request data beyond standard Vercel infrastructure logs (IP + timestamp, retained ~30 days, used only for abuse investigation).

Tool calculations are client-side

The IV calculator, trade evaluator, raid counters, type matrix, tier list, and power-up planner all execute in your browser. Inputs (the species you pick, CP, HP, stardust) never leave your device.

Cookies & tracking

The site sets no cookies. There is no Google Analytics, no Meta Pixel, no advertising SDK. The only network requests are to Vercel (static asset CDN) and the two proxy endpoints above.

04 · Your rights

Under GDPR / EU law

Because the app stores all collection data locally, you exercise your data rights directly: access (open the app), correction (edit entries), erasure (delete entries or uninstall the app). We do not hold a copy that would require us to act on a request.

Children

Hundo Hunter is not directed at children under 13. The App Store age rating is 4+, but the app does not collect any identifiable data from anyone, regardless of age.

Changes to this policy

If the data-handling story ever changes — e.g., we add optional cloud sync — this page will be updated and the change announced inside the app. Your existing data will never be moved off-device without an explicit opt-in.

05 · Contact

Questions, takedown requests, or anything else privacy-related:adrianh.pettersen@gmail.com.

Adrian Halvorsen Pettersen · Norway · Independent developer