Heirline Privacy Policy

Effective date: 2026-05-08 · Last updated: 2026-05-08

Short version: Heirline stores your watch archive — collection details, service records, box-and-papers, valuations, estate letters, photos, attachments — on your devices. If you enable iCloud sync, the archive is also stored in your own private iCloud account using Apple's CloudKit private database. We have no servers and no analytics. We never see your archive. The only network communication the app performs is with Apple's StoreKit servers (subscription verification) and, if you enable iCloud sync, with Apple's CloudKit servers under your Apple ID.

1. Who we are

Heirline is published by an independent iOS developer (Apple Developer Team ID ZM8LF8494F). For any privacy-related question, write to captainlongevity@gmail.com.

2. Information we do not collect

We do not collect, transmit to our servers, store on a server we operate, sell, share, or analyze:

Your watches, brands, references, serials, photos, service records, box-and-papers entries, valuations, estate letters, journal entries, or notes
Your name, email, phone, or any account identifier
Device identifiers (IDFA, IDFV) for advertising or tracking purposes
Location data
Crash reports or analytics events sent to any third party

We have no servers. The fields above never reach us.

3. Information stored on your device

All archive data you enter is stored locally on your iOS device using Apple's SwiftData framework. This data is included in your iCloud or iTunes device backup if you have device backup enabled.

4. On-device processing

Several features process data locally on your device only:

Document scanning uses Apple's VisionKit on-device.
PDF report generation uses Apple's PDFKit on-device. No archive content is transmitted during generation.
App Lock uses Apple's LocalAuthentication framework. Your Face ID or Touch ID biometric data never leaves Apple's Secure Enclave; the app only receives a success or failure signal.
Service interval reminders are scheduled via Apple's UserNotifications framework and fire locally on your device. No remote push servers are involved.

5. Subscriptions and StoreKit

Heirline offers an optional Pro subscription via Apple's StoreKit 2. When you subscribe, restore a purchase, or when the app verifies your entitlement, your device communicates directly with Apple's servers. Heirline receives only the entitlement status (active or inactive) and a purchase identifier. We do not see your Apple ID, payment method, billing address, or transaction history. Apple's handling of subscription information is governed by Apple's Privacy Policy.

5a. iCloud sync (optional, opt-in during onboarding)

Heirline supports optional iCloud sync using Apple's CloudKit private database. When enabled:

Your archive (watches, service records, box-and-papers, valuations, estate letters, journal entries, photos, attachments) is stored in your own private CloudKit database, scoped to your Apple ID.
This database is end-to-end protected under Apple's standard CloudKit terms. We have no access to it. We cannot read, list, modify, or delete your records.
Syncing occurs between your devices (iPhone, iPad, Mac) signed into the same Apple ID. No third party is involved.
You can disable sync at any time in Settings > Sync. Disabling stops further syncing; existing CloudKit copies remain in your iCloud until you remove them via iOS Settings > Apple ID > iCloud > Manage Storage.

Sync is opt-in during onboarding. Pro users are recommended ON by default (long-term records benefit from multi-device backup) but the choice is presented before any data is uploaded.

6. Permissions the app requests

Camera — only when you tap "Take photo" or "Scan Document".
Photo Library — only when you tap "Import photo" or "Import document".
Face ID — only after you enable App Lock in Settings (Pro).
Notifications — only after you enable Service Interval Reminders (Pro).

You can revoke any of these permissions at any time in iOS Settings > Heirline.

7. No automatic valuations or market data

Heirline never auto-values your watches, never connects to any market price database, and never transmits your records to any dealer, auction house, appraiser, insurance carrier, or watch brand. All values you see in the app are values you entered, with the source you attributed.

8. Children's privacy

Heirline is not directed to children under 13. We do not knowingly collect any information from anyone, including children. The app's age rating reflects this.

9. Data retention and deletion

You control retention completely. To delete archive data on a device, delete the app from that device or use Settings > Recently Deleted > Permanently Delete. To delete iCloud copies, disable sync and remove Heirline data via iOS Settings > Apple ID > iCloud > Manage Storage. There is no remote copy on our servers for us to delete because we do not have servers.

10. International users

The app is published in English and is primarily marketed in North America. Because we operate no servers, we do not transfer your data internationally. iCloud sync routing is governed by Apple under your Apple ID.

11. Changes to this policy

If we ever change how the app handles data, we will update this policy and surface the change in the app before you can use the affected feature. The "Last updated" date at the top of this page reflects the most recent revision.

12. Contact

Privacy questions: captainlongevity@gmail.com