Privacy policy

Controller and contact

Havilah Works Oy, Finland (Business ID 3592163-5), is responsible for the personal data it processes for Hunter Watch. Contact hello@havilahworks.com about privacy or your rights. This policy covers the iPhone and Apple Watch app and the Hunter Watch website.

Hunt records, photos and device permissions

The app stores hunt routes, timestamps, markers, titles, imported photos and available activity readings on your devices. The watch transfers recorded hunts to the paired iPhone using Apple’s WatchConnectivity. The current app has no Hunter Watch login or hosted hunt archive. Device backups may include app data, depending on your Apple settings. Location access is needed to record routes. The system photo picker lets you select photos to import. You can change permissions in device settings; withdrawing a permission can prevent the related feature from working.

Apple Health and sensitive data

With your permission, the app reads supported heart-rate, step and active-energy data and saves hunts as hiking workouts in Apple Health. This information is used for your hunt record and activity display. The app does not send health readings to RevenueCat or Amplitude, sell them, or use them for advertising. Health access is optional and can be withdrawn in Apple Health or privacy settings. Previously saved records are not automatically erased when permission is withdrawn. Delete Apple Health workouts separately in Apple Health.

Apple and mapping services

Apple provides HealthKit, device transfer, the App Store, maps in certain views and place-name lookup. To suggest a hunt title, the app sends its start coordinate to Apple’s geocoding service. Interactive maps use Mapbox: map requests disclose technical data such as your IP address and the requested map area. Mapbox’s SDK may also collect usage and location telemetry; use the map’s information/attribution control to access the telemetry choice. See Apple’s privacy policy and Mapbox’s privacy policy.

Subscriptions and RevenueCat

Apple processes App Store payments. RevenueCat checks purchases and subscription access using an app user identifier, transaction and subscription information, and technical app/device information. There is no Hunter Watch login; an automatically assigned identifier is still pseudonymous personal data, not a promise of anonymity. We do not receive your full payment-card details from these purchases. See RevenueCat’s privacy policy.

Product analytics

We use Amplitude to understand how people use Hunter Watch and improve the app. Amplitude processes usage events on our behalf, including screen visits, onboarding steps, feature selections, hunt-recording actions and their timestamps. Events include language, platform, technical app/device information and pseudonymous app and device identifiers. The app uses the RevenueCat app user identifier for analytics and shares analytics identifiers with RevenueCat to support subscription-event matching. These identifiers are not directly identifying names, but they are still personal data. Event fields exclude coordinates, route geometry, hunt titles, photos, free-form text and health readings. Selecting a health metric can record the metric name, not its measured value. Advertising identifiers and IP-based location tracking are disabled in our analytics configuration. We use Amplitude’s EU server region; the international-processing section below also applies. For information about Amplitude’s role as a processor, see its Data Processing Addendum. Contact us about access, deletion or objections to analytics processing.

Website and support

The website is hosted on Vercel, which processes technical request information, including IP addresses, requested URLs and browser information, to deliver and protect the site. See Vercel’s privacy notice. We use DataFast for website analytics to understand page visits, App Store button clicks (including page language and button placement), referral sources and visitor journeys and improve the website. Its tracking script uses cookies to recognise visitors and processes page URLs, referrers, timestamps, browser/device information and IP addresses. Cookie identifiers and IP addresses can be personal data. This website integration does not access your Hunter Watch app records, photos or Apple Health readings. See DataFast’s privacy policy. The site does not use advertising cookies, embedded third-party media or externally hosted fonts. Following an external link takes you to that provider’s service. If you email us, we receive your email address and the information you choose to include; avoid sending health records unless necessary to resolve your request.

Why we process data

We process information necessary to provide requested app features, subscription access and related support to perform our contract with you (GDPR Article 6(1)(b)). Optional health-data access relies on your consent, including explicit consent where Article 9 requires it. We rely on our legitimate interests in operating and securing the website and handling general enquiries (Article 6(1)(f)), and legal obligations for records we must retain (Article 6(1)(c)). Where legally permitted, app and website usage analytics relies on our legitimate interest in understanding use and improving our services (Article 6(1)(f)); you may object by contacting us. Where prior consent is required for analytics or access to information on your device, that processing requires your consent (Article 6(1)(a)), which you may withdraw. We do not make decisions with legal or similarly significant effects based solely on automated processing.

Retention and deletion

Local hunt records and imported photos remain until you delete them or remove the app’s stored data. Copies in device backups, exported images and Apple Health have separate lifecycles. Subscription records are retained as needed to verify access, resolve purchase issues and meet applicable legal requirements. Support messages are kept as long as needed to handle the enquiry and any related dispute. Analytics events are retained only as long as needed to evaluate feature use and improvements, subject to the configured Amplitude and DataFast retention settings and applicable deletion requests. Hosting and provider logs follow the applicable service retention settings. Contact us to request deletion of data we control; deleting the app alone does not delete provider records or cancel a subscription.

Recipients and international processing

The providers described above receive information needed for their functions. We may also disclose information when required by law or necessary to establish or defend legal claims. Provider processing can take place outside the EEA, including in the United States. Where required, transfers must rely on a valid adequacy decision or appropriate safeguards such as the European Commission’s standard contractual clauses. Contact us for information about the safeguards applicable to your data. Provider privacy notices describe their own processing and transfer arrangements.

Your rights

Depending on the applicable conditions, you can request access, correction, deletion, restriction or portability, and object to processing based on legitimate interests. You can withdraw consent at any time without affecting the lawfulness of earlier processing. We may need enough information to locate a pseudonymous record and verify your request. You may complain to the Finnish Data Protection Ombudsman or your local supervisory authority. Contact us first if you would like help.

Policy changes

We will keep this notice aligned with the app and website. The date below identifies this version. Material changes will be communicated where required.

Last updated 11 September 2026