Privacy Policy

Undownable is an uptime and status-page monitoring service operated by Undownable ("we", "us"). This policy describes what data we collect when you use undownable.com or the Undownable iOS app, why we collect it, and what we do with it. The short version: we collect what the service needs to work, we don't run ads or third-party analytics, and we don't sell or share your data with anyone except the processors listed below.

Data we collect

• Account data: your name, email address, and a hashed password (we never store plaintext passwords), plus the teams you create or belong to.
• Device tokens: when you enable push notifications, we store an Apple Push Notification service (APNs) device token linked to your account, along with device registration and activity information. If your device supports Live Activities, we also store the ActivityKit push-to-start token and a push token per Live Activity on your lock screen, so the server can start, update, and end the incident card on your lock screen. All of these are operational data used to route alerts to your devices, and they are deleted when you sign out of the app or revoke the device.
• Push delivery and pager health: we store push receipt timestamps for each device, including when a push was sent and when the app's notification extension confirmed it. We also store notification permission state, the Time Sensitive setting, app version, and check-in times to identify devices that may no longer receive pages and notify you by email.
• Daily summary preference: we store whether you enable the daily all quiet push, your chosen local delivery time, and the date last sent so it arrives at most once per local day.
• On-device widget data: the iOS app keeps a small snapshot (incident counts and the name and cause of the oldest open incident) in app-group storage on your device so the home-screen and lock-screen widgets can render without a network call. It stays on the device, is protected until first unlock, and is cleared when you sign out.
• Monitoring configuration: the URLs, hostnames, and settings of the monitors you create. Sensitive monitor settings such as request headers and notification-channel credentials are encrypted at rest.
• Event content: when your own systems send alert events to an event source (directly or through Alertmanager), we store what they send: the alert title, summary, runbook URL and labels, keyed to the incident it opened. This content is yours; we forward it to the channels you configure and never read it for any other purpose.
• Check results: the outcomes of monitoring checks we run against your configured targets (status, response time, errors), retained according to your plan's history limits and then deleted.
• Billing data: handled by Stripe. We store your Stripe customer reference and subscription state; your card details never touch our servers.
• Operational logs: standard server logs (IP address, user agent, request path) kept briefly for security and debugging.

What we don't collect

• No advertising or third-party analytics trackers. The only cookies we set are the session and security cookies the application needs to function.
• No marketing emails. Email from us is transactional (alerts you configured, billing, account notices).
• We never sell, rent, or trade your data.

How we use your data

Solely to provide the service: running your checks, opening and resolving incidents, delivering the notifications you configure, rendering your status pages, and billing your subscription. Aggregated, non-identifying statistics (for example, total checks run) may be used to operate and improve the service.

Public status pages

Status pages you mark as public are visible to anyone with the link and show the monitor names, uptime history, and incident timeline you chose to include. Making a status page public is always your explicit choice, and you can make it private or delete it at any time.

Processors we rely on

• Stripe: payment processing (stripe.com/privacy).
• DigitalOcean: cloud hosting; your data is stored on servers in the United States.
• Apple: APNs delivers iOS push notifications and Live Activities. We send Apple your device and activity tokens together with alert content, such as monitor names, incident causes, the name of whoever acknowledged an incident, and your current unacknowledged incident count for the app badge, for delivery (Apple Privacy Policy).
• Notification services you configure: when you connect a channel (email, ntfy, Telegram, Slack, Discord, or a webhook), we send alert content to that service on your behalf. Their handling of it is governed by their own policies.

Data retention and deletion

Check history is pruned automatically to your plan's retention window. Deleted monitors and their history are purged shortly after deletion. You can permanently delete your account from your profile. If you own a team with other members, first transfer ownership in Settings > Members. We then remove your account, API tokens, device registrations, and memberships. For teams you still own with no other members, we delete monitoring configuration, check history, status pages, and notification settings, and cancel subscriptions immediately. Teams owned by someone else, including teams you transferred, keep their data and subscriptions.

A limited billing record, including the Stripe customer reference and subscription history, is retained for tax and accounting purposes. Deleted teams are hidden from the app and cannot be restored. Revoking a device stops push delivery to that device; deleting your account removes its registered device tokens.

Your rights

You can access and update your account data in the app at any time. You can ask us for a copy of your data, or ask us to correct or delete it, by emailing the address below. We answer promptly; there's a human on the other end, not a ticket queue.

Security

All traffic is encrypted in transit (TLS). Sensitive configuration is encrypted at rest. Access to production systems is restricted and key-based. No system is perfectly secure, but if we ever learn of a breach affecting your data we will notify you without undue delay.

Changes

If this policy changes materially we'll note the new effective date here and, for significant changes, email account holders before they take effect.

Contact

Questions or requests: support@undownable.com