Back On Air

Privacy Policy

Last updated: July 16, 2026

Back On Air is built to answer one question — is your show coming back? — with as little of your data as possible. There are no accounts: we never ask for your name, email, or phone number to use the app. This policy describes exactly what the iOS app and the backonair.app website collect, why, where it is stored, how long it is kept, and how you can delete it.

The data controller is Simple Bytes Apps Limited. You can reach us at julo@hey.com.

The iOS app

The app uses an anonymous device identity — a random identifier created on your device. It is never linked to your name, email, phone number, or any real-world identity.

Nothing is sent to our server until the first sync, which happens only after you have passed onboarding, where this data handling is disclosed. At that point the app creates a server “installation” for your device.

Installation record

When your device first syncs, we store:

  • a random installation ID (UUID);
  • a secret token that authenticates your device, which we keep only as a SHA-256 hash — never in readable form;
  • the platform (“ios”) and the app version;
  • your device timezone;
  • the time the installation was created and the time it was last seen.

Your tracked-show library

So your list survives reinstalls and can power notifications, we store — against your anonymous installation ID — each show you track and, for each one:

  • the show ID;
  • its list state (watching, finished, upcoming, or stopped);
  • whether you have hidden it;
  • your per-show reminder and notification preferences;
  • the times the entry was added and last updated.

Push notification token (optional)

If — and only if — you turn on notifications, we store an Apple Push Notification service (APNs) device token and its environment so we can alert you about renewals, cancellations, return dates, and airtimes. If you never enable notifications, no token is stored.

Notification jobs and receipts (operational)

To send notifications reliably and avoid sending duplicates, we keep the notification jobs queued for your device and the delivery receipts they produce.

All of the above is stored on Cloudflare's infrastructure (Cloudflare Workers, with the database on Cloudflare D1).

What stays on your device

Your personal 5-star ratings and your favorites never leave your device — they are not sent to or stored on our server.

What the app does not do

  • No accounts, names, emails, phone numbers, or passwords.
  • No analytics or tracking SDKs in the iOS app.
  • No advertising identifier (IDFA).
  • No location data.
  • No access to your contacts.
  • No advertising, and no selling or sharing of your data.
  • No tracking of you across other apps or websites.

How long we keep it

A scheduled job cleans up data automatically:

  • Dormant installations — if a device has not contacted our server for 365 days, its installation and everything attached to it is deleted.
  • Notification jobs — delivered or failed jobs are deleted after 30 days.
  • Show-change history and delivery receipts — deleted after 180 days.

Deleting your data

In the app

Go to Overview → the ⓘ button (About & Privacy) → “Delete all synced data”. This immediately deletes your server installation and everything attached to it, along with the app's local data.

By email

You can also email julo@hey.com to request deletion. Because your data is anonymous, the only way we can find it is by the Device identity UUID shown on the same About & Privacy screen. Please quote that UUID in your request — without it we have no way to identify your data.

Service providers

We rely on a small number of providers to run the service. Each processes data under its own terms and provides an equivalent level of protection:

  • Cloudflare, Inc. — hosting, compute, and database (Workers + D1).
  • Apple Push Notification service — push delivery. It receives your device push token when notifications are enabled.
  • TheTVDB and TVMaze — sources of show metadata and artwork. Your searches are proxied through our server to these services, but they never receive your identity.

The backonair.app website

The website is separate from the iOS app and uses a few tools of its own:

  • Plausible — cookieless, EU-hosted analytics to understand overall site usage.
  • PostHog — product analytics for the website.
  • Waitlist form — if you join the waitlist, your email address is stored in Cloudflare KV solely so we can tell you when the app launches. You can ask us to delete it at any time.

Children

Back On Air is not directed at children, and we do not knowingly collect personal information from children. Because the app has no accounts and asks for no personal details, we do not collect data that identifies anyone, including children.

Changes to this policy

If this policy changes, we will update this page and the “Last updated” date at the top.

Contact

Questions or requests? Email julo@hey.com. The data controller is Simple Bytes Apps Limited.