Privacy policy

Last updated 17 September 2026. Applies to RoamGuard for iPhone and its Apple Watch app and widgets.

Summary

RoamGuard collects no personal data. There is no account, no server, no analytics and no third-party SDK. The app contains no networking code of its own, so there is nothing for it to send and nowhere for it to send it.

Its App Store privacy declaration is “Data Not Collected”, and its privacy manifest declares an empty set of collected data types and no tracking domains.

What is stored, and where

All of the following stays on your device, in the app's own container and in the app group it shares with the RoamGuard widget and Apple Watch app:

Plan settings

Billing day, home and roaming allowances, alert thresholds, daily budget, units, sounds, theme.

Daily totals

Mobile and Wi-Fi bytes measured on this device, per day, per pool.

Last counter reading

The baseline the next reading is compared against.

Calibration entries

Any figure you enter when matching your carrier's number, with the figure the app had measured at the time.

Alert ledger

Which alerts have already been delivered this cycle, so they are not repeated.

Roaming state

Your Home/Roaming setting, your home region code, and any per-line pool assignments.

None of it is transmitted anywhere by the app.

What the app does not do

It does not collect, transmit or sell any data.
It makes no network requests of its own — not for updates, not for crash reporting, not for diagnostics.
It uses no analytics, telemetry, advertising or attribution SDK.
It does not track you across apps or websites.
It does not request or use your location.
It does not read the contents of your network traffic. It reads the operating system's byte counters — how much an interface carried, never what it carried.
It is not a VPN and installs no network profile.
It does not require or offer an account.

System APIs, and the reason each is used

Apple requires an app to declare certain APIs and give an approved reason. RoamGuard's privacy manifest declares three.

API	Reason code	Why
System boot time	`35F9.1`	The kernel's byte counters reset when the device restarts. Detecting a reboot stops the app misreading that reset as 4 GiB of traffic that never happened.
User defaults	`CA92.1`	Stores your settings and shares them with the widget and Watch app through the app group.
Disk space	`E174.1`	Checked when you export a CSV or PDF, so the export fails cleanly instead of producing a truncated file.

Reading interface byte counters via getifaddrs requires no entitlement, no permission prompt and no declaration.

Permissions

RoamGuard asks for exactly one: notifications, so it can warn you before you go over. Decline it and everything else — measurement, forecasts, history, export, widgets, the Watch app, Siri — keeps working; you simply receive no alerts.

Location is never requested. Contacts, photos, microphone, camera, health and Bluetooth are never requested.

iCloud

iCloud sync is off by default and opt-in. When you switch it on, your usage history syncs through your own private iCloud database, under your Apple Account. The developer has no access to it.

Each record carries a device identifier and queries filter on it, so an iPhone and an iPad signed in to one account are never added together. If the device is signed out of iCloud, the app falls back to local storage and says on screen that it is not syncing rather than claiming otherwise.

If you keep sync off and take an encrypted device backup, that backup is governed by Apple's terms, not by RoamGuard.

Files you export

CSV and PDF exports are created at your request and handed to the iOS share sheet. Where they go from there is entirely your choice. RoamGuard does not upload them anywhere.

Children

RoamGuard collects no data from anyone, including children. It is rated 4+ and contains no advertising and no user-generated content.

Changes to this policy

If the policy ever changes, the updated version ships with the app and the date at the top of this page changes with it.

Contact

hugomoriceau@icloud.com