The short version: Ovenlight collects nothing. Snowy Ghost runs no servers that your apps or their data pass through, and the app has no analytics, ads, or tracking. The apps you open run on your own computers, or on the computers of friends who invited you.
Who we are
Ovenlight is an iPhone app made by Snowy Ghost LLC ("we," "our," or "us") for opening web apps that you, or friends who invited you, run on your own computers. This policy explains what happens to your information when you use it.
Data we collect
None. We never see the apps you open or what you do in them, and we build no profile of you. Apart from the ordinary web request when a page on ovenlight.app loads, such as an invite page (see Invite links), the only things that reach us are emails you choose to send, such as a problem report, and what Apple shares with us (see Apple).
On your iPhone
Ovenlight keeps its list of apps, your settings, and each app's own storage (such as cookies and saved data) on your iPhone, with each app's storage kept separate from the others. Face ID or your passcode unlocks Ovenlight; Apple handles that, and Ovenlight never receives your face data or passcode. The keys that connect your iPhone to other computers are left out of your iPhone's backups, so they can't be restored onto another device.
Camera, microphone, photos and local network
Ovenlight itself uses the camera only to scan invite QR codes, which it reads on your iPhone. Apps you open can also use the camera or microphone, for example to record a spoken answer. iOS asks you before Ovenlight can use either one. After that, an app still asks you before it uses the camera, and an app someone shared with you also asks before it uses the microphone; apps on your own computers can use the microphone without asking again. What an app records goes to the computer that runs it. While Ovenlight is locked, no app can use the camera or microphone, and locking cuts off any camera or microphone an app is already using.
iOS asks for your permission the first time you save an image from an app to your photo library. Ovenlight can add photos to your library but can't see it. Local network access lets Ovenlight find a faster, direct path to a computer on the same network as you.
The computers you connect to
When you open an app, your iPhone connects to the computer that runs it over an encrypted connection: directly when possible, otherwise through Tailscale's relays, which pass the traffic along but can't read it. That computer belongs to you or to the person who invited you, and it can see what you do in their app, as with any website. An app you add by any address other than a name on your own Tailscale network loads directly, like any website, outside this private connection. Feedback you send from inside an app goes to its owner's computer, where the owner and tools they run there can read it. It includes the page's address, any note you add, and a screenshot unless you leave it out.
What the person who invited you sees
An invite carries the name its sender gave you. Your iPhone joins their network under a random device name, so they can't tell which of your devices it is. They see that you joined, which of their apps you can open, and anything you send them as feedback. The page where they manage their network also shows basic details, such as your IP address and that you're on an iPhone. They can stop sharing at any time; the next time Ovenlight connects, it removes their apps and everything those apps stored on your iPhone.
Tailscale
Ovenlight uses Tailscale's networking software to make private, encrypted connections. If you sign in to your own computers, you sign in with your Tailscale account, on Tailscale's own sign-in page; signing out deletes that connection from your iPhone. If you join from an invite, your iPhone joins the inviting person's private network. Tailscale's service helps devices find each other and sees basic device information, such as a device name and IP address, but not the content of your apps. If an invite uses a server the inviting person chose instead of Tailscale's, Ovenlight tells you before you join, and that server plays Tailscale's part.
Tailscale's software normally sends diagnostic logs to Tailscale. Ovenlight turns that off, so the app sends no logs to Tailscale from your iPhone. The connector that an app's owner runs on their own computer keeps Tailscale's usual setting and sends its diagnostic logs to Tailscale, as Tailscale's own app does. See Tailscale's privacy policy.
Apple
If you install Ovenlight through TestFlight or the App Store, Apple may share crash reports and any feedback you choose to send, under Apple's own privacy policy.
Reporting and leaving
You can report a problem with any app from its menu. That opens an email to us, filled in with the app's name and address, who shared it, and your Ovenlight version. You can edit it first, and nothing is sent until you send it. You can leave apps someone shared with you at any time. Leaving removes their apps and data the same way; the person who shared still sees you listed until they remove you.
Invite links
Opening an invite link without Ovenlight installed loads a page on ovenlight.app, which, like any website, receives your IP address and browser details when it loads. The invite itself stays in your browser and is never sent to us.
Children
Ovenlight is not directed to children under 13, and it collects no data from anyone.
Changes to this policy
If this policy changes, the updated version will be posted here with the date above revised.
Contact
Questions? Email team@snowyghost.com and a human will reply.