Privacy Policy

1. Who we are

Baro is made by Ember Development Studios, LLC, DeLand, Florida, USA. We decide how your information is used and are responsible for it. Questions or requests about your data: support@emberdevstudios.com.

2. Information you give us

• Account. Your email address and the password you choose, or your sign-in through Apple or Google. With Sign in with Apple we receive an email address (which can be an Apple private relay address) and, if you choose to share it, your name. With Google we receive your name, email address, Google account identifier and, if your Google profile has one, a link to your profile photo, which Baro does not display. Baro does not access your Gmail, contacts, calendar, files or any other Google or Apple data.
• Profile and settings. An optional display name, your time zone, your pressure unit, the lock-screen privacy setting, your reminder time and alert preferences, which symptoms you track, and any custom symptom names you add.
• Your journal. Daily check-ins (the date, your mood, whether you had symptoms and an optional note) and symptom entries (which symptom, how severe on a 0–10 scale, when it started and ended, and which of your saved areas it is linked to).
• Saved areas. A label you choose, the city, region and country, and a latitude and longitude rounded to one decimal place (0.1°, about 11 km or 7 miles). Baro never stores your exact position.
• Messages to support. Whatever you include when you email us.

3. Information collected automatically

• Sign-in and security records. Our authentication service records sign-in events, including the time, IP address and basic app and device information, to keep accounts secure and stop abuse.
• Code emails. When you ask for a sign-in or password reset code, we keep a one-way hash of your email address and the time for 2 days, so we can limit how many codes are sent to one address.
• Subscription status. Whether you have Baro Premium, which plan, which store, whether you are in a trial, whether it will renew, and when the current period ends.

Baro does not use your device’s advertising identifier, does not track you across other companies’ apps or websites, and contains no third-party advertising or analytics code.

4. Location

• Baro asks for location permission only when you tap Use current location while adding an area, and reads your position once, in the foreground. Your phone rounds it to 0.1° before anything else happens, then asks the phone’s built-in geocoding service (Apple on iPhone, Google on Android) for the name of that area. Only the rounded coordinates are saved.
• If you search for a city or ZIP code instead, the text you type is sent to that same built-in geocoding service, and Baro saves the rounded result.
• Baro never tracks your location in the background and never collects precise geolocation (a position accurate to within 1,750 feet, as Washington and California law define it).
• Forecast screens in the current version use sample data. When live forecasts are switched on, Baro will request them for your rounded areas only, without your name, email or journal, and we will update this policy to name the weather provider before that happens.

5. How we use information

• To run Baro: your account, your journal, your saved areas, forecasts, reminders, export and deletion.
• To show the weather and your own entries side by side, and summaries of what you logged.
• To check whether you have Baro Premium and unlock its features.
• To send the emails the service needs: sign-in codes, password reset codes and the confirmation that your account was deleted. We do not send marketing email.
• To answer your support requests.
• To keep Baro secure, prevent abuse, fix problems and meet legal obligations.

We do not use your information for advertising, we do not build marketing profiles of you, and we do not use your journal to train artificial intelligence models.

6. Your journal

• Your journal belongs to your account. Other Baro users cannot see it.
• Pattern summaries are calculated from your own entries and describe what you logged. They are not a diagnosis or a prediction, and they are shown only to you.
• The daily check-in reminder is scheduled on your phone. With lock-screen privacy on (the default), notifications never name a symptom.
• Export My Data creates a file on your phone that is not encrypted. Share it only with people you trust, such as your clinician.

7. Service providers

These companies process information for us, only to provide their service to Baro. Each is bound by its own terms and privacy commitments.

Apple and Google also keep their own records of your store account and purchases under their own privacy policies.

8. Sharing and Ember access

• We do not sell or rent your information, share it for targeted advertising, or give it to data brokers.
• Ember access. Ember Development Studios can access stored data only to run and support Baro: for example, to act on a request you make, fix a problem with your account, keep the service secure, or meet a legal obligation. Access is limited to the people who need it for those purposes.
• Service providers listed above, only to provide their service to us.
• The law. When required by a valid legal process, or when needed to protect someone’s safety or our rights. Where the law allows, we will tell you first.
• Business transfer. If Baro is sold or merged, your information would move only under the protections in this policy, and we would tell you before it does.
• You. When you export your data and share the file yourself.

9. How long we keep it

• We keep your information while your account is open.
• When you delete your account, it is removed from Baro’s database immediately. Copies in our database provider’s encrypted backups are overwritten within 7 days.
• Accounts that start signing up but never confirm their email are deleted after 2 days.
• Hashed code-email records are deleted after 2 days.
• Apple, Google and RevenueCat keep purchase records under their own policies (the RevenueCat record is tied only to a random ID), and Resend keeps email delivery logs for a limited time.
• Support emails are kept as long as we need them to help you and keep our business records.

10. Security

Information is encrypted in transit and at rest. Database rules let each account reach only its own rows; subscription status can be written only by our server, never by the app; locations are rounded before they are stored; and sign-in is protected against account takeover and code guessing. No system is perfectly secure, so we cannot promise that information will never be accessed without permission. If a breach affects your information, we will tell you as the law requires.

11. Your choices and rights

• See and export your data: in the app, Profile → Privacy & Security → Export My Data.
• Correct it: edit your profile, settings, areas and journal in the app.
• Delete it: Profile → Privacy & Security → Delete Account, or see how to delete your account without the app. Deleting your account does not cancel a Baro Premium subscription; cancel it in your App Store or Google Play subscriptions.
• Location and notifications: turn either off at any time in your phone’s settings.
• Apple or Google sign-in: you can also remove Baro from your Apple ID or Google account settings.

You can also email support@emberdevstudios.com to ask what we hold about you, for a copy, or for a correction or deletion. We give these rights to everyone, wherever you live. We will confirm the request comes from you (usually by replying to the email address on your account) and answer within 45 days. If we cannot do what you asked, we will explain why, and you can appeal by replying with “Privacy appeal” in the subject; we will answer the appeal within 45 days. If you are still unhappy, you can contact your state attorney general. We will never treat you differently for using these rights.

12. Washington, Nevada and other consumer health data laws

Your journal is “consumer health data” under Washington’s My Health My Data Act and Nevada’s consumer health data law. We collect it only to provide the journal you asked for, share it only with the service providers above, and never sell it. Our Consumer Health Data Privacy Policy describes what we collect, why, who receives it and how to use your rights under those laws.

13. California privacy notice (CCPA, as amended by the CPRA)

This section applies to California residents to the extent the California Consumer Privacy Act applies to us. In the past 12 months we have collected these categories of personal information:

• Identifiers: email address, account ID, IP address. From you, your device and Apple or Google sign-in. Disclosed to Supabase, Resend, and Apple or Google; RevenueCat receives only the random account ID.
• Customer records (Cal. Civ. Code § 1798.80(e)): name and email address. Same sources and recipients.
• Commercial information: your Baro Premium status and purchase history. From the App Store or Google Play through RevenueCat. Disclosed to Supabase and RevenueCat.
• Sensitive personal information: your journal (health information) and your account login. From you. Disclosed to Supabase.
• Approximate location: saved areas rounded to about 11 km, which is not “precise geolocation”. From you and your phone’s geocoder. Disclosed to Supabase.
• Internet or electronic activity: sign-in records and basic app and device information. Disclosed to Supabase and RevenueCat.

We use these for the purposes in section 5 and keep them as described in section 9. We do not sell or “share” personal information (for cross-context behavioral advertising), and have not done so in the past 12 months. We use sensitive personal information only to provide the service you asked for, as the CCPA permits, so there is nothing to limit. We do not disclose personal information to third parties for their own direct marketing.

California residents can ask to know, access, correct or delete their personal information, and will not be treated differently for doing so. Make a request as described in section 11. You may use an authorized agent, who must show your signed permission; we may still ask you to confirm your identity directly.

14. You must be 18 or older

Baro is for adults aged 18 and over. It is not directed to children or teenagers, and we do not knowingly collect information from anyone under 18. If you believe someone under 18 has created an account, contact support@emberdevstudios.com and we will delete it.

15. Using Baro outside the United States

Baro is run from the United States and its data is stored there. If you use Baro from another country, your information is transferred to and processed in the United States, where privacy law may differ from yours. Where your local law gives you additional rights, such as under the GDPR, email support@emberdevstudios.com to use them. We process your account information to provide the service you signed up for, and your journal because you choose to record it there; you can withdraw by deleting entries or your account at any time.

16. This website

This website sets no cookies and has no analytics or advertising. Its host, Vercel, processes standard request information such as IP address and browser type to deliver and protect the site.

17. Changes and contact

We will update this policy when Baro changes what it collects or how it uses information, and change the effective date above. If a change is significant, we will tell you in the app or by email before it takes effect.

Ember Development Studios, LLC, DeLand, Florida, USA. Email: support@emberdevstudios.com.