What we collect, and why

The short version

We do not track you, we do not advertise to you, and we do not sell or share your information with anyone for their own purposes. The app asks for no permissions at all — no location, no contacts, no camera, no photos, no notifications. It contains no analytics or advertising code.

The app

The Harbor Media app shows a client the project we are building for them. To open it you enter a six-character project code that we issued to you. When you do, the app exchanges that code for a device token.

Because of that, our server holds:

• A one-way hash of the device token. The token itself is stored only in the Keychain on your device, and is set not to travel in an iCloud or device-to-device backup. We cannot read it.
• Which project the device is linked to, and the code used to link it.
• The platform and app version — literally "ios" and a version number — so we can tell which build a problem came from.
• When the device last used the app. A device token expires 180 days after its last use, and that clock resets each time you open the app.
• Anything you type into a change request: the title and the description. That is read by Harbor Media staff. It is never shown to another client, and there is nowhere in the app where one user can see another user's content.

If you enter a code that we refuse, we record the IP address the attempt came from. That exists only to rate-limit guessing against a six-character code, and it is the single reason we hold an IP address at all. A successful sign-in does not create one of these records.

Booking a call

A project code comes from a meeting you booked with us. The booking form on this website asks for your name, company, email address, phone number, what you want built, a budget range, whether the meeting is in person or a video call, and your time zone. We use it to hold the meeting, to send you the confirmation, and to do the work you are asking us to quote for.

What we never collect

No advertising identifier. No location. No contacts, photos, camera, microphone, health or financial data. No third-party analytics, attribution or advertising SDK — the app links none, and there is no App Tracking Transparency prompt because there is nothing to ask you about. We take no payment inside the app.