SvitunPrivacy policy
Svitun is an app that shows power-outage schedules. It has no accounts, no ads and no analytics. This page explains what data the app and the svitun.app site handle, and why.
It covers the iPhone app and the svitun.app site. The Android app will follow the same rules; we will update this page before it is released.
In short
- We don't know who you are: there are no accounts, names, email addresses or device identifiers.
- The addresses you save stay on your phone.
- No ads, no analytics, no tracking. We don't sell data or pass it to anyone.
What stays on your phone
- Your saved addresses and the names you gave them ("Home", "Office").
- Settings: language, reminders, the region you picked last.
- The SvitloBot building you connected to an address (its channel name).
- The most recently downloaded schedules, so you can see them offline.
Widgets and the Lock Screen countdown read this data from the app's storage on the same phone. Reminders are scheduled on the phone too: the server doesn't know when to remind you, or about what.
What your phone sends to the Svitun server
The app talks to our server, api.svitun.app, over HTTPS and sends only what the server needs to answer:
- The groups whose schedule it needs, each with its source (for example "kyiv-dtek:20.1"). Your address is not sent with schedule requests.
- Address search text — a street, a house or a town or village — while you search. About once a week the app also sends the street and house names (or the settlement name) of a saved address, to check whether its group has changed.
- For SvitloBot (Kyiv addresses only). When you open an address: its street and house number, to offer SvitloBot buildings at that address. Once you connect a building: its channel name with each refresh, to show whether it has power.
The app sends nothing that identifies you or your device. Each request carries a random number, new every time, which we use to trace errors. The app also sends an access key, which is the same for every copy of the app.
Like any server, ours sees the IP address a request comes from. We use it to limit how many requests one address can make: it is held only in the server's memory, never written to logs, and forgotten after about half an hour without requests.
To answer a search, the server may query YASNO or an operator's site itself, in its own name, not yours. It keeps the answers (which house is in which group) in a cache shared by everyone, with nothing about who asked.
Server logs
The server does not log every request. When a request fails, the log records its path without parameters (for example /v1/schedules, with no groups and no search text) and the request's random number. Some paths contain a group code or an internal number of a settlement or street.
The log store deletes entries after 30 days. The server's own working copy of the logs is limited in size and overwritten as new lines arrive.
What your phone sends directly to other sites
- Poltavaoblenergo (www.poe.pl.ua): when you look up an address in Poltava Oblast, the app asks the operator's site for streets, houses and the group: it uses the numbers the site itself gives, but sends the house number as text. About once a week the app checks a saved address the same way. This site only answers requests from Ukrainian networks, so our server can't query it on your behalf.
- Volynoblenergo (energy.volyn.ua): once Volyn Oblast is available in the app, a search there will send the settlement and street names to the operator's form, and the weekly check will send the names of a saved address.
These sites see your IP address and the app's name and version. The app accepts no cookies from them. What they do with the requests is governed by their own policies.
Calendar and links
- Calendar subscription. If you add a group's schedule to a calendar, the subscription address contains the source, the group, the language and the app's access key. From then on your calendar — or the service it syncs through, such as iCloud — requests it from our server by itself. To stop it, delete the subscription in your calendar.
- Links to SvitloBot, YASNO or the App Store open in a browser or another app only when you tap them.
What Svitun doesn't do
- No ads, no analytics, no tracking across apps or websites.
- No selling of data and no sharing with third parties, other than the requests above that your phone sends itself when you use search or the calendar.
- No location, contacts, photos or microphone.
- It is not meant for children and doesn't knowingly collect children's data.
The svitun.app site
The site uses no cookies or analytics and loads nothing from other sites. The site's server keeps no log of visits. svitun.app always opens the Ukrainian version, without storing anything; you can switch to English on any page.
Deleting your data
Delete an address in the app, or delete the app itself and everything it kept on your phone goes with it. Nothing on the server is linked to you, so there is nothing to ask us to delete. To remove a calendar subscription, delete it in your calendar app.
Changes
When what the app does with data changes, we will update this page and its revision date. Push notifications, for example, will need the server to keep a device token and the chosen groups; this policy will change before they arrive.
For the App Store and Google Play forms
| Tracking | None |
|---|---|
| Data linked to a person | None: no accounts, no identifiers |
| Shared with third parties | No |
| Sold | No |
| Ads and analytics | None |
| Location, contacts, photos | Not used |
| Sent to the server | Groups; address search text and the names of saved addresses for the group check; SvitloBot channel names. Nothing is tied to a person or a device |
| Encrypted in transit | Yes, HTTPS |
| Data deletion | Delete the app; the server holds no data linked to you |
| Account | None, so there is no account-deletion page |
Contact
Questions about data: support@svitun.app.