What OuterView knows about you

Short version: almost nothing, and nothing we sell. OuterView works without an account. With one, we keep your email and the places and settings you chose, so they follow you between devices. Location is rounded before use and never stored. We never sell or share data about an individual.

Who we are. OuterView is run by its founder from the United States (a company, OuterView LLC, is being formed and will take over this policy). Questions: [email protected].

Without an account

On your device only: your home place, watched places, interests, language, theme, saved items, trips and quiz scores live in your browser's storage. They never reach our servers unless you sign in.
Location: only if you press "Near me", and only to centre the globe. We round it to about a kilometre before using it, and we do not store it.
Requests to our servers: when the app asks for news, events, weather or flights near a place, the place's coordinates travel with the request so we can answer it. Our edge provider (Cloudflare) sees your IP address to deliver the page, as every website's host does.
Ask the globe: your question and the place it is about are sent to Anthropic's Claude to write the answer. Nothing identifies you in that request. Questions are cached for 15 minutes so the same question costs one answer.
Measuring real visits: we use PostHog to count real visitors and the few actions that tell us whether the app is useful (a place opened, a quiz finished, a trip planned). No session recording, no cross-site tracking, and we exclude our own visits. We use Sentry to see errors; a crash report can include the page you were on and your browser's name, never your places.

With an account

Your email, to sign you in by link and, later, to send the alerts and the weekly email you turn on. Accounts run on Supabase (United States).
Your profile: the same places and settings as above, stored as one record that only you can read or write (row-level security). We use it to sync your devices, nothing else.
Alerts on a device: if you turn on push alerts, we store the push address your browser gives us, the places you watch and the rules you chose, so our job every 15 minutes can decide whether to send. Turn alerts off and the record is deleted.
Business listings: if you put a business on the globe, we store what you typed (which is public, labeled as yours) and your email (never shown), for the confirmation and so you can remove the listing.

What we never do

Sell, rent or share data about an individual. Not to advertisers, not to data brokers, not to partners, not with your "consent" buried in a setting.
Store precise location or location trails.
Read your contacts, photos or messages.
Show you ads built from your profile.

What we may do, later and only in aggregate: publish or sell anonymous totals by area ("people looking at Austin this week were most interested in…"), never built from fewer than 50 people, and never traceable to one person. If we add an opt-in for that, it will be off by default and say exactly what it covers.

Links that pay us

Some links (tickets, stays, flights, tours, tables) carry an affiliate code. If you book, the partner pays us a share. We label those links, we do not change what they cost you, and we do not rank them by who pays more.

Your rights

See and export: Me → Your data → Export gives you everything, as a file, any time.
Delete: Me → Your data → Delete everything clears this device; with an account, Delete account removes your email, your profile and your alert records from our servers at once.
Ask: [email protected]. We answer within 30 days, and sooner in practice. This applies wherever you live, including under GDPR (EU and UK) and CCPA (California).

Children

OuterView is for people 13 and older. We do not knowingly keep data from anyone younger; tell us and we remove it.

Who processes data for us

Cloudflare (hosting, the place index, caching), United States and worldwide edge.
Supabase (accounts and profiles), United States.
Anthropic (Ask the globe answers and news summaries), United States.
PostHog (visit counts) and Sentry (errors), United States.
Web push goes through your browser's push service (Apple, Google or Mozilla), which sees an encrypted message it cannot read.

Changes

When this policy changes, the date at the top changes and the change is listed in the project's record. Big changes are announced in the app before they apply.