Last updated 14 October 2026
The short version
Outside has no account and no server of its own. It reads one thing from Apple Health — your Time in Daylight — and keeps it, and everything derived from it, on your iPhone. If you leave Share anonymous usage on, the app also sends anonymous product events, such as “finished onboarding”, to our analytics provider. Those events never include your daylight minutes, your goal, or your streak length. You can turn them off at any time.
This policy covers the Outside iOS app (bundle identifier
com.miguelbanda.outside), its Home Screen and Lock Screen widgets, and this
website. Outside is made by Miguel Banda.
With your permission, Outside asks Apple Health for read-only access to a single data type: Time in Daylight. That is the whole request. Outside does not ask for steps, heart rate, sleep, workouts, or any other health or fitness type, and it never writes anything back to Apple Health.
The app reads daily totals so it can show today's minutes, your progress toward your goal, your streak, your milestones, and your history. It also registers for Apple Health background updates so the number and the widgets stay current. Those updates are delivered by iOS on your device and go nowhere else.
iOS deliberately does not tell an app whether read access was granted or denied, so Outside never claims to know. You can review or change this access at any time in the Health app (profile → Apps → Outside) or in Settings → Privacy & Security → Health → Outside.
Health data never leaves your iPhone through Outside. It is not sent to us, to our analytics provider, or to anyone else, and it is never used for advertising or marketing.
All of it stays in the app's own storage on your iPhone:
The widget snapshot lives in a shared container (group.com.miguelbanda.outside)
so the app and its own widgets can read the same value. Nothing else can reach it, and it never
leaves the device.
Outside keeps no copy of your Apple Health history. Each time it needs a number, it asks Health again.
If you turn on the daily nudge, Outside asks iOS for permission to show notifications and schedules a single local notification at the time you chose. Its text can include your name and how many minutes are left toward today's goal. It is written and scheduled on your iPhone, and is never sent through a server. Turn it off in Outside's Settings, or in iOS Settings → Notifications → Outside.
When you tap Share, Outside draws an image of your day on your iPhone. You choose whether it shows your minutes and your streak. The image is made only when you pick where to send it, and it goes only where you send it, through the iOS share sheet. Outside does not upload it or save it anywhere on its own.
To learn which parts of Outside are useful, the app sends anonymous product events to TelemetryDeck, a privacy-focused analytics service based in Germany. This is on by default, and you can turn it off in Outside's Settings → Privacy → Share anonymous usage. When it is off, the app records and sends no new analytics, including the analytics service's own session events. If it was never on, the analytics library is never even started.
What an event can say, and nothing more:
What an event never contains: your daylight minutes, your goal, your progress, your streak length, your name, or your setup answers other than the Apple Watch one. The app's event catalog only accepts fixed choices and yes/no values, and automated tests fail if one of them carries a number, a date, or free text.
What is attached automatically: the analytics library adds technical context to each event, such as the app version, iOS version, device model, language, region, time zone, screen size, and session counts and lengths. It identifies an installation with a random identifier from iOS (the “identifier for vendor”). That identifier is hashed on your iPhone before anything is sent, and TelemetryDeck hashes it again with its own salt on arrival. Neither we nor TelemetryDeck can recover the original, so the value can't be traced back to you or your device. Outside does not use the advertising identifier and does not track you across other apps or websites. We look at this data only as totals, such as how many people finish onboarding. We never use it to look up a single person.
Builds made for development and testing never send analytics.
This matches the App Store privacy label for Outside: Data Not Linked to You (usage data and an anonymous device identifier, both used only for analytics). Outside collects no data that is used to track you.
A few places in Outside open something outside it: this policy, a support page, the App Store, and the Health app. Tapping one hands you to your browser, the App Store, or Health, each with its own privacy handling. Outside sends no information about you along with the link.
This site is static. It sets no cookies, runs no analytics, and loads no fonts, scripts, or images from third parties. It is hosted on Netlify, which — like any web host — processes standard server request data such as your IP address and browser user agent to serve the page. We do not receive, store, or analyse that data.
Launch waitlist. The home page has an optional form where you can leave your email address to be told when Outside is on the App Store. The form is handled by Netlify Forms, which stores the address and the page language you were viewing on Netlify’s servers. We use the address only to send you one email about the launch, we do not share or sell it, and we delete the list once the launch email has gone out. To be removed sooner, write to miguel@studioascensus.com.
If you download Outside from the App Store, Apple provides the developer with its own aggregate reports — download counts, crash reports, and similar — through App Store Connect. That comes from Apple, not from the app, and it does not identify you. It is governed by Apple's privacy policy and your own App Store and analytics settings.
Because Outside's settings live on your iPhone, they can be included in your regular encrypted device or iCloud backup, the same as any other app's. That backup is made and protected by Apple under your iCloud settings. Outside never initiates an upload itself. Your Apple Health data is stored and backed up by Health, not by Outside.
Delete the app and everything it stored goes with it: your name and answers, goals, milestones, streak history, and the widget snapshot. To stop it reading daylight data while keeping the app, turn off Outside's access in the Health app. To stop analytics, turn off Share anonymous usage.
The anonymous analytics already sent can't be matched to you, because we never receive anything that identifies you. If you still want us to look into it, write to us using the contact below. TelemetryDeck deletes analytics data according to its own retention policy.
Your Time in Daylight samples belong to Apple Health, not to Outside, so removing the app does not delete them. You can manage or delete them in the Health app under Browse → Other Data → Time in Daylight.
Outside is not directed at children and does not knowingly collect personal information from children.
Privacy laws such as the GDPR and the CCPA give you the right to access, correct, export, or delete the personal data a company holds about you, and to object to its processing or sale. Outside holds no account or profile about you, and the analytics we receive are anonymous and not linked to you. The anonymous analytics rely on our legitimate interest in improving the app, and you can object at any time by turning off Share anonymous usage. Nothing is ever sold. Everything else is on your iPhone, under your control, and Section 11 explains how to remove it.
If Outside ever gains a feature that changes how data is handled — a paid tier, a new kind of event, anything that touches a network — this page is updated before that version ships, and the date at the top changes with it. Material changes will also be noted in the app's release notes.
Questions about privacy, or about anything above: miguel@studioascensus.com.