What stays on your phone, what leaves it, and what we never keep.
Last updated 8 October 2026.
The short version. Your health record — everything you log — is stored on your own device. We do not have a copy of it and we cannot read it.
There is one exception, and it matters: when you ask Underweather to read your day or to talk something through, the notes for that request are sent to be read, and a reply comes back. They are used to write that reply and are not added to any record we keep. If you never ask for a read or a conversation, nothing you log leaves your phone at all.
Underweather is made independently. It is not funded by advertising, it is not backed by an insurer or an employer, and nobody pays us to put anything in front of you. The only thing we sell is the subscription — which is why we have no reason to want your health record, and do not ask for it.
The way to reach us about anything on this page is the contact form. It comes straight to us and we answer it ourselves.
Symptoms, temperatures, notes, photos, documents, medications, appointments, the people you keep track of — all of it is written to storage on your device. It is not uploaded to us, and there is no account holding it.
Two consequences worth being plain about:
If you connect a watch, Underweather reads a set of measurements from your phone’s own health store: Apple Health on iPhone, Health Connect on Android. It reads the same things on either: sleep, resting heart rate, heart rate variability, blood oxygen, respiratory rate, steps, workouts (their type, how long and how far), blood pressure, body temperature and weight. Nothing is read until you choose Connect and allow it, and you choose which of those you allow. Once you have connected, Underweather reads again by itself when you open the app (at most every half hour) so new days arrive without you asking. It never asks for permission on its own.
Backup is off unless you turn it on, in Settings. If you never turn it on, nothing you log is ever copied anywhere by us. Like your other apps, your phone’s own backup (iCloud or Google) may include Underweather if it’s turned on.
If you do turn it on:
Deleting the app does not delete a backup you have turned on — that is the point of it. Ask us if you want it gone.
If you keep an electronic prescription in Underweather — the link from your doctor’s or pharmacy’s text — it goes with the rest of your record. It is in your backup if you turn one on, where it is encrypted on your phone first like everything else, and it is in the copy of your data you can download. It is never sent with a reading, and it never appears in a crash report. The app draws the code for the counter from the link itself and never opens the link on its own; only you do.
These are the parts of Underweather that put your day into words. They cannot be done on the device, so they work like this:
If you would rather nothing left the device, simply do not use the read, the conversation or Read my page. Every other part of Underweather works without them.
Each read or conversation carries a random identifier so we can count how much a single installation is costing us and stop runaway use. It is not your name, your email or your device id, and it is not connected to anything you log.
It is deliberately rotated every calendar month, so the same installation cannot be followed from one month to the next. We keep only a count against it.
To suggest the names of medicines, supplements and remedies as you type, the app downloads a list of those names for your country from our server, and checks about once a day whether a newer list exists. The request says only which country’s list; it carries nothing about you or anything you have logged. The app works out the country from your phone’s time zone and language, on the phone. The list is kept on your phone, so suggestions still work offline.
Like any request on the internet, it reaches our server from your phone’s IP address. We do not keep it; our hosting provider keeps its standard request logs.
When you search for a clinic, the words you type and your phone’s country and language go to Apple or Google to find matching places. Never your location: the app does not ask for it. Nothing you have logged goes with them.
When something in the app breaks, we receive a technical report — what failed and where in the code. It is configured not to include your IP address, cookies or request contents. It exists so a fault can be found and fixed.
These reports are sent by the app itself when something breaks, so you do not have to do anything. Along with what failed they carry the names of the last few screens you had open, and never what you logged, your medicines or your notes.
If you use "Something's not right" to tell us about a problem, we receive what you write. Please leave out anything you would not want us to read.
If you press "Let us know" beside a name that isn't in our list, we receive only that name, which list it was in, your country and which version of the app you have, so we can add it in an update. Nothing else from your record comes with it.
Your sign-in links, and the messages you send with "Something's not right" and "Let us know", are delivered by Resend, an email delivery service.
Everything above is about the app. This part is about underweather.com.au, which is a different thing you are using right now.
There is one piece of the site we do not serve ourselves: the short film on the home page is hosted by Vimeo. To play it, your browser asks Vimeo for it, and Vimeo receives your IP address and the ordinary details any site receives — which browser and device you are on. We embed it with Vimeo’s Do Not Track mode turned on, which means Vimeo does not set tracking cookies for it and does not use your watching it to build a profile or to target advertising. Vimeo’s own policy is at vimeo.com/privacy.
Nothing you have logged in the app is involved in that, and the film plays the same whether or not you have the app at all.
Apart from that film: this website sets no cookies, uses no analytics, and loads nothing from anyone else. The fonts and every image are served from this site. We do not know who visits, and we have nothing to look at if we wanted to.
Subscriptions are handled by the App Store or Google Play. We never see your card details. The store tells us whether a subscription is active; it does not tell us who you are.
Underweather is intended for adults, including adults keeping track of a child's health. An adult sets up and controls every profile. We do not knowingly collect information directly from children.
Because your record lives on your device, you already hold it: you can read it, change it, export it and delete it at any time, without asking us.
For the small amount we do hold — a monthly usage count, crash reports, and your email address if you set up a backup — you can ask us what there is, ask us to correct it, or ask us to delete it, through the contact form. We will respond within 30 days.
Underweather is supplied from Australia, so this policy is written to meet the Australian Privacy Principles. If you believe we have mishandled your information, please raise it with us first through the contact form — and if you are not satisfied, you can take it to the Office of the Australian Information Commissioner at oaic.gov.au.
Underweather helps you notice and record how you feel, and put it into words for a doctor or practitioner. It does not diagnose, and it is not a substitute for professional care. Nothing in it should delay you seeking help when something feels wrong.
If we change how any of this works, we will change this page and update the date at the top. If the change is significant, we will say so in the app rather than leave you to find it.