What stays on your phone, what leaves it, and what we never keep.
Last updated 25 August 2026.
The short version. Your health record — everything you log — is stored on your own device. We do not have a copy of it and we cannot read it.
There is one exception, and it matters: when you ask Underweather to read your day or to talk something through, the notes for that request are sent to be read, and a reply comes back. They are used to write that reply and are not added to any record we keep. If you never ask for a read or a conversation, nothing you log leaves your phone at all.
Underweather is made independently. It is not funded by advertising, it is not backed by an insurer or an employer, and nobody pays us to put anything in front of you. The only thing we sell is the subscription — which is why we have no reason to want your health record, and do not ask for it.
The way to reach us about anything on this page is the contact form. It comes straight to us and we answer it ourselves.
Symptoms, temperatures, notes, photos, documents, medications, appointments, the people you keep track of — all of it is written to storage on your device. It is not uploaded to us, and there is no account holding it.
Two consequences worth being plain about:
If you connect a watch, Underweather reads a small set of measurements from your phone’s own health store — Apple Health on iPhone, Health Connect on Android. It reads the same six things on either: sleep, resting heart rate, heart rate variability, blood oxygen, respiratory rate and steps. Nothing is read until you tap Connect and allow it, and you choose which of those you allow.
Backup is off unless you turn it on, in Settings. If you never turn it on, nothing you log is ever copied anywhere.
If you do turn it on:
Deleting the app does not delete a backup you have turned on — that is the point of it. Ask us if you want it gone.
These are the parts of Underweather that put your day into words. They cannot be done on the device, so they work like this:
If you would rather nothing left the device, simply do not use the read or the conversation. Every other part of Underweather works without them.
Each read or conversation carries a random identifier so we can count how much a single installation is costing us and stop runaway use. It is not your name, your email or your device id, and it is not connected to anything you log.
It is deliberately rotated every calendar month, so the same installation cannot be followed from one month to the next. We keep only a count against it.
When something in the app breaks, we receive a technical report — what failed and where in the code. It is configured not to include your IP address, cookies or request contents. It exists so a fault can be found and fixed.
If you use "Something's not right" to tell us about a problem, we receive what you write. Please leave out anything you would not want us to read.
Everything above is about the app. This part is about underweather.com.au, which is a different thing you are using right now.
There is one piece of the site we do not serve ourselves: the short film on the home page is hosted by Vimeo. To play it, your browser asks Vimeo for it, and Vimeo receives your IP address and the ordinary details any site receives — which browser and device you are on. We embed it with Vimeo’s Do Not Track mode turned on, which means Vimeo does not set tracking cookies for it and does not use your watching it to build a profile or to target advertising. Vimeo’s own policy is at vimeo.com/privacy.
Nothing you have logged in the app is involved in that, and the film plays the same whether or not you have the app at all.
Apart from that film: this website sets no cookies, uses no analytics, and loads nothing from anyone else. The fonts and every image are served from this site. We do not know who visits, and we have nothing to look at if we wanted to.
Subscriptions are handled by the App Store or Google Play. We never see your card details. The store tells us whether a subscription is active; it does not tell us who you are.
Underweather is intended for adults, including adults keeping track of a child's health. An adult sets up and controls every profile. We do not knowingly collect information directly from children.
Because your record lives on your device, you already hold it: you can read it, change it, export it and delete it at any time, without asking us.
For the small amount we do hold — a monthly usage count, crash reports, and your email address if you set up a backup — you can ask us what there is, ask us to correct it, or ask us to delete it, through the contact form. We will respond within 30 days.
Underweather is supplied from Australia, so this policy is written to meet the Australian Privacy Principles. If you believe we have mishandled your information, please raise it with us first through the contact form — and if you are not satisfied, you can take it to the Office of the Australian Information Commissioner at oaic.gov.au.
Underweather helps you notice and record how you feel, and put it into words for a doctor or practitioner. It does not diagnose, and it is not a substitute for professional care. Nothing in it should delay you seeking help when something feels wrong.
If we change how any of this works, we will change this page and update the date at the top. If the change is significant, we will say so in the app rather than leave you to find it.