Window Seat / Privacy

Your time.
Your privacy.

Effective October 18, 2026

This policy covers the Window Seat iPhone app and this website, operated by Ziwei Liu. Contact support@takeawindowseat.com with questions or requests about your information.

1. Information on your device

Window Seat does not require an account. Journey history, tickets, notes, preferences, and focus records are stored on your device or in the app's shared storage for its extensions. The app does not upload these records to a developer-operated server and does not currently provide cloud sync. Device backups, if enabled, are managed by Apple. Deleting the app can remove your local records.

The app stores whether a complimentary premium journey has been used in the device Keychain. This is not an advertising identifier or proof of a paid purchase and may remain after reinstalling. We do not operate advertising or third-party analytics SDKs in the app.

2. Focus Protection and Screen Time

If you enable Focus Protection, iOS asks you to authorize access. You select the apps and websites to shield. Window Seat uses Apple's Family Controls, Managed Settings, and Device Activity frameworks, including system-provided opaque selection tokens. Screen Time reports are displayed through an on-device extension. We do not receive your Screen Time reports or a list of your selected apps on a server.

You can pause or end protection and revoke permission in iOS Settings. Focus Protection is optional; the journey timer can be used without it.

3. Nearby stations and maps

Initial station suggestions use your system region and time zone on the device. The app does not automatically request your location or contact an IP geolocation provider.

Only when you tap the nearby control does the app request a one-time, foreground approximate location from iOS. If permission has not been granted, iOS asks you first. Raw coordinates are used on the device to choose a station and are not saved or sent to a developer server. Denying permission or an unavailable location does not prevent you from choosing stations manually. You can revoke permission in iOS Settings.

Maps use Apple MapKit and may contact Apple services under the Apple privacy policy. Viewing a map does not require granting location permission.

4. Photos and sharing

When you choose to save a postcard, the app asks for permission to add an image to Photos. It does not request access to read your photo library. Sharing is initiated by you through the system share sheet; the destination you choose handles the shared image under its own terms.

5. Purchases

Apple processes purchases and restores through StoreKit. The app checks Apple's verified purchase entitlements to unlock paid content. We do not receive your card details. The Window Seat Pass is a one-time purchase, not an automatically renewing subscription. Apple's standard licensed application agreement applies.

6. Website and support email

This website does not include advertising, tracking pixels, an analytics SDK, or a contact form. Cloudflare hosts and secures it and may process connection information such as IP address, request time, and security-related technical data. See Cloudflare's privacy policy.

When you email support, we receive your email address, message, and any attachments you choose to send. Cloudflare Email Routing forwards messages to our support inbox hosted by Google. We use that information to respond and resolve your request, not for marketing. We retain support correspondence only as needed to handle the request, follow-up, and applicable legal obligations. Please avoid sending unnecessary sensitive information. Service providers may process information in other countries under their own policies.

7. Your choices and requests

You can revoke app permissions through iOS Settings and choose what to share. There is no Window Seat account to delete. To ask about access, correction, deletion, or other applicable privacy rights for information you have sent to us, email support. We may ask for information needed to verify the request. We cannot retrieve device-only records from our servers because we do not hold them.

The app is not designed to collect children's personal information. If you believe a child has sent personal information to support, please contact us so we can review and remove it where appropriate.

8. Changes

We will update this page when our practices change and revise the effective date. Material changes will be communicated as required.