Privacy Policy
The short version: Rainbow’s End Manifest sends nothing to us — ever. Your boat’s papers, your gear list, and your cruising log stay on your device, unless you switch on iCloud sync, in which case they travel only through your own iCloud, which we cannot read.
What the app stores, and where
Everything you put into Rainbow’s End Manifest — your boat’s particulars and papers (including, if you enter them, the owner’s name and address, hull ID, registration numbers, radio call sign and MMSI, and — if you add them — her hull color, identifying features, and a small photo of the boat), your safety-equipment checklist and where each item is stowed, your engine-hour meters and the miles under her keel, your declarable inventory, your maintenance dates, fuel fills, the costs in your four ledgers, and every entry in your cruising log, the watches kept on a passage among them — is stored in the app’s local storage on your own device. Photos you attach to a day in the log are kept as files on that same device, resized to about 1,200 pixels; the log records their names and your captions, not the pictures, so a synced or exported book carries the names and the pictures stay where they were taken. The app has no server of ours and no account system, and with iCloud sync switched off (its factory setting) it makes no network requests at all.
The owner details deserve a plain word of their own: you enter them because a vessel’s manifest traditionally records them, and they live in the same local storage as everything else. We never see them. Nobody sees them but you.
The same word for the declarable inventory. If you record firearms, medications, or stores for clearing into another country, that list exists so you can hand it to an official when the law asks — it lives in the same local storage (or your own iCloud, if you sync), it is shared only when you tap Share, and we never see it.
Deleting the app deletes this data from the device. If iCloud sync was on, the copy in your own iCloud remains until you remove it (Settings → your name → iCloud → Manage Account Storage) — which also means reinstalling with sync on brings your book back. If you back up your device, your backup may include the app’s data like any other app’s; backups and iCloud alike are managed by Apple under Apple’s terms, and we never see either.
iCloud sync — your own cloud, not ours
Edit boat offers one switch: Sync her books across your devices. It is off until you turn it on, on each device. Switched on, the app keeps a copy of your fleet — every boat’s manifest, gear, dates, and log — in the private database of your own iCloud account, so an iPhone and an iPad signed into the same Apple ID show the same book. That record is Apple’s infrastructure under Apple’s terms, readable only by your Apple ID: we have no access to it, no copy of it, and no way to know it exists. Nothing about this creates an account with us — there is still no us to have an account with. Switch sync off and the app goes back to making no network requests at all; delete the app’s data from iCloud at any time in Settings → your name → iCloud → Manage Account Storage. With sync on, each photo you add to a day is also written to the same private database as its own record — the picture and its thumbnail — so your other device can fetch it. We cannot read those records any more than the book; with sync off, no photo leaves the device.
What the app does not do
Rainbow’s End Manifest contains no analytics, no advertising, no tracking of any kind, and no third-party data-collection software. It reads your location only when you tap Fill from GPS on a watch: one position, written into that watch in your log, never read in the background and never sent to us. The phone’s barometer, which iOS keeps behind the Motion & Fitness permission, is read the same way, only when you tap for it on a watch. It does not read your contacts or anything else on your device. Your photo library is touched only when you choose to attach a picture — of your boat to her manifest, or of the day to a log entry — through the system’s own picker: the pictures you choose are copied, and nothing else is seen. The camera opens only when you tap Take a photo on a day’s entry, and what it takes goes into that entry and nowhere else. An export of the expenses, as a CSV or a PDF, is made on the device and handed to the share sheet you open; it goes where you send it and nowhere else. It works offline — by design, because it is meant to be used aboard, where there is often no signal; iCloud sync, if you turn it on, simply catches up the next time the device finds a connection.
Purchases
Buying the app is handled entirely by the App Store or Google Play. We receive no payment details, no card numbers, and no personal information from your purchase.
Children
The app collects no data from anyone, children included.
Changes to this policy
If a future version of the app ever changes any of the above — for example, by adding an online feature — this policy will be updated first, with the effective date above revised, and the change described plainly rather than buried.
September 16, 2026: the expenses can be exported as a CSV or a PDF, made on the device and sent only where you share them; this policy now says so. Nothing else changed: no server of ours, no accounts, nothing collected. September 15, 2026: with iCloud sync on, the day’s photos travel through your own iCloud as their own records, so your other device can show them; this policy now says so. Nothing else changed: no server of ours, no accounts, nothing collected. September 14, 2026: the log can carry photos on a day, kept as files on the device that took them, and the cruising-expenses ledger joined the other three; this policy now says where the photos live and when the camera opens. September 11, 2026: the log can keep the watches on a passage, and a watch can take the boat’s position from the GPS and the air pressure from the phone’s barometer — each only when you tap for it, each stored exactly like everything else. Until now this policy said the app did not use your location; that sentence is replaced above. September 4, 2026: the manifest can now carry the boat’s hull color, identifying features, and a small photo — chosen through the system picker, stored exactly like everything else (and synced or exported only the way everything else is). September 3, 2026: the app grew the declarable inventory, engine-hour meters, and the miles under her keel — all stored exactly as everything else, so only the list of what you can record changed. September 2, 2026: the optional iCloud sync shipped, and this policy gained the section describing it — the promise above, kept. August 30, 2026: first version.
Contact
Questions about this policy: support@RainbowsEndMarine.com.
Rainbow’s End Manifest is an aid to preparation, not a substitute for the regulations or for a Coast Guard Auxiliary Vessel Safety Check.