Privacy Policy — DynaWatch

1. Information We Collect

Information You Provide

• Dynatrace Environment Configuration — environment name, base URL, and environment type (SaaS or Managed). Stored locally on your device using Apple's SwiftData framework.
• Dynatrace API Token — stored securely in the iOS Keychain on your device. Used solely to authenticate requests to your Dynatrace environment and is never transmitted to our servers.
• App Lock PIN — if you enable App Lock, your PIN is stored in the iOS Keychain on your device. It is never transmitted off the device.

Information Collected Automatically

• APNs Device Token — if you enable push notifications, Apple provides a device token that identifies your device for push notification delivery. This token is sent to and stored on the DynaWatch push server.
• Registration ID — a randomly generated UUID created on your device when you enable push notifications. This ID is sent to the DynaWatch push server to associate your device with your webhook endpoint.

Information We Do NOT Collect

• We do not collect personal information such as your name, email address, phone number, or physical address.
• We do not collect analytics, usage statistics, or telemetry data.
• We do not use advertising frameworks or tracking SDKs.
• We do not access your contacts, photos, location, or other device data.
• We do not collect or store your Dynatrace API token on our servers.

2. How We Use Information

Data	Purpose	Stored Where
Dynatrace environment config	Connect to your Dynatrace tenant	Device only (SwiftData)
Dynatrace API token	Authenticate API requests	Device only (Keychain)
App Lock PIN	Protect app from unauthorized access	Device only (Keychain)
Dashboard & notification preferences	Personalize the app experience	Device only (UserDefaults)
APNs device token	Deliver push notifications	DynaWatch push server
Registration ID	Route push notifications	DynaWatch push server

3. Push Notification Server

If you enable server push notifications, the following data is stored on the DynaWatch push server:

• APNs device token — used to send notifications via Apple Push Notification service.
• Registration ID — a random UUID, not linked to your identity.
• Webhook secret — a randomly generated token for securing the webhook endpoint.
• Webhook delivery log — records of which Dynatrace problem IDs triggered notifications, including timestamps and delivery status.

The push server does not store your Dynatrace API token, environment URL, or any Dynatrace monitoring data. Problem details included in webhook payloads (problem title, severity, impacted entities) are used only to compose the notification and are not persisted.

When you disable push notifications or unregister your device, your registration data is deleted from the server.

4. Data Shared with Third Parties

Apple Push Notification service (APNs)

When push notifications are enabled, your APNs device token and notification content are transmitted to Apple's Push Notification service for delivery. Apple's handling of this data is governed by Apple's Privacy Policy.

Dynatrace

The App connects directly to your Dynatrace environment using the API token you provide. All communication occurs between your device and your Dynatrace tenant. We do not act as an intermediary for Dynatrace API traffic.

No Other Third Parties

We do not share, sell, rent, or trade any of your data with any other third parties. We do not use third-party analytics, advertising, or tracking services.

5. Data Security

• API tokens and App Lock PINs are stored in the iOS Keychain, which provides hardware-backed encryption.
• All network communication uses HTTPS (TLS 1.2 or later).
• The push server uses token-based authentication. Webhook endpoints are secured with randomly generated secrets.
• Push server data is stored in an encrypted SQLite database on a secured server.

6. Data Retention

• On-device data — stored as long as the App is installed. Deleting the App removes all local data.
• Push server data — registration data is deleted when you disable push notifications or unregister your device. Webhook delivery logs are retained for operational purposes and periodically purged.

7. Children's Privacy

The App is not directed at children under the age of 13 (or the applicable age in your jurisdiction). We do not knowingly collect personal information from children.

8. Your Rights

Since we do not collect personal information linked to your identity, there is generally no personal data to access, correct, or delete. However:

• You can delete all on-device data by uninstalling the App.
• You can remove your push notification registration by disabling push notifications in the App, which deletes your data from the push server.
• For any data-related requests, contact us at support@dynawatch.app.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted within the App or on our website. The "Last updated" date at the top reflects the most recent revision.

10. Contact Us

If you have questions about this Privacy Policy, contact us at:

• Email: support@dynawatch.app
• Support: DynaWatch Support

Apple and the Apple logo are trademarks of Apple Inc., registered in the U.S. and other countries. App Store is a service mark of Apple Inc.