App Privacy Policy
Last updated: 23 August 2026 · Applies to the Envo iOS app. The website and mailing list have a separate privacy note.
Envo ("we", "us") is an independent mobile application that presents publicly available United Nations meeting schedules. Envo is not affiliated with or endorsed by the United Nations.
What we collect
We collect the minimum needed to run the app:
- Email address — sign-in via one-time codes and account recovery. Only if you create an account.
- Name — optional first and last name, stored with your profile so we can address you personally. You can leave it blank.
- Duty station & language — to show the right schedule in your language. Stored on device; synced if signed in.
- Country you represent — optional profile detail, hideable at any time.
- Saved meetings — your "My Meetings" list; powers the premium calendar feed and alerts. Only if you save meetings.
- Push token — premium notifications you enable. Only with your permission.
- Marketing preference — an opt-in toggle (off by default). If you turn it on, we add your email address to our product-updates mailing list (managed by Resend) to send occasional news about Envo. Turning it off removes you from that list. We never share the list or use it for advertising.
- Anonymous usage signals — to understand which features are useful and where onboarding is confusing.
- Bug reports and suggestions — what you write in Profile → Report a problem, plus your app version, device model, operating system, duty station and language. Only if you choose to send one.
We do not collect phone numbers, precise location, contacts, photos, or advertising identifiers. There are no ad networks and no cross-app tracking in Envo.
Analytics
We use TelemetryDeck, a privacy-first analytics provider, to understand aggregate app usage (e.g. which screens are used, where users drop off during setup). TelemetryDeck receives a random identifier that Envo creates on your device the first time you open the app. It is not linked to your email or account, is not your device’s advertising identifier, is not shared with other apps, and is replaced if you delete and reinstall Envo. TelemetryDeck never sees your IP address in identifiable form and is contractually barred from selling or sharing data. You can switch this off entirely in Profile → Privacy. This is anonymous product analytics, not tracking — we don't build an advertising profile or share usage data with third parties for marketing.
Crash reports
From version 1.0.1 Envo uses Sentry to find out when the app crashes. A crash report contains the error, the line of our code that raised it, the app version, your device model and operating system, and a short trail of the screens you had open. It does not contain your email, your account, any identifier we use elsewhere, any meeting you saved or viewed, or any screenshot or recording of your screen. The Profile → Privacy switch turns crash reports off along with usage signals, and Sentry’s own installation identifier is separate from the analytics one, so the two cannot be matched to each other.
Bug reports and feature requests
From version 1.0.1 you can report a problem or suggest a feature from Profile. We receive what you wrote, together with your app version and build, your device model and operating system, and your duty station and language — the context needed to reproduce a problem without writing back to ask for it. We do not receive your name, your account, or which meetings you follow. The email field is optional and is used for one thing only: replying to you. Leave it blank and the report arrives without it. Reports are stored on our servers in the European Union, are read only by the person who builds Envo, and are never used for marketing or shared with anyone. Ask us to delete a report at any time at envo@tschuebi.com.
Where data lives
- Schedule data is public information from the Journal of the United Nations, served from our servers.
- Account data is stored with our hosting provider (Supabase) in the European Union.
- Sign-in codes and other account emails are delivered through Resend, our transactional email provider.
- Premium push notifications are delivered through Apple (APNs) and Expo's push service.
- Payments are processed by Apple; we never see your payment details. Subscription state is managed by RevenueCat under a pseudonymous identifier.
Your rights
- Deletion — delete your account (and all associated data) any time from Profile → Delete account.
- Access/export — email envo@tschuebi.com and we will send you a copy of your data within 30 days.
- Marketing preference — turn the product-update email preference off any time in Profile. (If we ever begin sending such emails, every one will also carry an unsubscribe link.)
Signed-out use of Envo requires no account and sends us no personal data. The one exception is a bug report you choose to send, which reaches us whether or not you are signed in.