Privacy Policy
Last updated: July 13, 2026
Arbory is an iOS app that lets you view your Plausible Analytics dashboard on your iPhone. The app connects directly to the services described below and does not send your analytics data to Arbory's developers.
What the iOS app does not do
- Does not collect names, email addresses, or account profiles
- Does not track individual app usage
- Does not include analytics SDKs or crash reporters
- Does not share your analytics data with third parties
- Does not use advertising or ad identifiers
Data stored on your device
Arbory stores the following data locally on your device only:
- Your Plausible API tokens, securely stored in the iOS Keychain
- Your Plausible server addresses, site list, and cached dashboard data, stored on device in the app's private database and in App Group metadata and snapshot files used by extensions
- App preferences, your settings, stored locally
This locally stored data is not transmitted to Arbory's developers. Connection details are used only when your device connects directly to your Plausible instance.
Network connections
Arbory makes the following network requests:
- Your Plausible instance. Arbory connects directly to your Plausible Analytics server (whether cloud-hosted or self-hosted) to fetch your analytics data. This connection is between your device and your server only.
- Arbory configuration endpoint. The app periodically fetches a remote configuration file from the Arbory server. This request contains no app-supplied personal data or device identifiers. We count total requests per day to measure overall app activity. Arbory does not retain IP addresses, device identifiers, or personal data from these requests; Cloudflare's infrastructure processing is described below.
- Notification registration. If you enable daily summary notifications, the app sends an app-specific APNs push token and your timezone to the Arbory server. Those values are stored for scheduling and delivering the notification. Registration and removal requests also include an ephemeral Apple DeviceCheck token, which is relayed to Apple solely to verify that the request came from a genuine app and device; Arbory does not retain that DeviceCheck token. The server never receives or processes your analytics data.
Widgets and notifications
Home Screen widgets and traffic alert notifications are processed entirely on your device.
If you enable the daily summary feature, your device registers with our server using an app-specific APNs push token and your timezone so we can send a wake-up signal at the right time. Apple DeviceCheck validates registration and removal requests as described above. Our server is only a timer. It does not receive, process, or store any of your analytics data. When the signal arrives, your device fetches yesterday's stats directly from your own Plausible instance. You can disable this at any time by turning off the daily summary toggle.
Past newsletter subscriptions
Before Arbory launched, this website offered an optional launch newsletter. The signup form and its public subscription endpoint have been retired and no longer accept new addresses. If you subscribed at that time, your email address was sent to Buttondown for double opt-in, delivery, and subscription management. You can unsubscribe using the link in any newsletter email. See the Buttondown privacy policy for details.
Website analytics
The arbory.io website uses Plausible Analytics, a cookie-free analytics tool. It measures aggregate visits without advertising identifiers or cross-site profiles. Request data is processed according to the Plausible data policy.
Infrastructure delivery
Arbory.io, the Arbory configuration endpoint, and the notification registration endpoint are delivered and protected through Cloudflare. Like other network infrastructure providers, Cloudflare processes network and security data such as IP addresses and request metadata to route, secure, and operate these services.
Children
Arbory is not directed at children under the age of 13.
Changes
If this policy changes, the updated version will be posted here with a new date.
Contact
Questions about this policy? Email jorijn@jorijn.com.