U4EA Privacy Policy

14 November 2026

U4EA is an iPhone app for lists of recommendations from people you meet: places, books, movies, and other things. This policy describes what the app does with information. The developer is Michael Lyons.

U4EA does not have an account of its own. There is nothing to sign up for. The app does not show ads, does not use third-party analytics, and does not sell your data. It does not track you across other companies’ apps or websites.

Lists you save

Cities, places, trips, books, movies, shows, notes, ratings, and photos you choose are stored on your phone. If iCloud is on, they also sync through your iCloud account with CloudKit. Lists you own stay in your private iCloud database. A list you share is visible to the people you invite. The developer has no server that stores these lists and cannot read your private iCloud database. U4EA does not sell them.

Apple operates iCloud. CloudKit records are not end-to-end encrypted, so Apple can access them under Apple’s own terms. A photo you pick for a city is stored with that list.

Copying a list makes a file or a message that you send with the system share sheet. That copy goes to whoever you send it to.

When someone adds a place to a list you share, the place records their iCloud name and the time. People on that share can see the name. If you allow notifications, the phone can show an alert such as “Alex added Joe's Pizza to NYC Eats”. That alert stays on your phone. U4EA does not run a server that sends it, and the alert does not include a note, an address, or the share link. Which suggestions you have seen or dismissed stays on this phone.

Location

U4EA uses location only while the app is open, and only if you allow it.

• When you add a city, the app can use one approximate location to suggest the city you are in. What it saves is that city’s center, not your exact position. If you share the list, the city center is part of the list.
• The map can show where you are, so you can see which saved places are nearby. That dot is not saved.
• Sorting places by distance uses your location for that order and does not save it.

The app does not ask for Always location and does not track your location in the background.

Looking up a title or a link

When you search or import, the app sends the title or the address you asked about to the service that can answer it. The request does not include a U4EA account, because there is no account. These lookups are not analytics, and U4EA does not keep a copy of them off your phone.

• Books: Open Library and Google Books.
• Movies: Wikidata and the iTunes Search API. The Movie Database (TMDB) only if you save your own API key.
• TV: TVmaze and the iTunes Search API. TMDB only if you save your own key.
• Podcasts: the iTunes Search API.
• OMDb: only if you save your own API key and ask for those details.
• City photos: Wikipedia and Wikimedia Commons.
• A link you paste, or a publisher guide you choose: that site.

TMDB and OMDb keys stay in the Keychain on your phone. They are not shown again and they are not sent to the developer. This product uses the TMDB API but is not endorsed or certified by TMDB.

Maps, search, and city names also use Apple’s MapKit. Those requests are handled by Apple.

Diagnostics

The app can record a small set of events: that it launched, that an import or a share finished or failed, a sync status, a security event about log forwarding, and a marker if the previous run did not exit cleanly. The events do not include place names, notes, contacts, email addresses, phone numbers, or your precise location. They are not used to track you across other companies’ apps or websites, and they are not linked to your name or Apple ID.

Share anonymous diagnostics and Share security events are on until you turn them off. Share analytics, which covers launches, imports, sync, and sharing, stays off until you turn it on. The switches are in Settings. Turning one off does not turn the others off. An event you opted out of is not recorded.

Events you have allowed are sent to the developer’s own Cribl logging endpoint. That endpoint is the developer’s log collector. It is not a third-party analytics service, an advertising network, or a data broker. U4EA does not use third-party analytics, does not show ads, and does not sell this data.

You can save your own HTTPS address under Settings → Advanced → Log forwarding. That address stays on your phone and overrides the built-in Cribl endpoint. The token for an address you type is stored in the Keychain. If you clear forwarding, that token is removed.

Each event can include the time, the event name, the app version, the OS version, a device class such as phone or pad, a session id for that launch, and an install id. The install id is a hash of a random secret created on the phone. It is not your name, email, or Apple ID.

Children

U4EA is not directed at children under 13, and it does not knowingly collect personal information from them.

Contact

Questions about this policy: support@u4ea.app, or the U4EA support page.

This page is published at https://u4ea.app/privacy.