Privacy Policy

Last updated September 12, 2026

The short version. Exposure Log stores your exposure log so it can fill in Form 407 and find your incidents. It’s private to your account. There are no ads, no analytics, and no tracking, and we never sell or share your data. You can delete your account and everything in it from the app at any time.

Who we are

Exposure Log is made by Desert Spins LLC (“we”, “us”). This policy covers the Exposure Log app for iPhone.

Exposure Log is an independent app by Desert Spins LLC and is not affiliated with or endorsed by the Seattle Fire Department or the City of Seattle.

What we collect

Your Sign in with Apple identifier. When you sign in, Apple gives the app a unique ID for your account. We use it, through Firebase Authentication, to keep your log private to you and restore it on a new phone. We never see your Apple ID password, and the app doesn’t ask Apple for your email address.
Your name, if you choose to share it. Apple may pass along your name the first time you sign in. You can change it or leave it out.
Your name and assignment for Form 407. The name, unit, and debit number you enter (for example “L5/D10”), which print on the form.
Your exposure records. The date and time, the SFD incident number, the call type and address of the incident, what you were exposed to, the material, quantity, time exposed, protective equipment worn, and any comments or notes you add. Incident numbers, call types, and addresses come from Seattle’s public Real-Time Fire 911 data.
Your own health information for Form 407. The symptoms or side effects you enter about yourself, and your answer to whether you were seen by a physician. The app never asks for information about patients or anyone else, and you shouldn’t enter any.
Your location, once, when you log. If you allow location access, the app records your GPS location one time when you log an exposure and saves it with that exposure. It doesn’t track your location in the background or over time. Location is optional; without it you can pick or type the incident yourself.
Your gear sets and washes. Which set of turnout gear you wore for each exposure, and the dates you log washes.
Your settings. Preferences such as how far back to look for incidents.

We don’t collect photos, contacts, your email address, advertising identifiers, or usage analytics.

How incident matching works

To find your incident, the app downloads the list of recent Seattle Fire 911 calls from the City of Seattle’s public open data site (data.seattle.gov) for a window of time before you logged, then compares those calls to your location on your device. Your location and your log are not sent to the City of Seattle. As with any website, the City’s servers see an ordinary request from your device, including its IP address.

Why we collect it

Only to make the app work for you:

to keep your running exposure log and sync it across your devices;
to fill in Form 407 (“Record of Individual Exposure to Hazardous Materials”) and your CSV export;
to find the incident you were on;
to track which gear set needs a wash.

We don’t use your data for anything else.

Where it’s stored

Your data is stored with Google Firebase (Firebase Authentication and Cloud Firestore) in the United States, in a Firebase project run by Desert Spins LLC for this app alone. Security rules allow only your signed-in account to read or write your records. The app also keeps a copy on your iPhone so logging works with no signal.

Data is encrypted in transit and at rest by Google. We don’t look at individual records unless you ask us to help with a problem or the law requires it.

What we don’t do

No ads.
No analytics or crash-reporting tools.
No tracking across other companies’ apps or websites.
We never sell your data, and we never share it with the Seattle Fire Department, the City of Seattle, your employer, insurers, data brokers, or anyone else.

Google (which runs Firebase) and Apple (which runs Sign in with Apple) handle your data only to provide those services to the app.

Exports you make

When you export a Form 407 PDF or a CSV, the file is created on your device and goes wherever you send it, such as Mail, Files, a printer, or the SFD Hub. After that, it’s handled by whoever you shared it with.

Keeping and deleting your data

We keep your data for as long as you have an account. To delete it, open the app and go to Settings > Delete account and data. This permanently deletes every record in your account, deletes your sign-in account, and revokes the app’s Sign in with Apple access. It can’t be undone, so export your Form 407 or CSV first if you want a copy. Google may take a short time to clear deleted data from its own systems and backups.

Signing out, or removing the app from your Apple ID’s Sign in with Apple settings, doesn’t delete your data. Use Delete account and data in the app, or contact us and we’ll delete it for you.

Wherever you live, you can ask us for a copy of your data or to delete it.

Children

Exposure Log is made for working firefighters and isn’t directed to children. We don’t knowingly collect information from anyone under 13. If you think a child has given us information, contact us and we’ll delete it.

Changes to this policy

If we change this policy, we’ll update this page and the date at the top. If a change affects how your data is used, we’ll tell you in the app before it takes effect.

Contact

Questions or requests: Desert Spins LLC, ben@shiftdad.app.