update apps and add privacy policies

4 files changed, 123 insertions, 10 deletions

diff --git a/content/apps/daybyday.md b/content/apps/daybyday.md
index 8760620..46cb4d6 100644
--- a/content/apps/daybyday.md
+++ b/content/apps/daybyday.md
@@ -6,7 +6,8 @@ weight = 5
 [extra]
 link = "https://github.com/krazywarez/daybyday"
 link_label = "Source"
-appstore = "https://apps.apple.com/app/day-by-day/id000000000"
+appstore = "https://apps.apple.com/us/app/daybyday-learn/id6760321939"
+privacy = "/privacy/daybyday/"
 +++
 
 Day by Day is a gentle, ad-free iOS app that helps children learn days, weeks,
diff --git a/content/apps/domain-dig.md b/content/apps/domain-dig.md
index e83d3e2..496895f 100644
--- a/content/apps/domain-dig.md
+++ b/content/apps/domain-dig.md
@@ -6,9 +6,60 @@ weight = 2
 [extra]
 link = "https://github.com/krazywarez/domain-dig"
 link_label = "Source"
-appstore = "https://apps.apple.com/app/domain-dig/id000000000"
+appstore = "https://apps.apple.com/us/app/domaindig/id6760368004"
+privacy = "/privacy/domain-dig/"
 +++
 
-Domain Dig is an iOS app for inspecting DNS records and SSL certificates on the
-go. Look up A, AAAA, MX, TXT, and more, and check certificate chains — no
-account, no tracking.
+See how any domain is really configured and served.
+
+Domain Dig is a fast, native iOS app for inspecting a domain end to end. enter a
+name and get a full report: DNS records, email-security posture, the live TLS
+certificate and chain, HTTP headers, IP geolocation, and reachable ports — no
+account, no tracking, everything rendered in plain monospace.
+
+## why it exists
+
+the answers you need about a domain are scattered across a dozen web tools. Domain
+Dig pulls them into one screen you can run from your phone: reachability, records,
+certificates, and headers in a single scrollable report.
+
+## what it does
+
+- run a full lookup on any domain from one screen
+- read every DNS record type: A, AAAA, MX, TXT, NS, SOA, CNAME, SRV, CAA, DS, PTR
+- confirm DNSSEC and check reachability and the redirect chain
+- audit email security: SPF, DMARC, DKIM, MTA-STS, and BIMI
+- inspect the SSL/TLS certificate, SANs, validity, cipher, and full chain
+- review HTTP response headers with a security grade
+- geolocate the resolved IP and scan common ports
+- look up registration and ownership via RDAP
+- monitor domains and get alerts via webhook or Slack
+
+## interface
+
+everything about a domain on one report — tap through the certificate chain,
+email checks, and open ports.
+
+<div class="shots">
+<figure><img loading="lazy" src="https://img.cleberg.net/apps/domaindig/screenshots/iPhone/01.png" alt="Lookup and DNS records"><figcaption>run a lookup, see everything</figcaption></figure>
+<figure><img loading="lazy" src="https://img.cleberg.net/apps/domaindig/screenshots/iPhone/02.png" alt="Record types and email security"><figcaption>every record type and email check</figcaption></figure>
+<figure><img loading="lazy" src="https://img.cleberg.net/apps/domaindig/screenshots/iPhone/03.png" alt="SSL certificate and chain"><figcaption>full TLS certificate and chain</figcaption></figure>
+<figure><img loading="lazy" src="https://img.cleberg.net/apps/domaindig/screenshots/iPhone/04.png" alt="IP location and open ports"><figcaption>IP geolocation and open ports</figcaption></figure>
+<figure><img loading="lazy" src="https://img.cleberg.net/apps/domaindig/screenshots/iPhone/05.png" alt="Saved domains"><figcaption>save the domains you watch</figcaption></figure>
+<figure><img loading="lazy" src="https://img.cleberg.net/apps/domaindig/screenshots/iPhone/06.png" alt="Lookup history"><figcaption>history, kept on device</figcaption></figure>
+<figure><img loading="lazy" src="https://img.cleberg.net/apps/domaindig/screenshots/iPhone/07.png" alt="Resolver settings"><figcaption>choose your DNS resolver</figcaption></figure>
+</div>
+
+## details that matter
+
+- DNSSEC validation and a live TLS version and cipher-suite readout
+- certificate chain depth, expiry countdown, and a jump to crt.sh
+- email-security checks that flag missing SPF, DMARC, DKIM, MTA-STS, or BIMI
+- a port scan that knows when a host sits behind Cloudflare's proxy
+- pick your resolver: Cloudflare, Google, Quad9, or a custom server
+
+## on your device
+
+- save domains you watch and revisit past lookups from history
+- everything is stored locally; nothing syncs to us
+- optional iCloud sync (off by default) carries settings and history across your devices via your own iCloud account
diff --git a/content/apps/hutch.md b/content/apps/hutch.md
index 223842a..323cd88 100644
--- a/content/apps/hutch.md
+++ b/content/apps/hutch.md
@@ -1,14 +1,74 @@
 +++
 title = "Hutch"
-description = "A native iOS client for Sourcehut."
+description = "A native iOS client for SourceHut."
 weight = 1
 
 [extra]
 link = "https://github.com/krazywarez/hutch"
 link_label = "Source"
-appstore = "https://apps.apple.com/app/hutch/id000000000"
+appstore = "https://apps.apple.com/us/app/hutch-for-sourcehut/id6760742299"
+privacy = "/privacy/hutch/"
 +++
 
-Hutch is a fast, focused iOS client for [Sourcehut](https://sr.ht) — browse
-repositories, read tickets, and follow activity without leaving your phone.
-Built to be minimal and offline-friendly.
+SourceHut workflows, built for mobile.
+
+Hutch is a fast, native iOS app for working with [SourceHut](https://sr.ht) when
+you're away from your desk. it focuses on what matters on mobile: triaging work,
+reviewing patches, monitoring builds, following discussions, and managing
+repositories and tickets — without a browser. available now on the App Store for
+iPhone.
+
+## why it exists
+
+SourceHut is intentionally simple, efficient, and workflow-focused. Hutch brings
+that same philosophy to iOS: an interface designed for quick decisions and real
+work on the go, not a stripped-down viewer. it's built to read, respond, create,
+and manage work across the SourceHut ecosystem.
+
+## what it does
+
+- review patch threads and browse mailing lists
+- manage trackers, tickets, assignees, labels, and comments
+- browse Git and Mercurial repositories, files, refs, commits, and diffs
+- submit, monitor, retry, and inspect builds and logs
+- follow projects linking repositories, trackers, and lists
+- manage profile settings, SSH keys, PGP keys, and access tokens
+
+## interface
+
+from patch review to trackers, builds, and repositories, Hutch is built to make
+SourceHut feel at home on iOS.
+
+<div class="shots">
+<figure><img loading="lazy" src="https://img.cleberg.net/apps/hutch/screenshots/iphone/01_patch.jpg" alt="Patch review"><figcaption>review patches anywhere</figcaption></figure>
+<figure><img loading="lazy" src="https://img.cleberg.net/apps/hutch/screenshots/iphone/02_thread.jpg" alt="Threaded inbox"><figcaption>stay on top of discussions</figcaption></figure>
+<figure><img loading="lazy" src="https://img.cleberg.net/apps/hutch/screenshots/iphone/03_builds.jpg" alt="Builds"><figcaption>monitor builds in real time</figcaption></figure>
+<figure><img loading="lazy" src="https://img.cleberg.net/apps/hutch/screenshots/iphone/04_tickets.jpg" alt="Tickets"><figcaption>manage issues on the go</figcaption></figure>
+<figure><img loading="lazy" src="https://img.cleberg.net/apps/hutch/screenshots/iphone/05_repo.jpg" alt="Repository diff"><figcaption>explore your code</figcaption></figure>
+<figure><img loading="lazy" src="https://img.cleberg.net/apps/hutch/screenshots/iphone/06_projects.jpg" alt="Projects"><figcaption>everything in one place</figcaption></figure>
+<figure><img loading="lazy" src="https://img.cleberg.net/apps/hutch/screenshots/iphone/07_actions.jpg" alt="Build submission"><figcaption>take action instantly</figcaption></figure>
+</div>
+
+## major features
+
+- home dashboard with projects, assigned tickets, recent builds, and inbox shortcuts
+- unread-first inbox with thread detail, patch rendering, and reply via Apple Mail
+- Git and Mercurial repository browsing, settings, ACLs, and creation flows
+- tracker and ticket workflows: comments, assignees, resolutions, and labels
+- build submission, history, log viewing, cancellation, and rebuild flows
+- project views linking repositories, trackers, and mailing lists into one hub
+
+## built for sourcehut users
+
+- native Swift interface with no analytics, ads, or tracking SDKs
+- deep links for repositories, tickets, and builds via `hutch://`
+- share actions across repositories, files, commits, tickets, builds, and profiles
+- pull-to-refresh, loading, empty, and error states across major screens
+- Keychain-backed auth with secure SourceHut personal access tokens
+
+## resources
+
+- [project homepage](https://sr.ht/~ccleberg/Hutch/)
+- [issue tracker](https://todo.sr.ht/~ccleberg/Hutch/)
+- [hutch-devel mailing list](https://lists.sr.ht/~ccleberg/hutch-devel)
+- [hutch-announce mailing list](https://lists.sr.ht/~ccleberg/hutch-announce)
diff --git a/content/apps/solar.md b/content/apps/solar.md
index 40e4d2a..7604d93 100644
--- a/content/apps/solar.md
+++ b/content/apps/solar.md
@@ -6,6 +6,7 @@ weight = 3
 [extra]
 link = "https://github.com/krazywarez/solar"
 link_label = "Source"
+privacy = "/privacy/solar/"
 +++
 
 Solar is an iOS client for [Cloudflare](https://cloudflare.com) — manage DNS,