Depends on device. Apple is better at limiting what developers can do and requiring to disclose it - for the seabreeze app, that is coarse location, device ID and advertising data usage (the device ID is used to link advertising data to provide targeted advertising).
it also hasn't been updated in over 2 years, which can be a security concern.
The privacy policy for the app and the site are the same -
www.seabreeze.com.au/PrivacyPolicy and is reasonable.