Privacy Policy for Interactive Weather Limited

1. Introduction

Interactive Weather Limited ("we", "us", or "our") is committed to protecting the privacy of our users ("you" or "your"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our online weather radar and alert service ("Service"), including our website, desktop applications, and mobile applications.

2. Information We Collect

2.1 Location Data

We collect location data to provide local weather information and weather alert notifications. The way location data is collected depends on the platform and permissions you choose:

• On the website and desktop applications, location may be processed to provide local weather features, subject to the permissions and settings available on that platform.
• On the iOS and Android mobile applications, we may store the latest location received from your device to help send weather alert notifications for your current or most recently reported area.
• If background location is enabled, the mobile application may attempt to send location updates when your device records a material location change, such as around 50 metres, subject to operating system behaviour, connectivity, battery settings, and the permissions you grant.
• If background location is not enabled, the mobile application may send a location update when you use or foreground the app and, while the app remains open, approximately every 10 minutes.
• We store latitude, longitude, and the time the location was recorded. The precision of the location depends on the permission you grant in the app and through your device settings.
• We store only the latest location for a mobile device in the live service and do not keep a location history in the live service. Earlier locations may remain temporarily in backups for up to 7 days.
• Weather alert notifications are sent using the last location stored server-side for your mobile device. If no location has been received and stored for your device, weather alert notifications will not be sent. If background location is not enabled, the stored location may become out of date when you are not actively using the app, which may affect the accuracy of location-based alerts.
• Approximate location may be shared with content partners, such as Hall Enterprises, only when you explicitly choose to use that optional location-sharing feature.

2.2 Mobile Device Identifiers and Push Notifications

Push notifications are available in the iOS and Android mobile applications. They are not used in the browser or desktop applications unless we say otherwise. For the mobile applications, we collect and store:

• A device UUID generated for the mobile app installation
• A Firebase Cloud Messaging ("FCM") token used to route push notifications to your device
• The push provider, which is currently FCM
• The platform, such as iOS or Android
• The app version, such as 1.6.0
• When the device was last seen by our service
• The latest device location and when that location was recorded, as described above

The mobile app creates the device UUID and receives an FCM token before you grant notification permission. We use these identifiers to register the device, manage push notification delivery and preferences, diagnose notification issues, and operate the Service. If you log in or register, the mobile device record is linked to your account. If you log out, the device record is unlinked from your account. If you delete your account, associated mobile device records, FCM tokens, and the latest stored device location are deleted from the live service, subject to backup retention described below.

Notifications are optional and can be configured or disabled in the app and through your device settings. We send generic notification content through FCM. We do not send your precise location to FCM.

2.3 Information Collected by Third Parties

We use third-party services that may collect information:

• Apple: We may share your usage and consumption of purchased content as part of our efforts to resolve refund requests
• UserBack: May collect your email address for feedback purposes
• Rollbar: Used for error tracking and may collect technical information about your device and usage
• Fathom Analytics: Used for website analytics and event tracking; collects privacy-preserving usage information such as page views, referring sites, browser and device type, and completed events, and does not use cookies
• Cloudflare: Used for analytics and collects anonymized usage data
• Mapbox: Used to provide map functionality and may process your location data
• Google Firebase Cloud Messaging (FCM): Used to deliver push notifications to the iOS and Android mobile applications and may process push tokens, device or app instance information, and generic notification content
• RevenueCat: Processes subscription-related information, including (but not limited to):
  • Device type and operating system
  • Last seen time in the app
  • Purchase tokens and receipts
  • Optional user IDs and metadata
  • Email address

2.4 Subscription Information

We process subscriptions through:

• Apple App Store
• Google Play Store
• RevenueCat (our subscription management partner)

We do not directly collect or store your payment information. All payment processing is handled by these third-party providers.

2.5 User Account Information

When you register for a WeatherWise account, we collect the following personal information:

• Name
• Email address
• Password

This information is used exclusively for account authentication and subscription management purposes.

• Storage and Security: Your account details are stored on secure infrastructure provided by Laravel Cloud. Passwords are stored using industry-standard practices, such as hashing, to protect your credentials.
• Data Retention: Your account information is held indefinitely until you request its deletion.
• Data Sharing: For the purpose of synchronizing subscription data across devices, your account information is shared with RevenueCat. A unique account identifier (UUID) is assigned at registration to serve as a common identifier across our authentication system and RevenueCat.
• Mobile Device Linking: If you use the iOS or Android mobile application and log in or register, the device UUID, FCM token, platform, app version, last seen time, and latest stored device location are linked to your account so that we can provide account-based notification and service functionality.
• User Consent and Account Management: During registration, you confirm that you have read and agree to our End User License Agreement (EULA) and Privacy Policy by checking the consent box. To request deletion or changes to your account data (which cannot be made via the app or website), please contact us at [email protected].

We may display aggregate, real-time counts showing how many users are viewing specific content. This feature uses only anonymous counters and does not track or identify individual users or devices.

3. How We Use Your Information

We use the collected information to:

• Provide and maintain our Service
• Process and manage your subscription
• Display accurate map and weather data
• Send optional mobile push notifications and manage notification preferences
• Store the latest mobile device location to support location-based weather alert notifications
• Enable optional location sharing features
• Detect, prevent, and address technical issues
• Improve our Service

We do not sell your location, device, or push notification data, and we do not use that information for advertising or marketing.

3.1 Lawful Bases for Processing

Where UK GDPR applies, we rely on the following lawful bases:

• Contract: To provide the Service you request, including account, subscription, weather, map, and app functionality.
• Legitimate interests: To operate and secure the Service, maintain mobile device registration, deliver and diagnose push notifications, retain short-term backups, prevent misuse, and provide technical support.
• Consent: For optional background location tracking where required, optional partner location sharing, and any other processing where we ask for consent.
• Legal obligation: Where we must process or retain information to comply with applicable law.

4. Information Sharing and Disclosure

We may share your information with:

• Service providers: For hosting, database services, push notification delivery, technical support, diagnostics, security, and service delivery
• Third-party vendors: As described in Section 2.3
• Content partners: Approximate location data, only when you explicitly choose to share it
• Authorised employees and contractors: For diagnostics, support, security, and operational purposes, only where they have a reason to access the information and are subject to contractual obligations

4.1 Location Sharing Feature

When you choose to share your location:

• Only approximate location data will be shared
• Sharing requires your explicit action
• You can stop sharing at any time
• Partners will only see a general representation of your location
• This feature is entirely optional
• The shared location is available to the partner only while it remains available through our systems for that feature

5. Data Retention

• Mobile device latest location: Retained in the live service as the latest location for that device until it is replaced, the device record is deleted, or the account is deleted where the device is associated with an account
• Mobile device records, including device UUIDs and FCM tokens: Retained while needed to provide mobile notification and service functionality; stale device records may be deleted if no activity is recorded for 12 months
• Backups: Retained for up to 7 days and may temporarily contain previous device locations, device identifiers, account data, and other service data
• Subscription data: Retained while your subscription is active
• User account information: Retained indefinitely until you request deletion
• Analytics data: As per our third-party providers' retention policies
• Server logs: May include IP addresses and are retained as needed for security, diagnostics, and service operation

6. Your Data Protection Rights

Under GDPR and other applicable laws, you have rights including:

• Access to your data
• Correction of inaccurate data
• Deletion of your data
• Objection to processing
• Data portability
• Withdrawal of consent

To exercise these rights, contact us at [email protected].

7. Subscription Management

You can manage your subscription through:

• Apple App Store (for iOS users)
• Google Play Store (for Android users)
• Your device's subscription settings

Please note that account deletion is not available via the app or website; to delete or request changes to your account information, please contact us at [email protected]. When your account is deleted, associated mobile device records are deleted from the live service, subject to backup retention.

8. International Data Transfers

Our Service is available globally through our website and through mobile applications where supported by the Apple App Store and Google Play Store. Your data may be processed in countries other than your own, including the United States. We use Laravel Cloud, Neon, Amazon Web Services, ISPTek, Google Firebase Cloud Messaging (FCM), and other service providers to host, store, route, and process service data. Authorised employees and contractors may access information for diagnostics, support, security, and operational purposes where they have a reason to do so.

Where personal data is transferred outside the UK or another jurisdiction with transfer restrictions, we take steps designed to protect that information, such as using service provider contracts, confidentiality obligations, access controls, and appropriate transfer safeguards where required. Service availability and features may vary by region due to technical, regulatory, or legal requirements.

9. Children's Privacy

Our Service is intended for users aged 16 and over. We do not knowingly collect personal data from anyone under 16.

10. California Residents

The following table summarizes what categories of personal information that Interactive Weather Limited has collected, disclosed, or sold within the last twelve (12) months.

This Notice of Collection is provided pursuant to the California Consumer Privacy Act of 2018 ("CCPA"), as amended by the California Privacy Rights Act of 2020 ("CPRA").

We collect the categories of personal information identified below for the business and commercial purposes described. We collect this information directly from you (e.g., when you create an account, subscribe, or contact us), automatically through your use of our app (e.g., device and usage data), and from third parties (e.g., analytics and payment providers).

We use this information to operate, provide, and improve our services, including to:

• Create and manage user accounts;
• Personalize app features;
• Deliver optional mobile push notifications;
• Process payments and manage subscriptions;
• Detect, prevent, and respond to security incidents and fraudulent activity;
• Debug, identify, and repair errors that impair functionality;
• Analyze app performance and usage trends;
• Communicate with you regarding your account, subscription, or service updates;
• Comply with applicable legal obligations.

Additional details, including whether we disclose information to service providers or share personal information for business purposes, are provided in the table above.

We do not sell or share personal information for monetary consideration. We also do not share personal information for cross-context behavioral advertising, as those terms are defined under the California Consumer Privacy Act of 2018 ("CCPA"), as amended by the California Privacy Rights Act of 2020 ("CPRA").

Because we do not sell or share your personal information, we do not offer an opt-out mechanism. If our practices change in the future, we will update this Privacy Policy and provide you with the opportunity to opt out.

Under the California Consumer Privacy Act of 2018 ("CCPA"), as amended by the California Privacy Rights Act of 2020 ("CPRA"), California residents have the right to limit the use and disclosure of "Sensitive Personal Information," as defined in Cal. Civ. Code § 1798.140(ae).

We do not collect or process Sensitive Personal Information for the purpose of inferring characteristics about you, nor do we use Sensitive Personal Information beyond what is reasonably necessary to provide the services you request. Sensitive Personal Information includes data such as precise geolocation, government-issued identifiers, racial or ethnic origin, religious beliefs, union membership, genetic data, health information, and information concerning sex life or sexual orientation.

Because we do not use Sensitive Personal Information in this way, we do not offer a mechanism to limit such use. If our practices change in the future, we will update this Privacy Policy and provide appropriate notices and options in accordance with applicable law.

11. Cookies and Tracking

We use Fathom Analytics for website analytics and event tracking. Fathom does not use cookies and is designed to provide privacy-preserving measurements such as page views, referrers, browser and device information, and completed events. To generate these measurements and protect its systems, Fathom may temporarily process technical information such as IP address and user-agent data.

We do not use cookies ourselves for analytics, but other third-party providers may use cookies or similar tracking technologies for their own services. See their respective privacy policies for details.

12. Changes to This Policy

We may update this policy periodically. Changes will be posted here with an updated date. Significant changes will be notified through our Service.

13. Contact Us

Questions about this policy? Contact us:

Email: [email protected]