Weather Privacy Policy

Introduction

This policy describes how Rovyn LLC handles information in Weather on iOS and Android. The public name of the app is Weather. The iOS bundle id and the Android application id are com.rovyn.weather.

Personal data is not sold and is not used for cross-app tracking.

Data we collect

Location

iOS asks for location only while you use the app. Android asks for precise and approximate location while you use the app, and does not ask for background location.

On iOS you can type a place name. That search uses Apple MapKit on iOS only. The typed query goes to Apple. Rovyn gets the place you choose as coordinates, not the query text. Android does not run that search. Android asks for latitude and longitude when the device gives no position.

A saved place stores a label and coordinates. We keep saved-place coordinates rounded to 2 decimal places (about 1.1 km). The device’s raw GPS fix is not what gets stored as the saved place.

Install identifier

The app creates an install key and a device id for that installation. Rovyn stores a one-way fingerprint of the device id, not the raw device id, plus the installation public key. The raw device id is not written into logs.

Account identifiers

Apple and Google account identifiers are collected only when the user signs in. Sign in with Apple does not request name or email. Android uses Sign in with Google. We may receive a name or email in the Google ID token. We do not store that name or email. We store the sign-in provider and a one-way fingerprint of the Apple or Google account identifier, not the raw identifier.

Anonymous use does not require a name or email. The apps do not offer a username and password. Optional sign-in is not required to buy a subscription.

Sign-in sessions

When you use the app while signed in, we keep a session so you stay signed in. Session tokens are stored as a one-way fingerprint.

Wallpaper history

When a wallpaper is shown or set, we keep a history for that account. Each row points at a shared image in the city weather pool. It records which image was shown or set, the city slug (not coordinates), the quality tier, and the seen and set times. The history does not store image bytes or the generation prompt. Public wallpaper files live in that shared pool. They are not stored in a folder named for your account. The public path uses city, weather condition, time of day, season, and image id. It does not include your account id.

Mail you send us

If you email hello@rovyn.tech, we receive your email address and the message. We keep that mail so we can reply. This policy does not add a retention period in days for mailbox mail.

Logs

Hosting and logging providers process what is needed to run the Weather API. Diagnostic and platform logs that retain data for operating the Weather API are kept for 30 days. This policy does not claim that client IP is retained in those logs.

Purchases

Plus and Pro, monthly and annual, are sold through Apple and Google. Apple or Google bills the subscription. Rovyn does not take a card number. The app unlocks only after Rovyn confirms the purchase.

Photos

Photos are saved only when you ask. iOS uses add-only Photos access so it can save one photo. iOS does not read the photo library. On Android, when you save, the app writes one photo to your Pictures folder. Setting the wallpaper does not read your photo library. In both cases, neither platform uploads the user’s photo library.

Crash diagnostics

Firebase Crashlytics on Android receives crash stack traces, the app’s state at the crash, and point-in-time device metadata (model, OS, RAM, disk, and whether the device is rooted). It also receives a crash report id for that install. Firebase keeps those crash reports and identifiers for 90 days. On iOS, Apple MetricKit stays on the device. The app does not upload MetricKit payloads to Rovyn or to a crash-reporting vendor. iOS does not use Crashlytics. Android does not use MetricKit.

There is no advertising SDK, no Firebase Analytics, and no App Tracking Transparency / IDFA.

Not collected as a product feature

The app does not collect contacts or advertising identifiers. It does not ask you to type a name or email. Name or email may still arrive in a Google sign-in token, as described above, or when you write to hello@rovyn.tech.

How we use data

Weather sends coordinates to request a forecast and to build a wallpaper. Wallpaper history records which shared images you have already seen or set, for the period that matches your plan. A saved place keeps a label and rounded coordinates so you can return to it. Sign-in, when you choose it, connects a purchase and account deletion to that account. A sign-in session keeps you signed in until it expires or is revoked. A subscription unlocks only after Rovyn confirms the purchase. Mail sent to hello@rovyn.tech is kept so we can reply. Hosting and logging providers process what is needed to run the service. Diagnostic and platform logs that retain data for operating the Weather API are kept for 30 days. On Android, Firebase Crashlytics uses crash stack traces, app state at the crash, device metadata, and install identifiers to show why the app stopped. On iOS, MetricKit stays on the device, and the app does not upload those payloads to Rovyn or to a crash-reporting vendor. The account, linked sign-in, devices, and saved places are kept while the account exists. We do not use this data for cross-app tracking.

Data sharing

Personal data is not sold. It is not used for cross-app tracking. Weather sends data to the recipients below, and only as described.

Rovyn receives coordinates for weather and wallpaper, plus account data.

Open-Meteo (terms and privacy) is the default weather provider. It needs no API key. Weather passes latitude and longitude not rounded first.

OpenWeatherMap (privacy policy) is the fallback, only when an API key is set. With no key, it is not called.

BigDataCloud (privacy policy) is the reverse-geocoder. Rovyn’s servers send it coordinates rounded to 2 decimal places. BigDataCloud does not receive an account id, device id, name, or email. The app does not call BigDataCloud from the device.

Apple MapKit on iOS only: the typed place-name query goes to Apple. Rovyn gets the chosen coordinates. Android has no MapKit search.

Replicate Flux (privacy policy) and Stability AI (privacy policy) run when that provider’s API key is set. The prompt is weather condition, time of day, and city slug with hyphens as spaces. For example, seattle-wa becomes “seattle wa”. The prompt includes no account id, device id, or raw GPS. A provider is not called without a key.

Apple (Sign in with Apple, App Store billing, App Attest). App Attest lets Rovyn check that the app and the device are genuine when the app sets up.

Google (Sign in with Google, Google Play billing, Play Integrity, Android Crashlytics). Play Integrity lets Rovyn check that the app and the device are genuine when the app sets up. Crashlytics receives stack traces, app state at the crash, device metadata, and install identifiers.

Cloud hosting covers cloud compute, database, file storage, and logging and monitoring for the Weather API. Our cloud host is Microsoft Azure, in the United States. Microsoft processes what is needed to run the service.

The hello@rovyn.tech mailbox host is Microsoft 365, which is company-owned. It receives mail you send us so we can reply.

Data retention

We keep each kind of data for the period or reason below.

Account, linked sign-in, devices, and saved places

Kept while the account exists. Removed when the account is deleted.

Sign-in sessions

A session lasts until it expires or is revoked. After that, we delete it after about 30 days. Removed on account deletion.

Wallpaper history

On Free, wallpaper history is not recorded. On Plus, we keep it for 7 days. On Pro, we keep it for 90 days. Each account also has a cap on how many history rows we keep. Wallpaper history rows are removed when the account is deleted. Images in the shared city weather pool stay.

Privacy export file

An export file is written to private file storage, not the shared public wallpaper pool. You can download the export for up to 7 days. After that it can no longer be downloaded and is deleted automatically shortly afterward. Removed when the account is deleted.

Diagnostic and platform logs

Diagnostic and platform logs that retain data for operating the Weather API are kept for 30 days. This policy does not claim that client IP is retained in those logs.

Android crash reports

Firebase keeps those crash reports and identifiers for 90 days. On iOS, MetricKit stays on the device.

Purchases after account deletion

After you delete your account, we keep a pseudonymised record of the store purchase (kept under a stand-in ID, no longer connected to your account) for about seven years. It stays tied to the store transaction so that a later restore with valid proof from the App Store or Google Play can be matched, and the same purchase is not active on two accounts at once. If you restore it, it moves to the account you restore it on. What stays is subscription and plan status facts, a store purchase ownership record, and a deletion-request ledger.

Mail you send us

Mail sent to hello@rovyn.tech is kept so we can reply. This policy does not add a retention period in days for that mailbox.

Photos

We do not store your photos on our servers. A photo you save stays on your device.

Your choices and rights

You can refuse an operating-system permission prompt. On iOS, place-name search through Apple MapKit can stand in for device location. On Android, when the device gives no position, the screen asks for latitude and longitude. Sign-in is optional.

Account deletion is the in-app action: Settings → Account → Delete account. That is the preferred and strongest path. After the account is deleted, that install is cleared on the device.

If you cannot open the app, request deletion at Delete your Weather account. Email hello@rovyn.tech with your Weather Account ID from Settings. The Account ID identifies the account. It is not proof that you own it. For an email request, we may ask for additional information to confirm the account is yours. We may decline if we cannot verify that. Rovyn will never ask for your Account ID in an unsolicited email. Cancel the subscription first in Apple subscription settings or Google Play subscriptions. Deleting the account does not cancel the subscription.

You can request an export of your Weather account data in the app, whether or not you have signed in. In the app, open Settings, tap Request my data, then on the Account screen tap Request my data. When the export is ready, tap Download my data. The export is prepared as a file. The app downloads it over an authenticated request and hands it to the OS share sheet so you can save or share it.

Any download link the service issues expires after 15 minutes. You can download the export for up to 7 days. After that it can no longer be downloaded and is deleted automatically shortly afterward. After an export is ready, you can request a new one once 24 hours have passed.

Our servers tell apps and networks not to store export files or export status. Export download tokens are removed from our server logs.

You can also email hello@rovyn.tech to ask for a copy of your Weather account data.

The export file is private.

The export covers the account, linked identities, devices, sessions, quota, entitlements, saved places, and wallpaper history, with a count for each category. Wallpaper history in the export is that same list: which shared image was shown or set, the city slug, the quality tier, and the seen and set times. It does not include image bytes or the generation prompt. An export may include legacy internal API-key metadata (id, tier, status, and created time) that ordinary app accounts do not use. It does not include the secret. The export also omits hashed session tokens, hashed device ids, and hashed provider subjects.

Send privacy questions to hello@rovyn.tech.

Children’s privacy

Weather is for a general audience. It is not directed to children under 13. We do not knowingly collect personal information from children under 13.

When you grant location permission, Weather sends precise location off the device so it can request a forecast and build a wallpaper.

Weather can keep an account: linked sign-in, devices, saved places, and the other account data described under Data retention. The app does not ask you to type a name or email. Sign in with Apple does not request name or email.

If we learn that a child under 13 used the app, we delete the associated account data. The Data retention section describes what deletion removes and what we keep. Account deletion is the in-app action: Settings → Account → Delete account. That is the preferred and strongest path. After the account is deleted, that install is cleared on the device.

If you cannot open the app, a parent or guardian can request deletion at Delete your Weather account. Email hello@rovyn.tech with the Weather Account ID from Settings. The Account ID identifies the account. It is not proof that you own it. For an email request, we may ask for additional information to confirm the account is yours. We may decline if we cannot verify that.

A parent or guardian who believes a child under 13 has used Weather can write to hello@rovyn.tech.

Do Not Track

The rovyn.tech website and the Weather app do not track you across third-party websites or apps. The website does not include analytics or advertising scripts. The app has no advertising SDK, no Firebase Analytics, and no App Tracking Transparency / IDFA. Because we do not do that kind of tracking, we do not change the website or the app in response to a browser Do Not Track (DNT) signal.

Contact

Privacy questions: hello@rovyn.tech

Rovyn LLC

Changes

This page is updated when the policy changes. The last-updated date changes when the policy changes.