uvær · Privacy

Privacy policy

Kristoffer Iversen operates uvær and is responsible for personal data. Contact: support@uvær.app.

Summary

You do not need an account. The app has no ads and does not use tools that measure how you use it.
uvær uses coordinates to fetch the forecast and radar for the place you are viewing.
When you turn on alerts or start a Live Activity, we store the place and codes from Apple that let us send updates to your device. With Follow my location, we also store your iPhone’s last reported position and the time it was reported.
The service caches weather data and stores technical information to protect against abuse.
You can stop Live Activities and turn off alerts in the app. This asks the server to delete the corresponding registrations. See the retention periods and steps below.

The information we use

Forecasts and radar: When you open a place, the app sends coordinates with four decimal places, and optionally the altitude, to our service. The service fetches weather data from the Norwegian Meteorological Institute. Radar requests contain coordinates for the map view, which can show the area you are viewing. While the Places tab is open, weather data is fetched for saved places, and search results are checked for radar coverage. These requests also use coordinates.
Your location and place names: To show the name of your current location, the app sends coordinates directly to Kartverket’s place-name service. Apple may also receive the coordinates to find a city name if needed. The app keeps an area or city name, not an address or building name. Coordinates with four decimal places can still show your precise location. If you have chosen approximate location in iOS, the app uses the location iOS provides.
Search and maps: Apple provides place search and background maps through MapKit. Your search text and map view are sent to Apple. Our service receives coordinates when the app fetches weather data for a search result.
Alerts and Live Activities: When you turn on alerts or track a place with a Live Activity, we receive coordinates, place names, settings and codes from Apple used to send alerts and updates to your device. These codes are called push tokens and are used for notifications, Live Activities and widgets. We also store information about the shower being tracked so you do not receive repeated alerts about the same shower. With Follow my location, we store the last position your iPhone reported and the time it was reported. Push tokens link the place to your device, so this information is not anonymous.
Information on your device: Saved places, settings and the latest forecast are stored on your device. Saved places and their alert settings can also sync between iPhone and Apple Watch.
Protection against abuse: Apple App Attest helps us check that requests come from the app. We store evidence from these checks, a public security key for each installation, counters and records used to block access. Temporary access keys are stored as hashes rather than in their original form. Your location is not part of these checks.
IP address: The service briefly uses your IP address to limit the number of requests and protect against abuse. It is processed in memory or as a hash in temporary verification codes. We do not store a history of IP addresses. Cloudflare also handles network traffic, as described below.

Who receives information

Hetzner hosts our server in Helsinki, Finland. Encrypted backups are stored at Hetzner in Falkenstein, Germany.
Cloudflare handles traffic to our service. It may process IP addresses and information about requests, including URLs that contain coordinates.
The Norwegian Meteorological Institute receives requests for weather and radar from our service. It receives coordinates and the server’s IP address. We do not forward your IP address to it.
Kartverket receives coordinates from your device to find place names.
Apple provides maps, place search, city-name lookups, App Attest and the push service that sends alerts and updates to your device.

We do not sell your information or share it for advertising.

Our legal basis for using information

We use information to provide the forecasts and radar you request. The legal basis is performance of the agreement to provide the service, under Article 6(1)(b) of the General Data Protection Regulation (GDPR).

Optional rain alerts and Follow my location are based on your consent, under Article 6(1)(a). You can withdraw your consent by turning off these features in the app.

Apple and Cloudflare may process information outside the EEA under their own transfer safeguards.

How long information is stored

Weather and radar data is cached on the server, using coordinates as the lookup key, for up to 24 hours. Service outages may delay cleanup.
Rain alert registrations include the place, last reported position, settings, push tokens and information about the current shower. They are kept until the server receives your request to turn off alerts, or Apple reports that the notification token is invalid. Stopping a Live Activity does not turn off future alerts.
Live Activities have separate registrations. Track this place can last up to eight hours. A Live Activity for an individual shower can last up to two hours. The registration is removed when the server receives the stop request, the activity expires or Apple reports that the token is invalid.
Temporary security information includes verification codes, access keys, cancellation confirmations and checks of notification tokens. Cancellation confirmations are kept for two hours. Notification-token checks are stored as hashes for up to 24 hours. Expired verification codes and access keys are removed during later requests.
Public security keys, counters and records used to block access for each installation have no automatic expiry. We keep them to prevent abuse and ensure that blocks remain in effect.
Backups are encrypted. Copies that are at least seven days old are removed during daily maintenance. If maintenance fails, they may be kept longer.

Deleting a registration removes it from our active records. Deleted information may remain in database files and backups until it is overwritten or the copies are deleted.

Push tokens are encrypted when stored on the server. Coordinates and place names are not encrypted in the same way.

How to turn off features and request deletion

Choose Stop tracking in uvær if you are tracking a place with a Live Activity.
Open Settings → Rain alerts in uvær. Turn off alerts for all saved places and turn off Follow my location.
The app asks the server to delete the registrations. If this fails, it tries again later. Until the server receives the change, it may continue processing the last registration.

You can limit location access in iOS Settings. Alerts for saved places do not need Always location access.

Deleting the app does not automatically remove registrations from the server. After reinstalling the app or changing phones, the app may no longer have the information it needs to request deletion. Contact us at support@uvær.app and we will help.

Your rights

You can request access to, correction of or deletion of your personal data. You may also have the right to restrict processing, receive a copy of your data or object to processing, depending on the information and legal basis involved. Write to support@uvær.app to exercise your rights. We respond without undue delay, normally within one month. If we need more time, we will let you know within that period and explain why.

You can complain to Datatilsynet, the Norwegian data protection authority.

Children

uvær is not specifically directed at children. We do not knowingly collect personal data from children.

The website

The website does not use cookies or tools that measure how you use its pages. Cloudflare serves the website and handles network traffic. App Store badges on the landing page are loaded from Apple. When your browser fetches them, Apple receives your IP address and standard information about the request.

Changes

We update this policy when the app or service changes. For significant changes, we will notify you in the app and explain what is changing.