Privacy Policy – AVERA Weather

Last updated: 2026-04-01 | Version: 2.0.0

1. Data Controller (Art. 13(1)(a) GDPR)

The data controller is: NOIRYX, represented by Kevin Koeckeritz, Erich-Zeigner-Allee 3, 04229 Leipzig, Germany. Email: noiryxde@gmail.com.

2. Data Protection Inquiries

For data protection inquiries, contact us at: noiryxde@gmail.com or by post at the above address with the note 'Data Protection'.

3. No User Account Required

AVERA Weather does not require registration or a user account. The app operates with an anonymous device identifier (device ID) generated locally on your device. This identifier is not linked to your name, email address, or any other personally identifiable information.

4. Purposes and Legal Bases for Processing (Art. 13(1)(c), (d) GDPR)

We process your data for the following purposes:

4.1 Provision of Weather Service

Processing of location data (GPS coordinates) to display local weather information. Location data is used only for real-time queries to weather service providers and is not permanently stored on our servers. Legal basis: Performance of contract (Art. 6(1)(b) GDPR).

4.2 Saved Locations and Settings

You can save locations and settings (language, units, theme) on our servers, linked to your anonymous device identifier. This data is used solely for service delivery. Legal basis: Performance of contract (Art. 6(1)(b) GDPR).

4.3 Push Notifications

When you enable push notifications, we store your Expo push token and weather alert settings (condition type, threshold, location) on our servers. We periodically check current weather data against your thresholds and send notifications via the Expo Push Notification Service. Legal basis: Consent (Art. 6(1)(a) GDPR). You can disable notifications at any time in your device settings.

4.4 Travel Routes (Premium)

Premium users can create travel routes with stops. Route data (names, coordinates, dates) is stored on our servers, linked to your device identifier. Legal basis: Performance of contract (Art. 6(1)(b) GDPR).

4.5 Payment Processing

Premium subscriptions are processed through RevenueCat and the respective app store (Google Play). We do not receive direct payment data. RevenueCat processes an anonymous user ID and purchase information. Legal basis: Performance of contract (Art. 6(1)(b) GDPR).

4.6 Support

When using our support feature, support tickets and messages are stored on our servers, linked to your device identifier. Legal basis: Performance of contract (Art. 6(1)(b) GDPR).

4.7 Legal Obligations

Retention of data to fulfill legal obligations. Legal basis: Legal obligation (Art. 6(1)(c) GDPR).

5. Categories of Data Processed (Art. 14(1)(d) GDPR)

We process the following categories of data: Location data (GPS coordinates, used only for real-time queries), Device identifier (anonymous, locally generated ID), Device information (platform, push token), Saved locations and settings, Weather alert settings (condition type, threshold, location), Travel route data (stops, dates, coordinates), Support tickets and messages, Consent data (status and timestamps).

6. Recipients and Third Parties (Art. 13(1)(e) GDPR)

Your data is shared with the following recipients: Weather data providers (Open-Meteo, OpenWeatherMap, WeatherAPI, Met.no, SMHI, Bright Sky/DWD, JMA, BOM, GEM, ICON-EU, CMA — only anonymized coordinates are transmitted), Expo Push Notification Service (push tokens and notification content), RevenueCat (anonymous user ID and purchase status for premium subscriptions), Cloud hosting provider Replit (data storage and application hosting). All recipients are contractually bound to GDPR compliance.

7. International Data Transfers (Art. 13(1)(f) GDPR)

Some of our service providers (e.g., Expo/React Native, RevenueCat) are based in the USA. Data transfers are carried out on the basis of EU Standard Contractual Clauses (SCCs) or EU adequacy decisions. Details are available upon request.

8. Retention Periods (Art. 13(2)(a) GDPR)

Location data: Not permanently stored, used only for real-time queries. Saved locations and settings: As long as the app is in use; deletable via the app or by deletion request. Push tokens and weather alerts: As long as notifications are enabled; deleted upon deactivation. Travel routes: As long as active; deletable via the app. Support tickets: 12 months after resolution. Consent data: 3 years. Deletion requests: 30 days after completion.

9. Your Rights as a Data Subject (Art. 13(2)(b)-(d) GDPR)

You have the following rights: Right of access (Art. 15 GDPR), Right to rectification (Art. 16 GDPR), Right to erasure (Art. 17 GDPR), Right to restriction of processing (Art. 18 GDPR), Right to data portability (Art. 20 GDPR), Right to object (Art. 21 GDPR), Right to withdraw consent (Art. 7(3) GDPR). To exercise your rights, contact us at noiryxde@gmail.com or use the data deletion feature in the app (Settings > Delete Data).

10. Local Data Storage

The app stores settings and preferences locally on your device (AsyncStorage). This includes: theme, language, units, consent status, and cached weather data. This data is not transmitted to our servers unless you use synchronization features (e.g., saved locations, weather alerts). No tracking cookies are used.

11. Automated Decision-Making (Art. 13(2)(f) GDPR)

The app automatically checks weather conditions against your configured thresholds and sends notifications. This is not automated decision-making within the meaning of Art. 22 GDPR, as no legal effects or similarly significant impacts arise.

12. Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority is: The Saxon Data Protection and Transparency Commissioner (Sächsischer Datenschutz- und Transparenzbeauftragter), Devrientstraße 5, 01067 Dresden, Germany.

13. Changes to This Privacy Policy

We reserve the right to update this privacy policy as needed. The current version is always available in the app and via our API. The date of the last update is indicated above.