Privacy Policy

Protecting your data is important to us. WeatherPush is a weather service by Atkuva GmbH, available as an app for iOS and Android as well as an installable web app (PWA) and as a website at weatherpush.de. We process as little personal data as possible. This policy gives you an overview of what happens to your data when you use WeatherPush.

Data Controller

The controller responsible for data processing in this app is:

Atkuva GmbH
Sohldfeld 22
31139 Hildesheim
Germany

Phone: +49 5121 9289245
Email: mail@atkuva.de

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

Hosting

The backend services of WeatherPush (e.g. the weather API and the delivery of notifications) are hosted by the following provider:

Uberspace (Jonas Pasche)
Kaiserstr. 15
55116 Mainz, Germany

When you use the app, technical access data (e.g. IP address, time of the request) is processed on the host's servers to the extent necessary for a secure and stable service (Art. 6 (1) (f) GDPR). A data processing agreement (DPA) is in place with the host.

Data Collection

We only collect data where it is technically necessary. No personal profiles are created.

Weather Data and Location Search

To display the weather, the app transmits the location you selected or that was determined (coordinates) to our weather API in order to retrieve the relevant weather data. The same applies to the widgets on iOS and Android, which fetch the forecast for the place shown in the app. Our server retrieves the weather data for these coordinates from external weather services (the Norwegian Meteorological Institute / met.no and Bright Sky, which provides data from the German Weather Service). Only the coordinates are transmitted, not your IP address or your device. Location search queries are sent only to our WeatherPush API and processed there using a locally hosted database built from the GeoNames dataset. The apps name the current location using our local GeoNames database. Older versions of the Android app first used the operating system or device provider's geocoding service for this and fell back to our GeoNames database when it returned no result. The legal basis is our legitimate interest in a functioning location search (Art. 6 (1) (f) GDPR).

Location Data

For the plain weather display, your location is not stored in a user database. Only if you enable weather alerts or Live Activities do we store the associated location (coordinates and place name) together with your push token on our server, for as long as the alerts or Live Activities are active (see “Push Notifications”). When you disable them, this data is deleted from the server. There is no user account; the data is not linked to your name or e-mail address.

Push Notifications

If you wish, WeatherPush can inform you about weather warnings (e.g. frost, heat, rain) via push notification. This feature is optional and only active if you enable notifications in the app and grant permission on your device or browser.

When you enable notifications, we transmit to our server (Uberspace) a device-specific push token (push endpoint), your language setting, the platform (iOS, Android or web), the alerts you have chosen with their thresholds and the associated location, whether an alert should arrive as a notification or as a Live Activity, and whether your device can show Live Activities. If you choose “My location” for an alert, the app sends your approximate current location when you open it, replacing the one stored before; the location is not determined in the background. This data is stored so that we can send you the requested warnings. The push token does not allow you to be identified personally and does not grant access to any other data on your device.

Delivery of Notifications

On iOS devices we send notifications and Live Activity updates directly to the Apple Push Notification service (APNs) of Apple Inc. (USA). On Android devices we send notifications directly to Firebase Cloud Messaging (FCM) of Google LLC (USA). For older versions of the app we use the push service of Expo (650 Industries, Inc., USA), which forwards the notification:

• On Android devices via FCM.
• On iOS devices via APNs.

In the web app (PWA) we send via the push service of your browser (e.g. Mozilla, Google or Apple).

In doing so, the push token and the content of the notification are transmitted to these services. These providers in the USA may offer a level of data protection that does not correspond to that of the EU. The legal basis for the processing is your consent given by enabling notifications (Art. 6 (1) (a) GDPR; where your device is accessed, additionally § 25 (1) TDDDG).

Live Activities (iOS)

If you set up an alert as a Live Activity in the iOS app (for example “Rain soon”), we additionally store on our server your language, your units and two tokens that Apple issues for your device: one to start the Live Activity and one to update the running one. The Live Activity uses the places of your alerts; older app versions store the place you are viewing instead (coordinates, place name). We check the forecast regularly and send Apple the updates for the lock screen and the Dynamic Island. This data is stored only as long as such an alert is set up; removing it, or disabling notifications entirely, deletes it. The legal basis is your consent (Art. 6 (1) (a) GDPR).

Withdrawal

You can disable notifications in the app at any time or revoke the permission in your device or browser settings. After deactivation, no further notifications are sent and the stored push token is deleted.

Storage Period

We store personal data only for as long as is necessary for the respective purposes. The data stored for push notifications and Live Activities (push token, Live Activity tokens, language setting, warning settings, wind unit, location) is deleted as soon as you disable notifications or the respective Live Activity, or the token becomes permanently invalid.

Legal Bases and Withdrawal

Where we obtain your consent, Art. 6 (1) (a) GDPR is the legal basis. For processing that is necessary for the provision and security of the service, we rely on our legitimate interest (Art. 6 (1) (f) GDPR). You can withdraw any consent given at any time with effect for the future.

Your Rights

You have the right to information, rectification, erasure and restriction of the processing of your personal data, as well as the right to data portability and to object. You also have the right to lodge a complaint with a data protection supervisory authority. To exercise your rights, an informal message to the controller named above is sufficient.

Encryption

Communication between the app and our servers is encrypted via TLS (HTTPS) to protect your data against access by third parties.

If you have any questions about data protection, please use the contact options provided in the imprint.