ARVOSKY / Help & legal
Privacy policy
How ArvoSky processes your data and how to exercise your rights.
Updated September 16, 2026
No separate account. No ads. No advertising tracking. Weather requests need a location. You can search for a city or optionally allow device location access. ArvoSky does not sell personal data.
1. Controller and contact
The controller for the processing described here is Vincent Tristan Florian Wilhelm Tietze, c/o Online-Impressum 9448, Europaring 90, 53757 Sankt Augustin, Germany. For privacy requests, email quizel.support@protonmail.com with “ArvoSky Privacy” in the subject. Additional contact information is in the Legal notice.
This policy covers the ArvoSky app and this support website, including the current optional Plus features.
2. Weather, place search and location
The app stores selected and saved places, including names, countries, coordinates and time zones, locally on your device. To request weather, it sends coordinates and the time zone to the ArvoSky backend hosted by Cloudflare. Before requesting provider data or caching a forecast, the backend rounds coordinates to three decimal places. This is approximately 100 metres of north–south resolution and still counts as precise location under Apple’s privacy categories. The app may initially send more accurate coordinates supplied by the device or place search to the backend.
Apple WeatherKit receives the rounded coordinates for the forecast. Rainbow receives the same rounded coordinates for Plus minute precipitation. Weather maps send the requested map areas and times through the backend to Rainbow or the German Weather Service (DWD). Through this path, these providers do not receive your Apple purchase proofs or your direct device IP address from us; they see the backend’s connection.
Place search, reverse geocoding, basemaps and satellite imagery use Apple services directly. Apple may process search terms, map areas, location and connection information for these services. Apple’s privacy policy also applies.
Device location is used only with your iOS permission and when requested for local weather. There is no continuous background location tracking. Manual city search remains available without location permission.
3. Purchases and Plus access
Apple handles subscriptions and payments. We do not receive card or bank details. To verify Plus access, the app sends a transaction ID and an Apple-signed purchase proof to the backend. It checks the product, original transaction ID, validity, expiry and revocation with Apple. An original transaction ID can associate purchases belonging to the same subscription; we treat it as a pseudonymous identifier, not anonymous data.
After verification, the app receives a signed access session valid for up to 15 minutes, never longer than the remaining subscription entitlement. Purchase identifiers also support short-term request limits for abuse prevention. We do not maintain a permanent customer or purchase database in the weather backend or store complete purchase proofs there.
4. Infrastructure and website
Cloudflare provides the backend and hosts this static website on Cloudflare Pages. Connection, delivery and security operations process information including IP addresses, timestamps, requested addresses and technical HTTP information. Backend request limits use IP addresses or pseudonymous subscription identifiers. Our application logging of weather and purchase requests is disabled.
This website embeds no advertising or analytics scripts, external fonts or media, and sets no cookies or local browser identifiers itself. Cloudflare may process technical data for its own infrastructure and security operations, separately from our disabled application logging. Its privacy policy explains this processing and retention.
When you open an external link or your email app, that service’s privacy terms also apply. Visiting this page does not send a support email.
5. Support
If you contact us, we process your email address, any name you provide, your message and voluntary attachments to respond. The support mailbox shared by ArvoSky and Quizel uses Proton Mail (Proton AG, Switzerland). The apps’ usage data are not automatically combined. See Proton’s privacy policy.
6. Purposes and legal bases
- Weather and purchase verification: providing requested services and performing the usage contract, Article 6(1)(b) GDPR.
- Optional device location: your consent, Article 6(1)(a) GDPR, which you can withdraw in iOS at any time. Manually requested places do not require device location permission.
- Security and delivery: our legitimate interest in reliable, abuse-resistant services, Article 6(1)(f) GDPR.
- Support: Article 6(1)(b) GDPR for contract-related requests; otherwise our legitimate interest in answering enquiries under Article 6(1)(f).
- Legal obligations: Article 6(1)(c) GDPR where law requires retention or disclosure.
The relevant data are needed for the feature you request: local weather needs a location, and Plus needs entitlement verification. Device location access and contacting support are optional. ArvoSky does not profile you or make automated decisions with legal or similarly significant effects. Weather suggestions use deterministic rules applied to forecast data.
7. Retention and deletion
| Data | Duration and purpose |
|---|---|
| Places and settings | Stored locally until changed or the app is deleted. Manage any device/iCloud backups separately with Apple. |
| Weather forecasts | A temporary backend cache with rounded coordinates lasts up to 15 minutes, less if the provider data expire earlier. Entries contain no IP address or subscription identifier. The app keeps forecasts in memory, without a separate persistent forecast history on the device. |
| Weather maps | Permitted map tiles are cached on the backend for up to one hour; metadata for up to two minutes. Temporary device caches support map rendering. Tile cache entries contain no user identifier. |
| Minute precipitation | Usable app memory for up to ten minutes. Backend caching only where provider headers expressly permit it, for up to ten minutes and no longer than the data remain valid. |
| Purchase checks and access | Purchase proofs are processed during verification and not kept in our own database. Access sessions last up to 15 minutes. Request limits use 60-second windows; this is the assessment period, not a claim about Cloudflare’s internal deletion periods. |
| Budget counters | Monthly totals of provider requests, without IP addresses, coordinates or user identifiers. The current counter is replaced on the first request of the next month. |
| Support correspondence | Closed enquiries are normally deleted no later than twelve months after closure. If legal retention requirements or specific legal claims require longer retention, we retain only what is needed and delete it when that reason ends. |
Cache periods above are our application’s technical validity limits. Providers’ independent legal obligations and security processing, and device backups, follow their own rules. For an access request, we determine which information about you remains available and can be attributed to you.
8. Recipients and international processing
Recipients are Cloudflare for hosting and delivery; Apple for weather, maps, search and purchases; Rainbow (Weather Forecast Technologies Ltd, Cyprus, and affiliates described in its provider terms) for global maps and minute precipitation; DWD for regional radar; and Proton for support email. Required data are described above. Authorities receive data only when legally required.
Services may process data outside the EU/EEA, particularly in the United States and Switzerland. Cloudflare’s Data Processing Addendum addresses subprocessors and international transfers, including EU Standard Contractual Clauses. Depending on the recipient, adequacy decisions or other safeguards under Articles 44 et seq. GDPR apply. Apple and Proton explain their respective safeguards in the linked privacy notices. Contact us for information about safeguards applicable to a specific processing operation and copies of available safeguards.
9. Your rights and choices
Subject to applicable legal conditions, you have rights of access, rectification, erasure, restriction and data portability. You may withdraw consent for the future at any time, without affecting the lawfulness of earlier processing.
Right to object: you may object to processing based on legitimate interests on grounds relating to your particular situation (Article 21 GDPR). Email our privacy contact. We may need proportionate information to locate the data and confirm your entitlement; do not send passwords.
Change location permission in iPhone Settings → Privacy & Security → Location Services → ArvoSky. Delete the app to remove local app data; manage subscriptions separately with Apple. Since there is no ArvoSky account or permanent weather history, we cannot reconstruct data we do not hold or can no longer attribute to you.
You may lodge a complaint with a data protection supervisory authority, particularly where you habitually reside or work, or where the alleged infringement occurred (Article 77 GDPR).
10. Changes
We update this policy and the required App Store disclosures when features or data flows change. The date above identifies the current version. We obtain consent where a new processing operation requires it.