ARVOSKY / Help & legal
Privacy policy
How ArvoSky processes your data and how to exercise your rights.
Updated September 17, 2026
No separate account. No ads. No advertising tracking. Weather requests need a location. You can search for a city or optionally allow device location access. ArvoSky does not sell personal data.
1. Controller and contact
The controller for the processing described here is Vincent Tristan Florian Wilhelm Tietze, c/o Online-Impressum 9448, Europaring 90, 53757 Sankt Augustin, Germany. For privacy requests, email quizel.support@protonmail.com with “ArvoSky Privacy” in the subject. Additional contact information is in the Legal notice.
This policy covers the ArvoSky app and this support website, including the current optional Plus features.
2. Weather, place search and location
The app stores selected and saved places, including names, countries, coordinates and time zones, locally on your device. To request weather, it sends coordinates and the time zone to the ArvoSky backend hosted by Cloudflare. Before requesting provider data or caching a forecast, the backend rounds coordinates to three decimal places. This is approximately 100 metres of north–south resolution and still counts as precise location under Apple’s privacy categories. The app may initially send more accurate coordinates supplied by the device or place search to the backend.
Apple WeatherKit receives the rounded coordinates for the forecast. Rainbow receives the same rounded coordinates for Plus minute precipitation. Weather maps send the requested map areas and times through the backend to Rainbow or the German Weather Service (DWD). Through this path, these providers do not receive your Apple purchase proofs or your direct device IP address from us; they see the backend’s connection.
Place search, reverse geocoding, basemaps and satellite imagery use Apple services directly. Apple may process search terms, map areas, location and connection information for these services. Apple’s privacy policy also applies.
Device location is used only with your iOS permission and when requested for local weather. There is no continuous background location tracking. Manual city search remains available without location permission.
Weather widget: When you add a widget, it can independently update the selected saved place through the same backend, including when the app is closed. It processes coordinates, time zone and technical connection data in the same way as a normal weather request. The widget does not obtain a new device location or send purchase proofs. iOS schedules updates. The app and widget share the necessary places, temperature unit and time-limited weather snapshots on your device. Remove the widget to stop its background requests.
3. Purchases and Plus access
Apple handles subscriptions and payments. We do not receive card or bank details. To verify Plus access, the app sends a transaction ID and an Apple-signed purchase proof to the backend. It checks the product, original transaction ID, validity, expiry and revocation with Apple. An original transaction ID can associate purchases belonging to the same subscription; we treat it as a pseudonymous identifier, not anonymous data.
After verification, the app receives a signed access session valid for up to 15 minutes, never longer than the remaining subscription entitlement. Purchase identifiers also support short-term request limits for abuse prevention. We do not maintain a permanent customer or purchase database in the weather backend or store complete purchase proofs there.
4. Infrastructure and website
Cloudflare provides the backend and hosts this static website on Cloudflare Pages. Connection, delivery and security operations process information including IP addresses, timestamps, requested addresses and technical HTTP information. Backend request limits use IP addresses or pseudonymous subscription identifiers. Our application logging of weather and purchase requests is disabled.
This website embeds no advertising or analytics scripts, external fonts or media, and sets no cookies or local browser identifiers itself. Cloudflare may process technical data for its own infrastructure and security operations, separately from our disabled application logging. Its privacy policy explains this processing and retention.
When you open an external link or your email app, that service’s privacy terms also apply. Visiting this page does not send a support email.
5. Support
If you contact us, we process your email address, any name you provide, your message and voluntary attachments to respond. The support mailbox shared by ArvoSky and Quizel uses Proton Mail (Proton AG, Switzerland). The apps’ usage data are not automatically combined. See Proton’s privacy policy.
TestFlight beta versions
In TestFlight, Apple supplies us with usage and crash information and feedback you choose to send. This may include device/version details and, depending on the invitation, your name and email. We use it to fix and improve the app, without an additional analytics SDK. Apple’s automatic TestFlight collection cannot be individually disabled. See TestFlight & Privacy.
6. Purposes and legal bases
- Weather and purchase verification: providing requested services and performing the usage contract, Article 6(1)(b) GDPR.
- Optional device location: your consent, Article 6(1)(a) GDPR, which you can withdraw in iOS at any time. Manually requested places do not require device location permission.
- Security and delivery: our legitimate interest in reliable, abuse-resistant services, Article 6(1)(f) GDPR.
- Support: Article 6(1)(b) GDPR for contract-related requests; otherwise our legitimate interest in answering enquiries under Article 6(1)(f).
- Beta testing: our legitimate interest in fixing errors and checking quality using TestFlight data supplied by Apple, Article 6(1)(f) GDPR.
- Legal obligations: Article 6(1)(c) GDPR where law requires retention or disclosure.
The relevant data are needed for the feature you request: local weather needs a location, and Plus needs entitlement verification. Device location access and contacting support are optional. ArvoSky does not profile you or make automated decisions with legal or similarly significant effects. Weather suggestions use deterministic rules applied to forecast data.
Storage of and access to device settings necessary for the app/widget functions you request are based on section 25(2)(2) of Germany’s TDDDG. This technical storage is separate from the legal basis for subsequent processing of personal data.
7. Retention and deletion
| Data | Duration and purpose |
|---|---|
| Places and settings | Stored locally until changed, the individual place is deleted or the app is deleted. From version 1.0 (8), delete places in “Your places” by swiping or using the context menu. This also removes ArvoSky’s stored widget reading for that place; iOS schedules the update of any still-visible widget display. Manage any device/iCloud backups separately with Apple. |
| Weather forecasts | A temporary backend cache with rounded coordinates lasts up to 15 minutes, less if the provider data expire earlier. Entries contain no IP address or subscription identifier. The app keeps forecasts in memory. For the weather widget, the app and widget share saved places, the temperature unit and one timestamped current-weather snapshot per place on your device. A snapshot is displayed only until provider expiry, at most one hour after retrieval, and is replaced or removed on the next access. There is no separate persistent forecast history. |
| Weather maps | Permitted map tiles are cached on the backend for up to one hour; metadata for up to two minutes. Temporary device caches support map rendering. Tile cache entries contain no user identifier. |
| Minute precipitation | Usable app memory for up to ten minutes. Backend caching only where provider headers expressly permit it, for up to ten minutes and no longer than the data remain valid. |
| Purchase checks and access | Purchase proofs are processed during verification and not kept in our own database. Access sessions last up to 15 minutes. Request limits use 60-second windows; this is the assessment period, not a claim about Cloudflare’s internal deletion periods. |
| Budget counters | Monthly totals of provider requests, without IP addresses, coordinates or user identifiers. The current counter is replaced on the first request of the next month. |
| TestFlight diagnostics and feedback | Availability in Apple’s systems follows its rules. We remove our own troubleshooting copies after resolution, normally within twelve months, subject to necessary statutory retention. |
| Support correspondence | Closed enquiries are normally deleted no later than twelve months after closure. If legal retention requirements or specific legal claims require longer retention, we retain only what is needed and delete it when that reason ends. |
Cache periods above are our application’s technical validity limits. Providers’ independent legal obligations and security processing, and device backups, follow their own rules. For an access request, we determine which information about you remains available and can be attributed to you.
8. Recipients and international processing
Recipients are Cloudflare for hosting and delivery; Apple for weather, maps, search and purchases; Rainbow (Weather Forecast Technologies Ltd, Cyprus, and affiliates described in its provider terms) for global maps and minute precipitation; DWD for regional radar; and Proton for support email. Required data are described above. Authorities receive data only when legally required.
Services may process data outside the EU/EEA, particularly in the United States and Switzerland. Cloudflare’s Data Processing Addendum addresses subprocessors and international transfers, including EU Standard Contractual Clauses. Depending on the recipient, adequacy decisions or other safeguards under Articles 44 et seq. GDPR apply. Apple and Proton explain their respective safeguards in the linked privacy notices. Contact us for information about safeguards applicable to a specific processing operation and copies of available safeguards.
9. Your rights and choices
Subject to applicable legal conditions, you have rights of access, rectification, erasure, restriction and data portability. You may withdraw consent for the future at any time, without affecting the lawfulness of earlier processing.
Right to object: you may object to processing based on legitimate interests on grounds relating to your particular situation (Article 21 GDPR). Email our privacy contact. We may need proportionate information to locate the data and confirm your entitlement; do not send passwords.
Change location permission in iPhone Settings → Privacy & Security → Location Services → ArvoSky. From version 1.0 (8), remove individual places in “Your places”: swipe left and choose “Delete”, swipe fully, or touch and hold → “Delete”. Delete the app to remove all local app data; manage subscriptions separately with Apple. Since there is no ArvoSky account or permanent weather history, we cannot reconstruct data we do not hold or can no longer attribute to you.
You may lodge a complaint with a data protection supervisory authority, particularly where you habitually reside or work, or where the alleged infringement occurred (Article 77 GDPR).
10. Changes
We update this policy and the required App Store disclosures when features or data flows change. The date above identifies the current version. We obtain consent where a new processing operation requires it.