Privacy Policy for myweathr.io

1. Introduction

Welcome to myweathr.io ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your email address for authentication and communication.

2.2 Authentication Data

We support the following sign-in methods:

• Apple Sign-In: We receive your Apple ID email (or relay email)
• Google Sign-In: We receive your Google account email and basic profile information (name, profile picture, where provided)
• Email/Password: We store your email and encrypted password

2.3 Route Data

When you use our Service, we collect:

• GPX route data (uploaded routes with GPS coordinates)
• Strava routes (planned routes if you connect your Strava account)
• Komoot routes (if you import from Komoot)
• Route metadata (name, distance, elevation, activity type, sport type)

2.4 User Preferences

We store your preferences including:

• Language settings (German/English)
• Unit system (metric/imperial)

2.5 Bike Profiles

We store your bike profiles including:

• Bike name and type
• Bike weight (optional)
• Tire width (optional)
• Default bike selection

2.6 Coffee Stops

For premium users, we store coffee stop data:

• Location coordinates (latitude/longitude)
• Distance along route
• Pause duration
• Optional name

2.7 Subscription Data

For premium subscriptions, we process:

• Subscription status (active, expired, cancelled)
• Subscription tier (monthly, yearly)
• Expiration date
• RevenueCat user ID (for subscription management)

Note: We do not store payment card details. iOS in-app purchases are processed by Apple via the App Store. Web subscriptions are processed by Stripe Payments Europe Ltd. through RevenueCat Web Billing. We only receive subscription status and identifiers from these processors.

2.8 Weather Data Requests

We log weather data requests for rate limiting purposes:

• Timestamp of request
• Route ID associated with request

2.9 Technical Data

We may collect:

• Device type and operating system
• App version
• Error logs (for debugging purposes)

2.10 Tour Plans & Email Reminders

If you save a planned ride (a "Tour Plan"), we store:

• The route reference, planned date, start time, average speed, and direction (forward/reversed)
• Your per-tour reminder preference (whether a reminder is enabled for that specific tour)
• Your master reminder preference on your profile and the timestamp of your consent, kept as proof of opt-in under GDPR
• A unique unsubscribe token tied to your profile so you can opt out without signing in
• The timestamp when a reminder for a given tour was sent, used to prevent duplicate emails

Reminder emails are strictly opt-in and sent only the evening before a planned ride. Each email contains a short weather summary for the route start, a deep link back into the app, and a one-click unsubscribe link. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

3. How We Use Your Information

We use the collected information to:

• Provide the Service: Display weather forecasts for your cycling routes
• Authenticate users: Manage your account and sessions
• Process subscriptions: Manage premium features and billing
• Improve the Service: Analyze usage patterns and fix bugs
• Communicate: Send important updates about your account or the Service
• Send tour reminders: If you opt in, email you the evening before a planned ride with the weather forecast for your route
• Enforce limits: Apply rate limits for free users

4. Third-Party Services

We integrate with the following third-party services:

4.1 Supabase (Database & Authentication)

Hosts our database and handles authentication.
Privacy Policy: https://supabase.com/privacy

4.2 RevenueCat (Subscription Management)

Manages in-app purchases (iOS) and web subscriptions through RevenueCat Web Billing.
Privacy Policy: https://www.revenuecat.com/privacy

4.3 Apple (App Store & Sign-In)

Processes iOS app purchases and provides Sign in with Apple.
Privacy Policy: https://www.apple.com/legal/privacy/

4.4 Google (Sign-In)

Provides Sign in with Google. If you choose this method, Google shares your email and basic profile information with us.
Privacy Policy: https://policies.google.com/privacy

4.5 Stripe (Web Payments)

Processes web subscription payments via RevenueCat Web Billing. We never see or store your payment card details.
Privacy Policy: https://stripe.com/privacy

4.6 Strava (Optional Integration)

If connected, we access your planned routes (not activities). You can disconnect at any time in Settings.
Privacy Policy: https://www.strava.com/legal/privacy

4.7 Uberspace (Hosting & Email Delivery)

Uberspace GmbH (Germany) hosts our marketing website and delivers transactional reminder emails via its SMTP server. For email delivery, Uberspace processes only the recipient address and the email content for the purpose of sending the message.
Privacy Policy: https://uberspace.de/en/about/privacy/

4.8 Weather Data Providers

• Apple WeatherKit: Primary weather data provider (no personal data shared)
• Brightsky / DWD (Deutscher Wetterdienst): Provides weather data for routes in Germany (no personal data shared)
• Open-Meteo: Fallback weather data provider, also used to fetch the short forecast included in reminder emails (no personal data shared)

4.9 OpenStreetMap / Overpass

We query OpenStreetMap data via the Overpass API to estimate road surface roughness along your route. Only anonymous bounding-box coordinates are sent — no account or personal data.
Privacy Policy: https://wiki.osmfoundation.org/wiki/Privacy_Policy

4.10 Sunrise-Sunset.org

Provides sunrise/sunset times based on coordinates (no personal data shared).

5. Data Storage and Security

5.1 Data Location

Your data is stored on servers provided by Supabase, located in the European Union.

5.2 Security Measures

We implement appropriate security measures including:

• Encrypted data transmission (HTTPS/TLS)
• Secure password hashing
• Row-level security in our database
• Regular security updates

5.3 Data Retention

• Account data: Retained until you delete your account
• Route data: Retained until you delete the route or your account
• Tour plans: Retained until you delete the tour or your account
• Reminder consent timestamp: Retained as long as your reminder opt-in is active, plus a limited period after withdrawal as proof of valid consent
• Weather cache: Automatically expires after 1 hour

6. Your Rights

You have the right to:

6.1 Access Your Data

View your profile and routes in the app.

6.2 Correct Your Data

Update your profile information in Settings.

6.3 Delete Your Data

Delete individual routes or your entire account in Settings. Account deletion permanently removes all your data.

6.4 Export Your Data

Contact us to request a copy of your data.

6.5 Disconnect Third-Party Services

Revoke Strava access at any time in Settings.

6.6 Withdraw Reminder Consent

You can disable tour reminder emails at any time via the master toggle in Settings, the per-tour checkbox when saving a tour, or the one-click unsubscribe link in any reminder email. Withdrawal takes effect immediately and does not affect the lawfulness of processing based on consent before its withdrawal.

7. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

8. International Data Transfers

If you access the Service from outside the European Union, your data may be transferred to and processed in the EU.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy in the app and updating the "Last Updated" date.

10. Contact Us

If you have questions about this Privacy Policy, please contact us at:

Email: hello@myweathr.io
Website: https://myweathr.io