This policy explains what data Weather with love, the weather app with Love notes, handles. It is made by apps4all, that is, APPS 4 ALL, S. L., tax ID B05682919, based at Josefina Mascareñas, 3, 08173 Sant Cugat del Vallès (Barcelona), Spain, who decides what is done with the data (the data controller, in legal terms). For anything about your data: jcgualde@apps4all.app.
The short version
The weather works with no account and no data about you. Love notes do need a user, but we don't ask for your name, phone number or email. What you write, your photos and your videos are encrypted on your phone and can only be opened by the recipient's phone. We can't read them.
The weather
To give you the forecast, the app asks Open-Meteo (open-meteo.com) for the coordinates of the city you're looking at. We send it nothing that identifies you, although, like any internet service, Open-Meteo receives the IP address the request comes from. The city you look at, the people in Your people and your settings are stored only on your phone. The app doesn't ask for your location.
Love notes: what we store
- An anonymous identifier for your user, created by Google Firebase when you sign up.
- Your invitation code and your public key, so other people can write to you.
- The code issued by Google's notification system (Firebase Cloud Messaging) to let your phone know something has arrived. The notification is empty: it carries neither the message nor who sent it.
- Until when you can send notes, based on the love cards you have used.
- For the welcome card, a hash of a random number from your phone, not linked to your user, so no more than three are given per phone.
- For each love card, a hash of its code, its months, its design and whether it has been used. Never who bought it or who redeemed it.
- Like any server, Firebase records the IP address of connections in its technical logs.
The secret city is not stored: only an encrypted hash on your phone that doesn't reveal which city it is.
Your messages, photos and videos
They travel end-to-end encrypted. Until the other person picks them up, they wait encrypted on our server; once picked up they are deleted from it, and if nobody picks them up they are deleted automatically after 30 days. Group photos and videos are kept encrypted for up to 30 days so everyone can pick them up. Your history is stored only on the phones, never on the server or in the photo gallery.
When you report someone
This is the only case in which we see content. If you report someone, your phone sends us, already decrypted, up to five messages from that person (with their photos or videos), their code, yours and the time. Never your own messages. Only the controller, APPS 4 ALL, S. L., reviews them. Reports are kept for six months, unless there is an open investigation or an authority asks us to keep them longer.
If that person has broken the terms, we may ban them: we record their code and their phone's notification code so they can't send again.
Moving your account to another phone
If you use Move to another phone, your account is uploaded to our server encrypted with a key that only travels in the QR code. It is deleted as soon as the new phone picks it up, or by the next day at the latest.
Purposes and legal basis
We process this data to provide the service you ask for (the legal basis is our contract with you) and to protect users through reports and bans (our legitimate interest, and yours, in nobody using the app to cause harm). We don't use your data for advertising, we don't build profiles and we don't sell it.
Where it is and who else sees it
The data is stored on Google Firebase servers in Belgium (europe-west1 region). Google processes it on our behalf, under contract. Notifications to your phone go through Google's systems and, on iPhone, Apple's, which may be outside the European Union; Google is certified under the EU-US Data Privacy Framework and applies the European Commission's standard contractual clauses.
Love cards are charged by Google Play or the App Store, under their own terms: we don't see your payment details. We will only hand over data to a judge or an authority that can legally require it, and only what we have.
How long we keep it
For as long as you keep your user. When you delete it in the app (in your contacts, menu, Delete this account), everything in your account is deleted at once, on the phone and on our servers. The only exceptions are the ones already mentioned: reports, for six months, and the welcome card hash, which isn't linked to anyone.
Children
Love notes are only for people aged 18 and over.
No analytics or ads
The app contains no analytics, advertising or tracking tools.
Your rights
You can ask us for access to your data, or to correct it, erase it, port it or object to its use, by writing to jcgualde@apps4all.app. We reply within one month. Since we don't know who you are, we'll ask for your invitation code to find your account. If you believe your rights have not been respected, you can complain to the Spanish Data Protection Agency (www.aepd.es) or to the authority in your country.
Changes to this policy
If the app starts handling data differently, this page will change first and we'll say so in the app. The date above shows the latest version.