Privacy Policy
Last updated EFFECTIVE_DATE · Applies to the CloudCrown iOS app and cloudcrown-app.space
CloudCrown is a planner for outdoor activities. This policy explains exactly what the app collects, why, who receives it, and how to get rid of it. It is written to be read, not to be skimmed past.
The short version. CloudCrown works fully without an account, and everything you create stays on your device unless you sign in. We collect an email address only if you choose to create one. On every launch the app sends installation and attribution data — including your IP address — to our server and onward to our attribution provider. You can delete your account and all synced data from inside the app at any time.
Who we are
The data controller is LEGAL_ENTITY_NAME, LEGAL_ENTITY_ADDRESS. For any privacy question or request, write to support@cloudcrown-app.space.
What we collect
1. Account data — only if you create an account
Your email address and a hashed password. The password is stored only as an Argon2id hash; we never hold the password itself and cannot recover it. An account is entirely optional and exists only to synchronise your data between your own devices.
2. The records you create — only synchronised if you have an account
- Your comfort limits and sensitivity settings
- Saved places: the name and note you give them, their coordinates and time zone
- Activity templates and their conditions
- Saved plans, including the forecast explanation each was based on
- Alert rules
- Reviews you record after an activity (rating, tags, notes)
Signed out, these never leave your device. Weather snapshots and the in-app activity log are never uploaded at all.
3. Installation and attribution data — collected on every launch
This is sent before you sign in and does not require an account. It tells us which campaign or link brought you to the app, and lets us support the install.
| Data | Why |
|---|---|
| AppsFlyer install identifier | The key that identifies this installation. A reinstall produces a new one. |
| Attribution details (campaign, media source, install type, deep links) | To understand where installs come from. |
| IP address | Recorded with the install for fraud prevention and coarse region. |
| Device model, iOS version, app version, language, time zone | Support and compatibility. |
| App bundle identifier, App Store identifier, Firebase project identifier | To identify which app and configuration reported the install. |
| Push notification token | To deliver notifications you asked for. |
| Advertising identifier (IDFA) | Only if you allow tracking when iOS asks. Decline and it is never collected; an empty placeholder value is discarded rather than stored. |
| Launch count | To distinguish a first run from a returning one. |
This payload is encrypted on your device (AES-256-GCM) before it is sent to our server. We do not collect a browser User-Agent.
4. Location — only when you ask for it
CloudCrown requests your location only when you tap Use Current Location. It is never read in the background. Before any request leaves your device the coordinates are rounded to the precision you chose in Settings — exact, roughly 1 km, or roughly 10 km. Declining location access blocks nothing: searching for a place by name works identically.
Coordinates for your saved places are sent to Open-Meteo to fetch conditions. They are not attached to your identity in those requests.
5. Calendar — write-only, through the system
If you tap Add to Calendar, iOS shows its own event editor. CloudCrown never reads your existing events and never writes without that dialog. We record that a plan was linked to an event only after iOS confirms it was saved.
What we do not collect
- No contacts, photos, microphone, camera, or health data
- No advertising networks and no ad targeting
- No third-party product-analytics SDKs
- No cross-app or cross-site tracking beyond the install attribution described above
- No selling of personal information, ever
Who receives your data
| Recipient | What they receive |
|---|---|
| Our own server api.cloudcrown-app.space | Account data, your synced records, and the installation data above. |
| Open-Meteo | The coordinates of the place you are checking, at your chosen precision, plus your IP address as part of the request. No account or device identifier is sent. |
| AppsFlyer | Install and attribution data, as its SDK is embedded in the app. |
| Google Firebase Cloud Messaging | The device token required to deliver push notifications. |
| Our attribution partner | The installation data above, including IP address, forwarded from our server. |
We use no other processors. We do not share your saved places, plans or reviews with any third party.
Legal basis
- Contract — account data and synchronisation, so the service you asked for can work.
- Consent — the advertising identifier (through Apple's tracking prompt) and push notifications. Withdraw either at any time in iOS Settings.
- Legitimate interests — install attribution, fraud prevention, and keeping the service running.
How long we keep it
- Account and synced records — until you delete the account. Deletion removes them immediately from the live database; residual copies in encrypted backups are purged within 30 days.
- Installation and attribution records — retained while they remain useful for attribution and fraud prevention. Write to us to have the records for your installation removed.
- On your device — until you delete the app or use Delete all data in Settings.
Deleting your account
Open Settings → Account → Delete Account in the app, confirm with your password, and type DELETE. This removes the account itself, not merely its contents: the account record, every synced item and all sessions are destroyed, scheduled reminders are cancelled, and local copies are erased from the device.
There is no password reset. This is deliberate — the app tells you so before you register. If you no longer know your password you cannot sign in, and therefore cannot reach the in-app deletion screen. In that case email support@cloudcrown-app.space from the address on the account and we will delete it for you.
Your rights
Depending on where you live, you may have the right to access, correct, export, restrict or erase your personal data, to object to processing, and to lodge a complaint with your data protection authority. To exercise any of these, email support@cloudcrown-app.space. We reply within 30 days.
You can export your own data at any time without asking us: Settings → Your Data → Export produces a JSON file of everything stored.
Security
- All traffic uses HTTPS. The app refuses plain connections.
- Attribution payloads are encrypted on the device before transmission.
- Passwords are stored only as Argon2id hashes.
- Session tokens live in the iOS Keychain, on that device only, and are revoked immediately on sign-out, password change, or account deletion.
- Local files are protected by iOS data protection and unreadable before first unlock.
No system is perfectly secure. If you believe you have found a vulnerability, please write to support@cloudcrown-app.space before disclosing it publicly.
International transfers
Our server is hosted in HOSTING_REGION. Our attribution and messaging providers may process data in other countries, including the United States, under the safeguards described in their own policies linked above.
Children
CloudCrown is not directed at children under 13 and we do not knowingly collect their data. If you believe a child has provided us with personal information, write to us and we will remove it.
Not medical advice
CloudCrown reports weather, air-quality and pollen measurements and compares them against limits you set. It provides no medical, health or safety advice, and the optional starting values it offers are general — not clinical thresholds. Nothing in the app should be used to make a medical decision.
Changes
If this policy changes materially we will update the date at the top and, where the change affects how we handle data you have already given us, notify you in the app.