Privacy Policy

Summary

You can use WeatherVector without an account. If you create one, we store your email, settings, saved places and alert choices so the app works across your devices.
Your device's location is used on your device. It is only sent to our servers if you save it as a place.
We don't sell your personal information, and we don't share it for targeted advertising.
We don't use analytics or advertising trackers in the app.
Payments are handled by Stripe, or by Apple or Google for in-app purchases. We never see your full card number.
You can delete your account and its data yourself, at any time, from inside the app.

Who this covers

This policy applies to the WeatherVector website (weathervector.app), the web app (web.weathervector.app), and the WeatherVector apps for iPhone, iPad, Android and Windows (together, the "Service"). "WeatherVector", "we", "us" and "our" mean the operator of the Service.

What we collect

If you don't create an account

We don't ask you for any personal information. Your settings and the last place you viewed are kept on your device. Like any website, our hosting provider receives technical request data (see "Technical data" below).

Account information

When you create an account, we collect:

Email address and password. Your password is stored only as a secure hash by our authentication provider. We can't read it.
Google sign-in details, if you choose to sign in with Google: your email address and basic profile information Google shares with us.
Display name, if you add one.
Two-factor authentication, if you turn it on. We store the information needed to verify your authenticator codes.

Information you save in the app

Saved places: the name you give each place and its coordinates (up to 50 places).
Settings: your radar, layer, color table and display preferences.
Alert preferences: which alert types you want, alert zone distances, and any states you choose for US-wide alerts.
Broadcast settings: your lower-third name, tagline and logo, and a private key for your streaming overlay link. We store only a scrambled (hashed) version of that key.

Push notification information

When you turn on alerts on a device, we store the push address your browser or operating system gives us for that device. It lets us send notifications to that device and nothing else. We also keep a short record of which alerts we've already sent so you don't get the same alert twice.

Subscription and payment information

If you buy Plus or Pro, we store your plan, its status, its renewal date and an identifier from the payment provider. Card details are collected and stored by Stripe, or by Apple or Google for in-app purchases. We don't receive or store your full card number.

Technical data

When your device connects to our servers, our hosting provider automatically receives standard request data, such as your IP address, browser or device type, the page or address requested, and the time. This is used to deliver the Service, keep it secure and fix problems.

Messages you send us

If you email us, we keep your message and email address so we can reply and help you.

Location

WeatherVector asks for your device's location only when you use a feature that needs it, such as "My location", the forecast for where you are, or storm arrival times for your current position. You can say no and still use the app by searching for a place.

On your device. Your location is used on your device to center the map, pick the nearest radar and check for storms headed your way. A rounded copy is kept in your device's storage so the app can open where you left off.
Forecasts. When you open a forecast, your device requests it directly from the National Weather Service using that location.
Saved places. If you choose "Add my location" as a saved place, those coordinates are stored with your account. This lets us send storm and warning alerts for that place, even when the app is closed.
No background tracking. We don't track your location in the background, keep a location history, or sell location data.

How we use your information

To run the Service: show radar and warnings, sync your settings and saved places, and work out when storms will reach your places.
To send the push alerts you turn on.
To manage your account, your subscription and the features your plan includes.
To keep the Service and your account secure, including preventing abuse and fraud.
To answer your questions and support requests.
To send important messages about your account, such as sign-in links, password resets, security notices and changes to these policies. We don't send marketing email unless you ask for it.
To comply with the law.

We don't use your information for advertising, and we don't build advertising profiles.

We share information only with the service providers that help us run WeatherVector, and only as much as they need to do that:

Provider	What they do	What they receive
Supabase	Accounts, sign-in and database	Account information and everything you save in the app
Vercel	Website and server hosting	Technical request data
Stripe	Web subscription payments	Email, payment details and billing information
Apple and Google	In-app purchases, if you subscribe in the iPhone or Android app	Payment information, under their own policies
Google	Optional "Sign in with Google"	The sign-in request
Cloudflare Turnstile	Bot protection on sign-up and sign-in forms	Technical data from your browser
Push services (Apple, Google, Mozilla, Microsoft)	Delivering push notifications to your device	The notification content and your device's push address
Email delivery provider	Sending sign-in links and account email	Your email address and the message

Weather and map data

To show radar, maps and forecasts, your device downloads data directly from public sources. These include NOAA, the National Weather Service, NASA, the Iowa Environmental Mesonet, CARTO and Esri map tiles, RainViewer and Open-Meteo place search. These requests include standard technical data like your IP address. When you search for a place or open a forecast, the search text or coordinates go to that source. When you look up a full street address, our server passes it to the US Census Bureau's address lookup.

Other sharing

Legal reasons. We may share information if the law requires it, or to protect the rights, property or safety of our users, the public or WeatherVector.
Business transfers. If WeatherVector is sold or merged, your information may transfer to the new owner. They must follow this policy or tell you about any changes.
With your permission. We'll share information in other ways only if you ask us to.

We don't sell your personal information, and we don't "share" it for cross-context behavioral advertising, as those terms are defined in California law.

Storage on your device

The app stores some information in your browser or device storage. This includes your settings, your last map view and location, and your sign-in session. It's needed for the app to work, and none of it is used for tracking or advertising. The website and app don't use advertising or analytics cookies.

This website loads fonts from Google Fonts, and the home page loads live warnings directly from the National Weather Service. Both receive standard technical data such as your IP address when the page loads.

How long we keep it

Account data is kept until you delete your account. Deleting your account permanently removes your profile, settings, saved places, alert preferences, push addresses and overlay key from our database right away.
Sent-alert records are kept only long enough to avoid duplicate notifications, usually a few days. They're deleted along with the place or account they belong to.
Payment records may be kept by us and by Stripe, Apple or Google for as long as tax, accounting and legal rules require, even after you delete your account.
Technical logs are kept by our hosting provider for a limited time under its own retention policy.
Backups may hold deleted data for a short period before they're overwritten.

Security

We protect your information with encryption in transit (HTTPS), database rules that limit every account to its own data, optional two-factor authentication, and a strict content security policy in the app. No service can promise perfect security. If we learn of a breach that affects your personal information, we'll notify you as the law requires.

Your choices and rights

Access and correct. You can see and change your saved places, settings and alert choices in the app at any time.
Delete. You can delete your account in the app: open Account settings and choose Delete my account. You can also ask us by email. See Delete your account.
Location. You can turn off location access for WeatherVector in your browser or device settings at any time.
Notifications. You can turn alerts off in the app, or block notifications in your browser or device settings.
Copy of your data. You can ask us for a copy of the personal information we hold about you.

Depending on where you live, you may have more rights, such as under the California Consumer Privacy Act or the GDPR. These can include the right to know what we collect, to correct or delete it, to get a copy, to object to or limit certain uses, and not to be treated differently for using these rights. To make a request, email us at the address below. We'll need to confirm the request comes from you, usually through the email on your account. You can also have an authorized agent make a request for you. If you're in the European Economic Area or the UK, you also have the right to complain to your local data protection authority.

Where the GDPR applies, we rely on these legal bases: performing our contract with you (to provide the Service), our legitimate interests (to keep the Service secure and working), your consent (for location and notifications, which you can withdraw at any time), and legal obligations.

Children

WeatherVector isn't directed at children under 13, and we don't knowingly collect personal information from them. If you believe a child under 13 has given us personal information, contact us and we'll delete it.

International users

WeatherVector is run from the United States, and our service providers may process information in the United States and other countries. If you use the Service from outside the US, your information will be transferred to and processed in the US, which may have different data protection rules than your country.

Changes to this policy

We may update this policy from time to time. We'll change the "Last updated" date at the top. If the changes are significant, we'll also let you know in the app or by email before they take effect.

Contact

For questions about this policy or your information, email help@weathervector.app.