Privacy Policy

This Privacy Policy describes how the Campanula application ("Application") for mobile devices, developed by Campanula team ("Service Provider," "we," "us," or "our"), collects, uses, stores, and shares your information. The Application is offered as a Freemium service. By using the Application, you agree to the collection and use of information as described in this Privacy Policy.

Information We Collect

Information You Provide

When you register for an account or use certain features, we may collect the following information:

• Account information: Email address, name (when provided via Apple Sign-In or Google Sign-In), and account credentials.
• User-generated content: Plans, condition rules, location preferences, and other content you create within the Application.
• Communication data: Information you provide when contacting our support team.

Information Collected Automatically

When you use the Application, we may automatically collect the following information:

• Device information: Device model, manufacturer, operating system version, app version, build number, and unique device identifiers. This information is included in API request headers for traffic identification and compatibility diagnostics.
• Location data: Precise GPS coordinates (latitude and longitude) and geocoded location names (city, region, country), collected to provide location-specific weather forecasts and map functionality.
• Push notification tokens: Firebase Cloud Messaging (FCM) device tokens, stored server-side to deliver weather condition alerts.
• Language and locale: Your device language preference, used to deliver localized push notifications.
• Device integrity data: Information about whether your device is jailbroken, rooted, or running on an emulator, collected for security purposes.
• Usage and diagnostics: Crash reports, error logs, stack traces, and performance metrics collected via Sentry.
• Subscription data: Subscription status, entitlement information, and transaction identifiers processed through RevenueCat, Apple App Store, and Google Play Store.

How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, and maintain the Application and its features.
• To deliver weather forecasts and condition-based alerts for your saved locations.
• To send push notifications when weather conditions match your configured plans.
• To process and manage your subscription and in-app purchases.
• To authenticate your identity and secure your account.
• To monitor, diagnose, and resolve technical issues and crashes.
• To analyze aggregated usage patterns and improve the Application.
• To enforce subscription tier limits and prevent abuse.
• To communicate with you regarding important updates, required notices, or support requests.

Location Data

The Application collects your precise device location to provide core functionality:

• Weather forecasts: Your coordinates are transmitted to our backend, which queries the Norwegian Meteorological Institute (MET Norway) API to retrieve weather data for your location.
• Map display: Your location is used to center the interactive map and load map tiles from Thunderforest / OpenStreetMap.
• Background location: On iOS, the Application may access your location in the background to deliver timely weather alerts when the app is not actively in use. You can control this in your device's location settings.

Location data associated with your plans is stored on our servers to continuously evaluate weather conditions against your configured rules. You may delete your location data by deleting the associated plans or your account.

Push Notifications

The Application uses Firebase Cloud Messaging (FCM) to deliver push notifications when weather conditions match your configured plans. Your FCM device token and language preference are stored on our servers to facilitate notification delivery. You can disable push notifications at any time through your device's system settings. Disabling notifications will not affect other functionality of the Application.

Third-Party Services

The Application integrates with third-party services that may collect and process your data under their own privacy policies. We encourage you to review the privacy policies of these services:

• Supabase — Backend infrastructure, authentication, and database hosting.
• RevenueCat — Subscription and in-app purchase management.
• Firebase (Analytics, Cloud Messaging, App Check) — Analytics, push notification delivery, and app attestation.
• Google Services (Sign-In, Analytics 4) — Authentication and revenue event analytics.
• Apple (Sign in with Apple) — Authentication.
• Sentry — Error tracking, crash reporting, and session replay on the web application (with text masking and media blocking enabled).
• MET Norway (Norwegian Meteorological Institute) — Weather forecast data provider.
• Thunderforest / OpenStreetMap — Map tile rendering.
• Google reCAPTCHA — Bot protection on the web application.

Disclosure of Information

We may disclose your information in the following circumstances:

• As required by law, such as to comply with a subpoena, court order, or similar legal process.
• When we believe in good faith that disclosure is necessary to protect our rights, your safety or the safety of others, investigate fraud, or respond to a government request.
• With trusted service providers who work on our behalf, do not have an independent right to use the information we share with them, and have agreed to adhere to the practices described in this Privacy Policy.
• In connection with a merger, acquisition, or sale of all or a portion of our assets, with notice provided to you before your information is transferred and becomes subject to a different privacy policy.

Data Storage and Caching

The Application stores certain data locally on your device using encrypted key-value storage for performance and offline functionality. This includes authentication session data, cached weather forecasts, location preferences, and map tile caches. This data remains on your device and is cleared when you uninstall the Application.

Server-side data is hosted on Supabase infrastructure. Error telemetry is processed by Sentry (hosted in the European Union).

Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with the Application's services. Automatically collected diagnostic and analytics data is retained for up to 24 months and may thereafter be stored in aggregate form. If you request deletion of your account, your personal data is immediately removed from active systems. Routine disaster recovery backups rotate on a 60-day lifecycle, after which snapshots are permanently overwritten and purged.

Account Deletion

You may request deletion of your account and all associated personal data at any time by using the account deletion feature within the Application or by contacting us at support@campanula.app. Upon processing your request, we will permanently delete your account profile, plans, match history, and stored location data from our active database. Historical disaster recovery backup snapshots are automatically overwritten and permanently purged within 60 days. Certain data may be retained where required by law or for legitimate purposes such as fraud prevention. Data already processed by third-party services (such as RevenueCat or Sentry) is subject to those services' own retention policies.

Your Opt-Out Rights

You can stop all data collection by the Application by uninstalling it using the standard process available on your device. You may also:

• Disable push notifications in your device's system settings.
• Revoke location permissions in your device's privacy settings.
• Request account and data deletion as described above.

Children's Privacy

The Application is not directed to children under the age of 13. We do not knowingly collect personally identifiable information from children under 13. If we discover that a child under 13 has provided us with personal information, we will promptly delete it from our servers. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@campanula.app.

Security

We are committed to protecting your information. We implement physical, electronic, and procedural safeguards to protect data we process and maintain, including encryption of local storage, secure HTTPS communication, and restricted access controls. However, no method of electronic storage or transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the updated Privacy Policy on this page and updating the effective date below. Your continued use of the Application after such changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

This Privacy Policy is effective as of 2026-08-05.

Contact Us

If you have any questions regarding this Privacy Policy, your personal data, or our data practices, please contact us at support@campanula.app.