Privacy Policy

Nivora Weather · Effective 4 October 2026 · Replaces the version of 25 January 2026

This policy explains what Nivora Weather collects, why, who receives it and how long it is kept. It covers the current version of the app and older versions that are still in use. Where they differ, it says so.

The short version

There is no account and no sign-in. We don't know your name, and we don't sell your data.
Your location is used only to get the weather for it, and the app reads it only while the app is open.
Your saved places and settings stay on your phone.
Ads, analytics and crash reports are provided by Google. Where the law requires it, you are asked before ads are personalised.
Payments go through Google Play. We never see your card details.

Who we are

Nivora Weather is developed independently. Its developer ("we", "us") decides how the data described here is used, which makes us its controller under data protection law. You can reach us at nivoraapps@gmail.com.

1. What the app collects and why

Location

If you allow it, the app reads your device's location while the app is open, at the precision you choose in Android (precise or approximate). It doesn't ask for background location and doesn't read your location while it is closed.
The app keeps your last location on your phone. Background updates for notifications and widgets use that stored location and your saved places.
To get the weather, the app sends coordinates to our servers, never your name or contact details:
- forecasts, sunrise and moon times, climate averages and official warnings: rounded to about 10 metres;
- air quality: rounded to about 1 km;
- forecast maps: only the surrounding region, rounded to 2 degrees (roughly 200 km).
Requests for warnings also carry your app language and a country code.
If you don't allow location, you can add places by hand and use the app the same way.

Places you search for and save

In the current version, city search runs entirely on your phone, using a list of places built into the app (from GeoNames). What you type isn't sent anywhere.
Saved places, settings and recent forecasts are stored on your phone.
Older versions (2.0.6 and earlier) sent what you typed in the search box to Open-Meteo to find places.

What every connection carries

Any server the app connects to sees your IP address and the time. Requests to our forecast server also include the app's name and version.

Purchases and tips

Premium, Remove Ads and tips are sold through Google Play. Google handles the payment, and we never receive your card details.
The app gets the purchase status and a purchase token from Google Play and keeps them on your phone to unlock what you bought. It checks your purchases with Google Play directly and doesn't send them to our servers.
Google Play gives us order details, such as the order number, product, price and country, so we can account for sales and handle refunds.
Tips are one-off payments and don't unlock anything.

The free version shows banner ads. You can also choose to watch a rewarded ad to unlock the 10-day forecast for 24 hours. Ads are served by Google AdMob, which receives your advertising ID, IP address, device information and how you interact with the ads.
In the European Economic Area, the UK, Switzerland and other places where it is required, the app shows Google's consent form before any ad loads. Google personalises ads only if you agree. You can change your choice at any time in Settings → Privacy choices.
Premium and Remove Ads turn ads off.

Analytics and crash reports

Google Firebase Analytics records how the app is used: for example opening the Premium screen, adding a place from search (without saying which place), adding a widget, and whether a purchase succeeded. It also collects an app-instance ID, your advertising ID where available, device model, Android version, app version, and an approximate location (country and city) that Google derives from your IP address.
Firebase Crashlytics sends a report when the app crashes or hits an error. The report contains the device model, Android version, app version, the technical state of the app and an installation ID.
Your location, saved places and searches are not sent to analytics or crash reporting.

Notifications and widgets

Notifications are created on your phone from the forecast. The app doesn't use a push service, and no push token is sent anywhere.
Widget data is stored on your phone.

If you contact us

If you email us, we receive your email address and your message, and we use them only to reply.

Android backup

If Android backup is turned on, Android can include the app's settings and saved places in your Google account's backup. Android and your Google account control this, not us.

2. Who receives data

Recipient	What they receive	Why
Our forecast server (api.nivoraapps.com), hosted by Amazon Web Services in Frankfurt, Germany	Coordinates, app version, IP address	Passes forecast, sunrise, moon and Norwegian warning requests on to MET Norway. It also serves this page.
Our map and air-quality server (radar.nivoraapps.com, atmosphere.nivoraapps.com), hosted by Oracle Cloud in Frankfurt, Germany	Coordinates, app language, IP address	Forecast maps, air quality, climate averages, and official warnings outside Norway
MET Norway (Norwegian Meteorological Institute)	The coordinates of the place, sent by our server, not by your phone	Forecasts, sunrise and moon times, warnings for Norway
NASA POWER	Only the centre of a half-degree grid square (about 55 km across), sent by our server	Long-term climate averages
OpenStreetMap Foundation	Your IP address, the map area and zoom level you view, and your browser identifier, sent by your phone when the map loads	The background map. See their privacy policy.
Google (AdMob, consent form, Firebase Analytics, Crashlytics, Play Billing, in-app review)	As described in section 1	Ads, consent, analytics, crash reports, payments and ratings. See Google's privacy policy and how Google uses data from apps that use its services.

Our servers download weather data in bulk from ECMWF (forecast maps), the Copernicus Atmosphere Monitoring Service (air quality) and MeteoAlarm (official warnings outside Norway). Nothing about you is sent to them.

Older versions (2.0.6 and earlier) also contacted:

Open-Meteo, which received search text and your IP address;
time.now, which received coordinates and your IP address, to find the time zone;
unpkg.com, which received your IP address when the map library was downloaded;
Buy Me a Coffee, but only if you tapped the support link, which opened their website.

We don't sell your personal data.

3. Legal bases

This section applies if you are in the European Economic Area, the UK or Switzerland.

Weather for your location, saved places, notifications and widgets: needed to provide the app you asked for (Article 6(1)(b) GDPR). Location access is your choice in Android, and you can withdraw it at any time.
Purchases: needed to provide what you bought (Article 6(1)(b)) and to meet tax and accounting obligations (Article 6(1)(c)).
Ads: the choices you make in Google's consent form. Personalised ads are shown only with your consent (Article 6(1)(a)), which you can withdraw in Settings → Privacy choices.
Analytics, crash reports and server logs: our legitimate interests in keeping the app working and secure and in improving it (Article 6(1)(f)).

4. How long data is kept

On your phone: until you remove it in the app or uninstall the app.
Our servers' web logs (IP address, time, the address requested including any coordinates, app version): 15 days, then deleted.
Our services' technical logs, which can include the coordinates and time of a request but not your IP address: 14 days, then deleted.
Weather answers cached on our servers are stored by place, not by person.
Google: Firebase Analytics data linked to an app-instance ID is kept for up to 14 months, and Crashlytics reports for 90 days. AdMob and Google Play data are kept as described in Google's policies.
Emails: as long as needed to deal with your message.

5. Your rights

Under the GDPR and similar laws you can ask us for access to your personal data, to correct or delete it, to restrict or object to its use (including use based on our legitimate interests), and for a copy in a portable format. Where we rely on your consent, you can withdraw it at any time. To do any of this, email us.

Because the app has no accounts, the only place we hold data that could relate to you is our server logs. We can find it only if you tell us your IP address and roughly when you used the app, and after 15 days those logs are gone. Data held by Google can also be managed with Google's own tools.

You can also complain to the data protection authority in the country where you live or work.

6. Your choices

Use the app without location access by adding places by hand.
Turn notifications on or off in the app's Settings or in Android's settings.
Change your ad consent in Settings → Privacy choices.
Reset or delete your advertising ID in Android's settings (usually Privacy → Ads).
Turn ads off with Premium or Remove Ads.
Uninstall the app to remove everything it stored on your phone.

7. Security

All connections between the app and our servers are encrypted (HTTPS). Access to our servers is limited to the developer.

8. International transfers

Our servers are in Germany. MET Norway is in Norway, which is part of the European Economic Area. Google may process data in the United States and other countries; Google relies on the EU–US Data Privacy Framework and standard contractual clauses. The OpenStreetMap Foundation is based in the United Kingdom, which the EU recognises as providing adequate protection.

9. Children

Nivora Weather is not directed at children under 13, and we don't knowingly collect their personal data. If you believe a child has sent us personal data, contact us and we will delete it.

10. Changes to this policy

When this policy changes, we will post the new version at https://api.nivoraapps.com/privacy and update the date at the top.

11. Contact

Questions or requests: nivoraapps@gmail.com