App Store
← Back to Tap Weather

Privacy Policy

Tap Weather is built to know as little about you as possible. There is no account, no profile and no advertising. This policy explains, in plain language, which data the app and this website process, why, with whom, and which rights you have under the EU General Data Protection Regulation (GDPR) and comparable laws.

Last updated:

1. Controller and contact

The controller responsible for processing your data is:

Skybluetech – Paul Ehrhardt
C/ Moya 3, 35458 Santa María de Guía, Las Palmas, Spain
Email: hello@tapweather.app

We have not appointed a data protection officer because we are not legally required to do so. For any question about this policy or your data, write to the address above.

2. At a glance

  • No account, no profile. You never register, and we do not build a profile of you.
  • Your location stays on your device. It is only used to center the map.
  • Only the coordinates you tap (and the search terms you type) are sent to our weather and search providers to fetch a forecast.
  • Purchases are handled by Apple and our purchase service RevenueCat using an anonymous, random ID.
  • Usage analytics (Firebase Analytics by Google) tell us how the app is used – without your location, coordinates or identity. You can switch this off any time in the app’s settings.
  • No ads, no ad tracking, no sale of data. The website sets no cookies.

3. Location data

Tap Weather can optionally use your device location (While Using the App permission) to center the map on your position and to show a “current location” marker. The location is processed only on your device by the operating system and the app. We do not store it, do not transmit it to our own servers, and do not link it to any identifier.

If you tap your current position to load a forecast, the coordinates of that point are sent to the weather providers exactly like any other tapped point (see section 4). You can revoke the location permission at any time in iOS Settings → Privacy & Security → Location Services; the app remains fully usable by tapping the map.

Legal basis: your consent (Art. 6(1)(a) GDPR), given through the iOS permission dialog.

4. Weather, tide and moon requests

When you press and hold a point on the map, the app sends the geographic coordinates of that point – and nothing else about you – to the following providers in order to retrieve forecast data:

These requests are made directly from your device over encrypted connections (HTTPS). As with any internet request, the provider technically receives your device's IP address to deliver the response. We do not attach a user ID, account or advertising identifier to these requests. Moon phase, moonrise and moonset are calculated on your device.

Legal basis: performance of the contract with you – delivering the forecast you requested (Art. 6(1)(b) GDPR).

If you use the search field, the text you type is sent to Geoapify (Geoapify GmbH, Germany) to suggest matching places (geocoding autocomplete). Geoapify receives the search term and your IP address. We do not send any identifier and do not store your searches on our servers. Recent searches are kept only on your device. See Geoapify's privacy policy.

Legal basis: performance of the contract (Art. 6(1)(b) GDPR).

6. Map display

The globe and map are rendered with Apple Maps (MapKit). Map tiles are loaded from Apple as you pan and zoom; Apple processes these requests under its own Apple Maps privacy terms. Tap Weather has no access to what Apple collects in this process.

7. Purchases (Tap Weather Pro)

Tap Weather Pro is a one-time in-app purchase processed by Apple through the App Store. We never see your name, payment details or Apple Account; Apple's privacy policy applies to the payment.

To verify and restore your purchase across devices we use RevenueCat (RevenueCat, Inc., USA). RevenueCat receives a random, app-generated identifier, the App Store transaction and receipt data, the product purchased, purchase and expiry dates, device platform and OS version, and the app version. This identifier is not linked to your name, email or Apple Account. See RevenueCat's privacy policy.

The app also includes a built-in trial that unlocks Pro features for a limited period after first launch; the trial state is stored on your device.

Legal basis: performance of the contract (Art. 6(1)(b) GDPR) and, for keeping transaction records, our legal obligations (Art. 6(1)(c) GDPR).

Retention: purchase records are kept for as long as needed to provide and restore your purchase and to meet statutory retention periods.

8. Usage analytics

To understand whether the app works reliably and which features matter, the released app uses Google Analytics for Firebase (Google Ireland Ltd. / Google LLC). It records a small set of technical events, for example: app opened or closed, tutorial started or completed, daily quota reached, forecast refreshed, no weather data available, and the steps of a purchase or restore (started, completed, cancelled, failed) as well as trial notices shown.

Together with these events Firebase processes an app-instance identifier (a random ID created on install), the device model and operating system version, the app version, the device language, an approximate country or region derived from the IP address, and session timing. We do not send your location, the coordinates you tap, your searches, your favorites or any personal identifiers to analytics. Google Analytics for Firebase does not log or store IP addresses. Data may be processed by Google in the United States; Google is certified under the EU-US Data Privacy Framework and uses the EU Standard Contractual Clauses. See Firebase privacy and security.

Legal basis: our legitimate interest in operating, securing and improving the app (Art. 6(1)(f) GDPR). Where your local law requires consent for such analytics, we rely on your consent.

Retention: event-level data is retained by Firebase for 2 months and user-level data for up to 14 months, after which it is deleted or aggregated.

Objection / opt-out: you can turn analytics off at any time directly in the app: open Settings → Configuration and switch off “Share anonymous usage data”. The change takes effect immediately. You can also object by contacting us (section 15); we will then delete the analytics data associated with your app instance on request. Deleting and reinstalling the app also creates a new, unrelated app-instance identifier.

9. Data stored on your device

Your favorites, map markers, settings, unit preferences, the daily quota counter, the trial state and the data shown in widgets are stored only on your device (and, for widgets, in the app's shared App Group container). This data is not transmitted to us. It may be included in your device backups (iCloud or computer backups) that you control through Apple. Deleting the app removes this data.

10. Crash and diagnostics data

If you have chosen in iOS settings to share analytics with app developers, Apple may provide us with anonymised crash reports and usage statistics as described in Apple's App Analytics notice. We use them solely to fix bugs. You can turn this off in iOS Settings → Privacy & Security → Analytics & Improvements.

11. This website

This website is a static page. It sets no cookies and uses no analytics or tracking. When you visit, our hosting provider automatically processes technical access data (IP address, date and time, requested page, browser and operating system, referrer) in server log files to deliver the page and protect against abuse. Logs are deleted or anonymised within a short period.

Links to the App Store, Apple, Google, Open-Meteo, Geoapify or RevenueCat lead to third-party websites governed by their own policies.

Legal basis: legitimate interest in providing a secure website (Art. 6(1)(f) GDPR).

12. Recipients and international transfers

We do not sell personal data and do not share it for advertising. The recipients described above are:

  • Apple Inc. (WeatherKit, Maps, App Store, App Analytics) – USA
  • Open-Meteo (weather and marine data)
  • Geoapify GmbH (place search) – Germany
  • RevenueCat, Inc. (purchase verification) – USA
  • Google Ireland Ltd. / Google LLC (Firebase Analytics) – Ireland / USA
  • Our web hosting provider (server logs)

Where data is transferred outside the EU/EEA, this is based on an adequacy decision (including the EU-US Data Privacy Framework for certified companies) or the EU Standard Contractual Clauses.

13. Retention

We keep no personal data on our own servers. Data held by providers is retained as described in the respective sections: analytics data for 2 to 14 months, purchase records for as long as required to provide the service and by law, server logs for a short period. Data on your device remains until you delete it or the app.

14. Children

Tap Weather is not directed at children under 16 and we do not knowingly collect personal data from them. The app requires no account and collects no identity data. If you believe a child has provided us with personal data, please contact us and we will delete it.

15. Your rights

Under the GDPR you have the right to:

  • access the personal data we hold about you (Art. 15),
  • rectification of inaccurate data (Art. 16),
  • erasure (Art. 17) and restriction of processing (Art. 18),
  • data portability (Art. 20),
  • object to processing based on legitimate interests, including analytics (Art. 21),
  • withdraw consent at any time with effect for the future, for example by revoking the location permission (Art. 7(3)),
  • lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your residence, workplace or the place of the alleged infringement (Art. 77).

Because we do not hold identifying data, we may need you to provide the identifiers concerned (for example the app-instance ID or RevenueCat ID shown in the app) so we can locate your data with our providers. To exercise any right, email hello@tapweather.app.

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

16. Security

All connections between the app, this website and the providers named above are encrypted (HTTPS/TLS). Since we operate no user database, the risk of a data breach affecting your identity is minimal. Our providers apply industry-standard technical and organisational measures.

17. Changes to this policy

We may update this policy when the app or the law changes. The current version is always published at this address with its date. Material changes will additionally be announced in the app.

See also our Terms of Use · ← Back to Tap Weather