Privacy and Security
Naola is designed to give you accurate weather without compromising your privacy. Here's exactly what we do and don't collect.
What We Collect
| Data | Why | Where It's Stored |
|---|---|---|
| Your location (raw coordinates) | To fetch weather for your area | On your device only. Sent to weather services per request but never saved on our server in raw form. |
| Rounded location (about 1 km) | So nearby requests can share one forecast or place name | In short-lived caches on our server, from 2 minutes to 1 day. Not linked to any user, device, or IP. Nothing is kept to measure accuracy. |
| Anonymized IP address | To prevent abuse (rate limiting) | Stored as an irreversible hash. Automatically deleted after 7 days. |
| Feedback messages | To improve the app | On our server, not linked to you: no email, name, account or device identifier attached (a one-way hash used to catch duplicates is kept with it, see the privacy policy §1.3). |
| Account data | To recognize a subscription on your device, and across devices and the web if you sign up | Every install: an anonymous device account (numeric id, placeholder address, hash of a keystore secret). If you sign up: email, password hash, OAuth identifiers. Plus one session UUID per slot (one phone, one browser) and activation codes. Erased on account deletion. |
| Subscription records | To know whether you have an active Advanced subscription | Your numeric Naola account id (the device account's id if you never signed up) and your platform. No name or email is sent to RevenueCat. |
| Ad impression and click counters | To know which self-served ad cards perform | Plain integers per ad row. No foreign key, no IP, no timestamp, so impossible to link back to any user. |
| Website analytics | To see how many people visit the site and which pages they use | On a Matomo server we rent from o2switch in France, reached through Cloudflare. No cookies, no IP address stored, nothing after a "?" in a web address; individual visits deleted after 6 months. |
What We Don't Collect
- No sign-up required: only an anonymous device account, with no personal data
- No email addresses, unless you choose to sign up
- No names or personal identifiers
- No tracking: the apps have no analytics, and the website's analytics sets no cookies and stores no IP address
- No advertising identifiers (IDFA, GAID)
- No third-party ad networks or SDKs
- No tracking cookies: only the strictly-necessary
langcookie (your language, one year, clearable any time) and, after you activate Naola on the web, asessioncookie. The mobile apps use no cookies. - No crash reporting or telemetry
- No data sold to third parties, ever
Ads Without Tracking
Free-tier users see a single small ad card. Unlike most apps, our ads are entirely self-served:
- No third-party ad SDKs (no Google AdMob, no Meta)
- No user profiling or targeting
- No tracking pixels or cookies
- No way to link an ad impression to any user or device
- No consent banner needed, because there's nothing to consent to
Affiliate links: Some ads may be affiliate links through an affiliate network such as Awin, marked as such, and Naola may earn a commission if you buy. The link goes through the network's tracking address to the merchant and carries only which ad it is and whether you are on iPhone, Android or the web, never data about you. Once you leave Naola, the network's and the merchant's own privacy policies apply, and they may set cookies on their sites to attribute a purchase to the ad.
Weather Data Providers
When you check the weather, your coordinates are sent to these providers to fetch forecast data:
- Open-Meteo (Free tier)
- OpenWeather (Free tier)
- Apple Weather (Free tier)
- WeatherAPI.com (Advanced)
- Visual Crossing (Advanced)
- Google (Advanced)
Each provider receives only your coordinates for the duration of the request. No other personal data is shared.
Your Rights
Under GDPR (Articles 15, 17, and 20) and similar regulations, you can access, delete, or export your data. Naola implements these as self-service actions in the app, so you don't need to email support or wait on a manual process (email remains an option if you can't use the app):
- Export: Settings → Account → Export my data. Returns a JSON file of every row linked to your account.
- Delete: Settings → Account → Delete my account. Permanently removes every user-linked row from our database after a two-step confirmation.
Note: Deleting your Naola account does not cancel your Apple or Google subscription. Cancel that in the store first (iPhone: Settings → [your name] → Subscriptions; Android: Google Play → Payments & subscriptions → Subscriptions), otherwise you'll continue to be charged.
Contact
For privacy questions or data requests: [email protected]
For the full legal text, see the Privacy Policy.