Privacy and personal data

Notice version: 2026-10-27.1

Data controller

Alexandre Araújo
V. N. de Famalicão, Portugal

Data and purposes

We collect your email, password (stored as a hash), language, time zone, delivery preferences and chosen locations, including custom names and coordinates. We store creation, update and last login dates, account status and delivery history. Password recovery uses temporary tokens and an IP address hash to limit abuse. Hosting and email services may generate technical logs. Avoid entering sensitive information in location names or support requests. Test forecast requests also use an IP hash and a pseudonymised account identifier to limit abuse.

Legal bases

We use necessary data to create and manage your account and provide requested forecasts, based on performance of the service (GDPR Article 6(1)(b)). Without an email and credentials we cannot create an account; without selected locations we cannot send personalised forecasts. Security, abuse prevention and fault diagnosis rely on the legitimate interest of protecting the service (Article 6(1)(f)), limited to what is necessary. Forecast emails are the requested service. Registration is not consent to advertising, and we do not make automated decisions with legal or similarly significant effects.

Recipients and providers

Authorised administrators access data to operate the service and handle requests. New administrative notifications contain only the event type and a dashboard link, without your email or location list. The server queries Open-Meteo for searches and forecasts, sending search text or coordinates, language/time zone and the server IP, without attaching your account email or password. The email provider processes recipients and message content, including chosen locations.

Hosting and processing country: OVH — Europe (France – Gravelines), eu-west-gra
Hosting country: France — Gravelines (eu-west-gra)
Email service and processing country: OVH — Europe (France – Gravelines), eu-west-gra
International transfers and safeguards: Sem transferências para fora do EEE verificadas para alojamento/correio (OVH França, UE); Open-Meteo na UE — avaliação de subcontratantes/suporte remoto pendente

Retention and deletion

Your account and linked locations are kept while you maintain the account. You can delete it in the dashboard. Delivery history is retained for 8 days, with older records removed daily. Recovery tokens expire after 30 minutes; expired tokens and request limits older than 24 hours are removed by daily cleanup. Sessions expire after 24 hours of inactivity. Account deletion removes linked data from the active database but does not automatically erase delivered messages, old administrative copies, external logs or backups. Those follow the periods below. An email already being processed may still arrive.

Defined retention period for external logs: 8 days.

Periods for external logs, messages and backups: Logs: 8 dias. Backups: 30 dias. Os prazos para mensagens antigas e pedidos de apoio/privacidade ainda estão por confirmar.

Your rights

You may request access, rectification, erasure, restriction, objection and portability where applicable through the privacy contact. We normally respond within one month; any lawful extension for complexity will be explained within that period. Identity checks will be proportionate. You can export account data and delete your account in the dashboard. Contact us for data outside the application or to correct your email. You may complain to the CNPD or the competent authority in your country. Where processing relies on consent, you may withdraw it at any time without affecting earlier lawful processing.

Privacy contact · CNPD · Download my data

Cookies

Service conditions

15 days free; then a paid service.

Paid plans: 1 location €0.50/month | 2 locations €1.50/month | 4 locations €2.50/month | 6 locations €3.00/month.