AURA METEO

Privacy policy

Aura Meteo · updated 27 October 2026

The controller for Aura Meteo is Marco De Vincentis. For privacy questions and data requests, contact marco.devincentis81@gmail.com.

Forecasts and locations

You can search for a city without granting location access. Place searches are sent to Open-Meteo, which uses GeoNames data. When you request your current location, iOS asks for permission; Aura rounds coordinates to two decimal places before requesting weather. Coordinates for the place viewed are sent to Apple Weather or Open-Meteo, depending on your chosen source. Model comparisons, marine conditions and air quality use Open-Meteo; air quality estimates come from CAMS/Copernicus. For marine conditions, approximate nearby coordinates may be queried to find a reference point within 35 km. Marine estimates do not assess bathing water quality. Even when Apple Weather is selected, the air quality card sends rounded coordinates to Open-Meteo through Cloudflare. Providers also receive technical connection information, such as an IP address. Aura does not track your movements in the background.

Secure access to commercial weather

Open-Meteo requests pass through Aura’s server on Cloudflare, which receives the search or rounded coordinates and calls the commercial service without exposing its API key in the app. Aura generates a DeviceCheck token and sends it to Cloudflare for validation with Apple. The original token is not retained; its cryptographic hash is kept for up to 90 days to prevent reuse. A random installation credential stays in Keychain; the server keeps only its hash and expiry. Access is renewed after 30 days; inactive registrations are deleted after 90 days. Aggregate usage counters are retained for up to 31 days. The IP address is used temporarily to rate-limit abuse. DeviceCheck is not used to track movements or profile people.

On-device data, widgets and Watch

Preferences, the last searched city and weather summaries are stored on your device. Air quality for the last searched city is saved locally for offline use, retaining the estimate date and last update time. It is replaced by the next place and is not displayed after 7 days; the expired copy is deleted when the cache is next accessed. This copy is not saved for current location. Current location is not saved as the last selected city. Summaries shared with widgets and your paired Apple Watch contain the place name, forecast, source, timestamp and Premium access status with any expiry; they contain no purchase receipts or API keys. The Watch summary can also include air quality estimates and their timestamps, available offline for up to 7 days. Clothing advice is computed on the device from weather data without collecting body measurements. Your Watch also receives the place coordinates rounded to two decimal places to refresh Apple Weather directly without opening your iPhone. Coordinates are stored locally in the shared Watch app and complication cache and sent to Apple for forecasts; the Watch does not activate GPS. Local summaries remain until replaced or the app is removed. Notification credentials are stored in Keychain and may survive app deletion.

Optional notifications

If you enable notifications, we send the Apple Push device token, rounded coordinates of the monitored place, place name, time zone, language and rain/alert preferences to a server hosted by Cloudflare. A random identifier and technical credential allow the registration to be updated or deleted. The server checks WeatherKit for your chosen place and sends notifications using Apple Push Notification service. The monitored place stays fixed when you browse other cities.

Processing jobs on Cloudflare contain only random installation identifiers and remain in the queue for at most 24 hours; stale jobs are not processed. Registrations are removed after 90 days without updates; technical notification deduplication records are removed after 7 days. “Disable and delete from server” requests deletion of the registration and place. Turning off permission in iOS prevents alerts being displayed but does not itself delete server data. Provider backups and operational logs follow their technical retention periods. Notifications are currently a private pilot; public availability will be stated in the app.

Purchases

Apple manages Premium purchases through StoreKit. Aura verifies subscription status on-device and does not receive card or bank account details. Apple handles billing under its own terms and privacy policy. Manage or cancel subscriptions in your Apple account settings.

Radar and external sites

For Italian locations, Aura opens the official Italian Civil Protection radar viewer in a web view with nonpersistent storage. In version 1.0 Aura blocks the Google Analytics and Google Tag Manager tags found in the viewer before loading the map; if the filter cannot be enabled, the embedded view is not loaded. That site still receives connection information and interactions you make in its viewer and has its own privacy and cookie practices. External links are subject to their operators’ policies.

Purposes and legal bases

Information needed for forecasts and features you request is used to provide the service. Location and notifications are optional and depend on your choices and permissions, which you may withdraw in settings. Necessary security and operational data is used for our legitimate interest in protecting the service. Support messages are used to answer requests and meet applicable legal obligations.

Advertising, analytics and recipients

Aura contains no advertising, behavioural analytics SDKs or cross-app/site tracking. We do not sell personal information. Apple, Open-Meteo and Cloudflare provide the services described above. Their processing and any international transfers follow their policies and applicable safeguards. Providers may retain network operational data under their own policies.

Your choices and rights

You can deny location access and search for a city, withdraw notification permission, delete notification registration in the app, and remove local app data by uninstalling Aura. Where applicable, you may request access, correction, deletion, restriction, objection and portability, and withdraw consent without affecting earlier lawful processing. Contact the address above without sending passwords, keys or financial information. You may complain to your competent supervisory authority, including the Italian data protection authority. Support emails are retained for as long as needed to handle the request and applicable obligations.